Radio frequency certificates of authenticity

• US 20070005367A1
• Filed: 06/29/2005
• Published: 01/04/2007
• Est. Priority Date: 06/29/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Kirovski, Darko, DeJean, Gerald
• Granted Patent: US 7,677,438 B2
• Time in Patent Office: Days
• US Class Current: 704/273
• CPC Class Codes: G06K 19/086 with markings consisting of randomly placed or oriented elements, the randomness of the elements being useable for generating a unique identifying signature of the record carrier, e.g. randomly placed magnetic fibers or magnetic particles in the body of a credit card
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G07D 7/06 using wave or particle radiation
• CPC Class Codes: G07D 7/2033 Matching unique patterns, i.e. patterns that are unique to each individual paper
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Radio frequency certificates of authenticity (RFCOAs) are presented. In one implementation, a scattering agent is attached to an object to provide a reproducible radio frequency (RF) fingerprint that can be used to authenticate a tag or a seal for the object. In one implementation, the RF fingerprint is measured and digitized, combined with information associated with the object to which the RFCOA is attached, and stored in a radio frequency identification (RFID) system associated with the RFCOA. A scanner receives the fingerprint and the information and authenticates the information by comparing the fingerprint against a new fingerprint obtained from the object.

Claims

1. A method, comprising:

embedding a scattering agent in a fixative, wherein the embedded scattering agent is fixed in a unique 3-dimensional physical arrangement that reflects, refracts, scatters, reradiates, and induces radio frequency energy;

attaching the scattering agent to a physical object;

reading the embedded scattering agent, wherein the reading includes;

exposing the scattering agent to radio frequency energy,

receiving reflected and refracted radio frequency energy from the scattering agent, and

deriving a digital fingerprint of the unique physical arrangement from the reflected and refracted radio frequency energy;

combining the digital fingerprint with information associated with the physical object; and

using the digital fingerprint to authenticate the information associated with the physical object.

2. The method as recited in claim 1, wherein the embedding further comprises dispersing pieces of at least one metallic conductor in the fixative to reflect radio frequency energy.

3. The method as recited in claim 1, wherein the embedding further comprises dispersing pieces of at least one dielectric in the fixative to refract radio frequency energy.

4. The method as recited in claim 3, wherein the embedding further comprises dispersing the pieces of at least one dielectric in the fixative, wherein the fixative is also a dielectric.

5. The method as recited in claim 1, wherein the embedding further comprises embedding a combination of pieces of at least one metallic conductor and pieces of at least one dielectric in the fixative to reflect and refract radio frequency energy.

6. The method as recited in claim 1, further comprising sealing a product with the scattering agent and fixative as a seal, wherein the receiving reflected and refracted radio frequency energy from the scattering agent to derive fingerprint is possible only as long as the seal is unbroken.

7. The method as recited in claim 1, further comprising combining the embedded scattering agent with a radio frequency identification transponder to create a radio frequency identification (RFID) system that also includes a certificate of authenticity, wherein the digital fingerprint is stored in the RFID system and the RFID system releases the information associated with the physical object only when a request to the RFID system includes fingerprint information scanned from the scattering agent that matches the digital fingerprint stored in the RFID system.

8. The method as recited in claim 1, further comprising providing a secure communication channel, including:

combining the digital fingerprint with the information associated with the physical object to form a combined message;

hashing the combined message;

signing the hash of the combined message with a first key to form a signed message; and

storing the combined message and the signed message in a radio frequency identification (RFID) system associated with the scattering agent.

9. The method as recited in claim 8, further comprising:

receiving the combined message and the signed message from the radio frequency identification transponder;

using a second key to verify the signed message against the hash of the combined message;

separating the combined message into the digital fingerprint and the radio frequency identification information;

reading the scattering agent to obtain a test fingerprint;

comparing the digital fingerprint with the test fingerprint; and

determining that an association between the radio frequency identification information and the embedded scattering agent is authentic if the digital fingerprint and the test fingerprint have a degree of similarity that surpasses a threshold.

10. An authentication system, comprising:

a radio frequency certificate of authenticity, including;

a scattering agent consisting of pieces of material for reflecting and refracting radio frequency energy, and

a fixative for immobilizing the pieces of material into a unique 3-dimensional physical structure, wherein the scattering agent and fixative are attached to a physical object; and

a reader for detecting a unique pattern of reflected and refracted radio frequency energy and for determining a fingerprint associated with the unique pattern.

11. The authentication system as recited in claim 10, wherein exposing the scattering agent to the radio frequency energy causes the unique pattern of reflected and refracted radio frequency energy for determining the fingerprint and wherein the fingerprint authenticates at least one characteristic of the physical object.

12. The authentication system as recited in claim 10, wherein the scattering agent comprises one of:

pieces of one or more metallic conductors, pieces of one or more dielectrics, or a combination of pieces of one or more metallic conductors and pieces of one or more dielectrics.

13. The authentication system as recited in claim 10, further comprising a radio frequency identification system to store and transmit the fingerprint and at least some information associated with the physical object to a radio frequency identification system scanner.

14. The authentication system as recited in claim 13, further comprising:

a hashing module to hash the combined message consisting of the fingerprint and the information about the physical object; and

a signing module to sign the hash of the combined message with a first key to form a signed message;

wherein the combined message and the signed message are concatenated and stored in the radio frequency identification system.

15. The authentication system as recited in claim 14, further comprising a verifier to:

receive the fingerprint from the radio frequency identification system,

detect the unique pattern of reflected and refracted radio frequency energy from the scattering agent of the radio frequency certificate of authenticity,

determine a test fingerprint based on the detected unique pattern,

compare the received fingerprint with the test fingerprint, and

authenticate the received fingerprint based on the comparison.

16. The authentication system as recited in claim 14, further comprising a security module to:

use a second key to verify the signed message against the hash of the combined message,

separate the combined message into the digital fingerprint and the information associated with the physical object,

read the scattering agent to obtain a test fingerprint,

compare the digital fingerprint with the test fingerprint, and

authenticate the radio frequency certificate or authenticity based on the comparison of the digital fingerprint and the test fingerprint.

17. The authentication system as recited in claim 13, further comprising a privacy manager to decide how much of the information associated with the physical object to send from the radio frequency identification system to the reader.

18. The authentication system as recited in claim 10, wherein the reader further comprises at least one antenna array, wherein the antenna array includes multiple antennae.

19. The authentication system as recited in claim 18, wherein at least one antenna sends radio frequency energy to the scattering agent and receives radio frequency energy from the scattering agent.

20. A system, comprising:

means for reproducibly deriving multiple copies of a fingerprint from radio frequency energy scattered from a physical object;

means for associating information about the physical object with a first fingerprint from the physical object;

means for receiving the first fingerprint and the associated information about the physical object; and

means for authenticating the information by deriving a second fingerprint from the physical object and comparing the second fingerprint with the received first fingerprint.