Mobile RFID service providing apparatus and method thereof

• US 20070080784A1
• Filed: 07/17/2006
• Published: 04/12/2007
• Est. Priority Date: 10/10/2005
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Chae, Jong-Suk, Pyo, Cheol-Sig, Lee, Yong-Joon, Kim, Mal-Hee
• Granted Patent: US 7,609,162 B2
• Time in Patent Office: Days
• US Class Current: 340/10.100
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Provided is a mobile Radio Frequency Identification (RFID) service providing apparatus and a method thereof. The apparatus, includes: a policy server for establishing a policy on level of quality of service (QoS) to be provided to each user, and a policy to be applied between nodes for security; an Authentication, Authorization and Accounting (AAA) server for performing network access authentication and authorization to each user, authorization for a mobile RFID service, security association establishment and distribution between constituent nodes based on information of the policy server; a mobile RFID agent for performing a diameter client role and a mobile RFID service agent role; and a service server for searching uniform resource locator (URL) of a server providing information related to an RFID code and providing detailed information and history information to the mobile RFID phone.

Claims

1. A mobile Radio Frequency Identification (RFID) service providing apparatus, comprising:

a policy server for establishing a policy on level of quality of service (QoS) to be provided to each user using an RFID mobile phone, and a policy to be applied between nodes for security;

an Authentication, Authorization and Accounting (AAA) server for performing network access authentication and authorization to each user through a diameter message, authorization for a mobile RFID service, security association establishment and distribution between constituent nodes based on information of the policy server;

a mobile RFID agent for performing a diameter client role and a mobile RFID service agent role upon request of the mobile RFID phone mounting the RFID reader; and

a service server for searching uniform resource locator (URL) of a server providing information related to an RFID code based on QoS level information of the mobile RFID phone user given by the mobile RFID agent and providing detailed information and history information on an object with an RFID tag to the mobile RFID phone.

2. The apparatus as recited in claim 1, wherein the QoS level is assessed in the policy server and nodes provide a differentiated service by applying the assessed QoS level to communication between nodes.

3. The apparatus as recited in claim 1, wherein the QoS level is pre-determined to perform authorization for the mobile RFID service, and a method of level setup and assignment is different according to each service and service provider, and the service server is established to provide differentiated contents based on each QoS level, and the policy is registered in the policy server.

4. The apparatus as recited in claim 3, wherein the authorization for the mobile RFID service is performed after the authentication to network access of a mobile IPv6 environment in the AAA server is successfully performed, and the AAA server transmits a completion result of the authentication for the user to the mobile RFID agent, accesses to the service server by the mobile RFID agent and acquires information required by the user.

5. The apparatus as recited in claim 3, wherein in the authorization and the security association establishment for the mobile RFID service, the mobile RFID agent performs authentication through the AAA server by transmitting the RFID information acquired from the mobile RFID phone with a network access request, instantly accesses to an object directory service (ODS) server of the service server when the authentication is successfully completed, acquires information of a service providing node requested by the mobile RFID phone, which includes an object information service (OIS) server, an Object Traceability Service (OTS) server and a finance server of the service server, requests the AAA server to establish security association with the acquired node when the user requests, and transmits an authentication result to the mobile RFID phone.

6. The apparatus as recited in claim 5, wherein the mobile RFID phone store security association information transmitted in the process of the authentication, and can access to the OIS server, the OTS server and the finance server through a Personal Computer (PC) based on the stored information.

7. The apparatus as recited in claim 1, wherein the diameter message defines functions of mRFID_UserQoSLevel AVP (Attribute Value Pair), mRFID_ServiceType AVP, mRFID_SecurityReq AVP and mRFID_SA (Security Association) AVP, and includes AA-SecurityAssociation-Request message and AA-SecurityAssociation-Answer message.

8. A mobile Radio Frequency Identification (RFID) service providing method, comprising the steps of:

a) establishing a policy on level of quality of service (QoS) to be provided to each user using an RFID mobile phone, and a policy to be applied between nodes for security;

b) performing network access authentication and authorization in an Authentication, Authorization and Accounting (AAA) server upon authentication request of the mobile RFID phone mounting an RFID reader through a mobile RFID agent, including QoS level information in an authentication result when the authorization is successful, and transmitting the QoS level information to the mobile RFID agent;

c) transmitting an RFID code acquired through the RFID reader with the QoS level information from the mobile agent to an object directory service (ODS) server;

d) searching uniform resource locator (URL) of a server providing information related to the RFID code in the ODS server and transmitting the URL to the mobile RFID agent;

e) establishing security association with the AAA server by the mobile RFID agent upon request of the user and transmitting the URL search result to the mobile RFID phone; and

f) providing detailed information on an object with the RFID tag to the mobile RFID phone based on the QoS level information in an object information service (OIS) server having the URL upon request of information including the QoS level information.

9. The method as recited in claim 8, further comprising the step of:

g) providing history information on the object with the RFID tag from an Object Traceability Service (OTS) server having the URL to the mobile RFID phone based on the QoS level information upon request of the information including the QoS level information.

10. The method as recited in claim 8, further comprising the step of:

h) providing finance information on the object with the RFID tag from a finance server having the URL to the mobile RFID phone based on the QoS level information upon a request of the information including the QoS level information.

11. The method as recited in claim 8, wherein in the authorization and the security association establishment for the mobile RFID service, the mobile RFID agent performs authentication through the AAA server by transmitting the RFID information acquired from the mobile RFID phone with a network access request, instantly accesses to an object directory service (ODS) server of the service server when the authentication is successfully completed, acquires information of a service providing node requested by the mobile RFID phone, which includes an object information service (OIS) server, an Object Traceability Service (OTS) server and a finance server of the service server, requests the AAA server to establish security association with the acquired node when the user requests, and transmits an authentication result to the mobile RFID phone.

12. The method as recited in claim 11, wherein the mobile RFID phone can store security association information transmitted in the process of the authentication, and access to the OIS server, the OTS server and the finance server through Personal Computer (PC) based on the stored information.