Electronic tag for protecting privacy and method of protecting privacy using the same

• US 20080129447A1
• Filed: 08/16/2007
• Published: 06/05/2008
• Est. Priority Date: 12/04/2006
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Chung, Kyo Il, Kim, Ho Won, Choi, Doo Ho, Kim, Ju Han
• Application Number:
  US11/893,496
• Publication Number:
  US 20080129447A1
• Time in Patent Office: Days
• US Class Current: 340/5.61
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

An electronic tag for protecting privacy in RFID and a method of protecting privacy using the same are provided. Specifically, an RFID electronic tag capable of protecting privacy by authenticating an RFID reader and controlling access of the RFID reader to the RFID tag and a method of protecting privacy using the same are provided. The RFID electronic tag is applicable to a passive type RFID tag. The RFID electronic tag is also applicable to an ISO/IEC 18000-6 Type C tag that is a typical passive type RFID tag. It is possible to protect privacy of a user by controlling access of the RFID reader to the RFID tag and authenticating the RFID reader by modifying a tag inventory protocol and a memory map of the tag.

Claims

1. An electronic tag for transmitting information stored therein as a signal in a predetermined frequency band, the electronic tag comprising a privacy flag having a predetermined bit string value which is used to allow the information stored in the electronic tag to be accessed when the electronic tag receives a predetermined access password and the received password matches a previously stored password.

2. The electronic tag of claim 1, wherein the privacy flag is set or canceled depending on a received predetermined command.

3. The electronic tag of claim 1, further comprising:

a user memory region which stores predetermined application data;

a tag ID region which includes recognition information for distinguishing the electronic tag from other electronic tags; and

an item region which includes recognition information on stored items.

4. The electronic tag of claim 2, wherein the privacy flag is set or canceled when the electronic tag is in a Secured state.

5. The electronic tag of claim 2, wherein when the privacy flag is set, the electronic tag'"'"'s recognition steps psss through states of (1) Ready, (2) Arbitrate, (3) Replay, (4) Private, and (5) Open or Secured.

6. The electronic tag of claim 2, wherein when the privacy flag is canceled, the electronic tag'"'"'s recognition steps pass through states of (1) Ready, (2) Arbitrate, (3) Replay, (4) Acknowledged, and (5) Open or Secured.

7. The electronic tag of claim 3, wherein in the user memory region, the tag ID region, and the item ID region, a read-and-write operation can be performed.

8. The electronic tag of claim 5, wherein the electronic tag in the Private state transmits a predetermined random number value.

9. The electronic tag of claim 5, wherein the electronic tag in the Open or Secured state transmits information stored therein.

10. The electronic tag of claim 6, wherein the electronic tag in the Acknowledged state transmits information stored therein.

11. A method of protecting privacy using an electronic tag, the method comprising:

(a) setting a privacy flag including a predetermined bit string value for allowing the information stored in the electronic tag to be accessed according to a received predetermined command;

(b) determining whether authority to access the information stored in the electronic tag exists; and

(c) transmitting the information stored in the electronic tag.

12. The method of claim 11, wherein (a) is performed when the electronic tag is in a Secured state.

13. The method of claim 11, wherein the electronic tag includes a user memory region, which stores predetermined application data, a tag ID region, which includes recognition information for distinguishing the electronic tag from other electronic tags, and an item region which includes recognition information on a stored item.

14. The method of claim 11, wherein (b) comprises:

allowing the electronic tag to report that the privacy flag is set by transmitting a predetermined random number; and

receiving an access password for accessing the information stored in the electronic tag.

15. The method of claim 11, wherein in (b), the electronic tag passes through the states of (1) Ready, (2) Arbitrate, (3) Replay, (4) Private, and (5) Open or Secured.

16. The method of claim 13, wherein a read-and-write operation can be performed in the user memory region, the tag ID region, and the item ID region.

17. The method of claim 15, wherein the electronic tag in the Private state transmits a predetermined random number value.

18. The method of claim 15, wherein the electronic tag in the Open or Secured state transmits information stored therein.

19. An electronic tag, which transmits information stored therein as a signal in a predetermined frequency band, comprising:

an authentication parameter which is used to determine whether authority to access information stored in the electronic tag exists; and

an authentication password which corresponds to the authentication parameter.

20. The electronic tag of claim 19, wherein the authentication parameter and the authentication password are included in a reserved region of the electronic tag.

21. A method of protecting privacy using an electronic tag which transmits information stored therein as a signal in a predetermined frequency bandwidth, the method comprising:

setting an authentication parameter, which is used to determine whether authority to access information stored in the electronic tag exists, and an authentication password, which corresponds to the authentication parameter;

determining whether the authority to access the information stored in the electronic tag exists by examining whether a received authentication password value matches the set authentication password value; and

transmitting the information stored in the electronic tag.

22. The method of claim 21, wherein a predetermined operation in the determining of whether the authority exists is an XOR operation.

23. The method of claim 21, wherein the authentication password includes top 16 bits and bottom 16 bits of the authentication password.

24. The method of claim 23, wherein the determining of whether the authority exists comprises:

(a) transmitting a value obtained through the predetermined operation with respect to a value corresponding to the authentication parameter and a first random number;

(b) transmitting a second random number in response to a received predetermined inventory protocol;

(c) receiving a value obtained through the predetermined operation with respect to the top 16 bits of the authentication password and the second random number transmitted in (b);

(d) transmitting a third random number in response to a received predetermined inventory protocol;

(e) receiving a value obtained through the predetermined operation with respect to the bottom 16 bits of the authentication password and the third random number transmitted in (d);

(f) examining whether the top 16 bits of the authentication password are matched with the authentication password value received in (c); and

(g) examining whether the bottom 16 bits of the authentication password are matched with the authentication password value received in (e).