Radio frequency identification (RFID) system that meets data protection requirements through owner-controlled RFID tag functionality

• US 20070103274A1
• Filed: 10/13/2006
• Published: 05/10/2007
• Est. Priority Date: 04/13/2005
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Berthold, Oliver
• Granted Patent: US 7,786,866 B2
• Time in Patent Office: Days
• US Class Current: 340/10.510
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs

Abstract

An RFID tag can include a transmitting device and a receiving device for transmitting data to and receiving data from a tag reader, and the tag can include a memory for storing identification data unambiguously labeling the RFID tag and circuitry which automatically executes functions depending on the fact that: the reader demonstrates knowledge of an internal password in a memory of the tag; and information stored in the memory of the tag for an internal state permits the execution of the function. The tag also includes circuitry for changing the stored password and/or the internal state, in particular depending on a previous comparison of the internal password to one received from the reader.

Claims

1. An RFID tag comprising:

a transmitter adapted to transmit data to an RFID reader;

a receiver adapted to receive data from the reader;

a memory adapted to store identification data that unambiguously identifies the RFID tag;

a memory adapted to store an internal password;

a memory adapted to store information about an internal state of the RFID tag;

a controller adapted to automatically execute functions if the reader demonstrates knowledge of an internal password stored in the memory adapted to store the internal password or if information stored in the memory adapted to store information about the internal state permits the execution of the functions, and

circuitry adapted to change the stored password and/or the internal state in response to a comparison of the internal password to a password received from the reader;

a non-transient and non-rewritable or rewritable memory adapted to store a verification value, and

circuitry adapted to determine a test value from two input values and adapted to verify the identification data based on a value received from the reader and the verification value, wherein a result of the verification can be transmitted to the reader.

2. The RFID tag of claim 1, wherein the memory adapted to store the internal password is a rewritable memory.

3. The RFID tag of claim 1, further comprising a first comparator adapted to compare the received value to a password stored in the memory adapted to store the password.

4. The RFID tag of claim 1, wherein the circuitry adapted to verify the identification data is adapted to perform a challenge-response function to verify the identification data.

5. The RFID tag of claim 1, further comprising a random number generator adapted to generate a random value.

6. The RFID tag of claim 5, further comprising a rewritable buffer adapted to buffer the random value.

7. The RFID tag of claim 6, further comprising circuitry adapted to answer a query from the reader to compare the stored password to the buffered random value and to transmit the random value to the reader.

8. The RFID tag of claim 7, further comprising a first comparator adapted to compare the received value to a password stored in the memory adapted to store the password,

wherein the answer to the transmission is compared to the test value,

wherein the two input values include the random value stored in the buffer and the internal password, and

wherein the answer to the reader to the transmission of the random value and the test value means can be used as input for the first comparator.

9. The RFID tag of claim 1, further comprising a first comparator adapted to compare the received value to a password stored in the memory adapted to store the password, wherein, with a positive result from the comparator an internal password verification is evaluated as successful, otherwise as unsuccessful.

10. The RFID tag claim 1, wherein the internal state defines whether and which parts of the identification data are permitted to be output and wherein the transmitter is adapted to transmit at least parts of the identification data.

11. The RFID tag of claim 10, further comprising a second comparator adapted for transmitting only a part of the identification data.

12. The RFID tag of claim 10, wherein the circuitry adapted to change the stored password can be activated only if a previous password verification was successful, where in case of success the identification data can be transmitted completely.

13. The RFID tag of claim 10, wherein the circuitry adapted to change the internal state can be activated only if a previous password verification was successful, where in case of success the identification data can be transmitted completely.

14. The RFID tag of claim 1, further comprising circuitry adapted to calculate a new password from two input values, a received value, and the internal password.

15. An RFID reader comprising:

a transmitter adapted to transmit data to an RFID tag;

a receiver adapted to receive data from the tag;

circuitry adapted to detect a first password stored in the tag; and

circuitry adapted to query the tag for data stored in the tag,

wherein the transmitter is adapted to transmit a data value to the tag to be processed by the tag and to cause the first password stored in the tag to be changed and change an internal state of the tag, wherein the internal state of the tag determines what identification data stored in the tag can be communicated to a reader.

16. The reader of claim 16, further comprising:

a memory adapted to store a second password in the reader; and

circuitry adapted to determine a test value from two input values.

17. The reader of claim 16, wherein the data value is the second password.

18. The reader of claim 16, further comprising circuitry adapted to:

receive a random value from the tag, generate a test value based on the random value and the second password, and transmit the test value to the tag;

query the RFID tag for identification data stored in the tag;

verify a password received from the tag and transmit a new password to the tag.

19. A method for an RFID reader to verify identification data of an RFID tag, the method comprising:

transmitting a random value from the reader to the tag;

receiving a first test value from the tag at the reader, wherein the first test value is generated by the tag in response to the random value;

transmitting the first test value, the random value, and the identification data to a manufacturer of the product associated with the RFID tag; and

receiving an answer from the manufacturer stating that the identification data is verified, wherein the answer is based on the transmitted first test value, the random value, and the identification data.

20. The method of claim 19, further comprising, prior to transmitting the first test value, the random value, and the identification data to the manufacturer:

requesting a valid combination of a random value and a second test value for identification data from the tag from the manufacturer; and

comparing the first test value to the second test value.

21. The method of claim 19, further comprising:

detecting, at the reader, a first password in the RFID tag; and

after receiving the answer from the manufacturer changing the password stored in the tag.