METHOD AND SYSTEM FOR PROVIDING INFORMATION ON PRE-PURCHASE AND POST-PURCHASE ITEMS USING RFID AND COMPUTER-READABLE STORAGE MEDIA STORING PROGRAMS FOR EXECUTING THE METHOD

• US 20080208753A1
• Filed: 02/07/2008
• Published: 08/28/2008
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Korea University Industrial & Academic Collaboration Foundation
• Original Assignee: Korea University Industrial & Academic Collaboration Foundation
• Inventors: Lee, Dong Hoon, Choi, Eun Young, Kim, Il Jung
• Granted Patent: US 9,213,971 B2
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06K 7/10366 the interrogation device being adapted for miscellaneous applications
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G07G 1/009 the reader being an RFID reader
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Pre-purchase and post-purchase item information provision methods and systems using an RFID technology and computer readable storage media storing programs for executing the methods are provided. A pre-purchase item information provision method for a radio frequency identification system according to the present invention includes transmitting, if a mobile reader is detected by a local server installed in a salesroom, a certificate containing information on a location of an object information service server and an authentication value to the mobile reader; transmitting, at the mobile reader, a query requesting an item ID to a tag attached to a target item; transmitting, at the tag, a item ID information generated by encrypting the item ID using the authentication value to the mobile reader; transmitting, at the mobile reader, the item ID information and the authentication value to the object information service server; and transmitting, at the object information service server, data retrieved in a database in correspondence to the item ID, the data being retrieved when the authentication value exists in the database. The item information provision method and system of the present invention can guarantee reliability of information on an item in the pre-purchase state and prevent the information from being eavesdropped in both the pre-purchase and post-purchase states. Also, the item information provision method and system can prevent the tag ID from being tracked, thereby protecting purchaser'"'"'s privacy, preventing the tag from being forged, and improving computation efficiency.

Claims

1. A pre-purchase item information provision method for a radio frequency identification system, comprising:

transmitting, if a mobile reader is detected by a local server installed in a salesroom, a certificate containing information on a location of an object information service server and an authentication value to the mobile reader;

transmitting, from the mobile reader, a query requesting an item ID to a tag attached to a target item;

transmitting, from the tag, item ID information generated by encrypting the item ID using the authentication value to the mobile reader;

transmitting, from the mobile reader, the item ID information and the authentication value to the object information service server; and

transmitting, from the object information service server, data retrieved from a database corresponding to the item ID, the data being retrieved when the authentication value exists in the database.

2. The pre-purchase item information provision method of claim 1, wherein the item ID information is a value obtained by performing an exclusive-OR operation on the item ID and a keyed hash h_K(C_i) obtained by performing a hash operation on a tag key, hash function, and authentication value (C_i).

3. The pre-purchase item information provision method of claim 1, wherein the object information server stores information associated with Electronic Product Code (EPC).

12. A computer-readable storage medium storing programs for executing the methods of claims 1 to 11.

4. A pre-purchase item information display method for a mobile reader in a radio frequency identification system, comprising:

receiving, at the mobile reader, a certificate containing information on a location of an object information service server and authentication value from a local server installed in a salesroom;

requesting a tag attached to an item for an item ID embedded in the tag;

receiving item ID information generated by encrypting the item ID using the authentication value from the tag;

transmitting the item ID information and the authentication value to the object information service server; and

receiving data corresponding to the item ID from the object information service server.

5. The pre-purchase item information display method of claim 4, wherein the item ID information is a value obtained by performing an exclusive-OR operation on the item ID and a keyed hash h_K(C_i) obtained using a tag key, hash function, and authentication value (C_i).

6. A post-purchase item information provision method for a radio frequency identification system, comprising:

receiving, at a mobile reader, item keys of purchased items from an object information service server;

transmitting a query containing a first random value generated by the mobile reader to a tag attached to the purchased item;

receiving a first value and a second value from the tag, the first value being obtained by encrypting an item ID with a second random value generated by the tag, the second value being obtained by encrypting the second random value with the item key;

extracting the second random value from the second value using the item key and extracting the item IDs from the first value using the second random value;

transmitting the item ID formatted in electronic product code (EPC) among extracted item IDs to the object information service server; and

receiving data corresponding to the item ID from the object information service server.

7. The post-purchase item information provision method of claim 6, wherein receiving data corresponding to the item ID from the object information service server comprises:

generating a purchased item list using the data received from the object information service server; and

display the purchased item list on a screen of the mobile reader.

8. The post-purchase item information provision method of claim 6, wherein receiving a first value and a second value from the tag comprises:

generating, at the tag, the first value by performing an exclusive-OR operation on the item ID and the second random value (r_T); and

generating a keyed hash (h_K(r_i)) by performing a hash function on the first random value (r_i) and tag key value (K); and

generating the second value by performing an exclusive-OR operation on the keyed hash (h_K(r_i)) and the second random value (r_T).

9. The post-purchase item information provision method of claim 6, wherein transmitting the item ID formatted in electronic product code (EPC) comprises:

transmitting the item ID formatted in EPC to an object naming system server;

receiving an uniform resource location of the object information service server from the object naming system server, the object naming system server checking the item ID and retrieving the uniform resource location of the object information service server having data corresponding to the item ID;

requesting data on the EPC to the object information service server located by the uniform resource location; and

receiving the data from the object information service server.

10. A post-purchase item information provision method for a radio frequency identification system, comprising:

receiving, at a mobile reader, item keys of purchased items from an object information service server;

transmitting a query containing a first random value to a tag attached to an item, the first random value being generated by the mobile reader;

receiving a first value and a second value from the tag, the first value being obtained by encrypting the item ID with a second random value, the second value being obtained by encrypting the second random value with the item key embedded in the tag;

extracting the second random value from the second value using the item key and extracting the item IDs from the first value using the second random value;

transmitting the item ID formatted in electronic product code (EPC) among extracted item IDs to the object information service server; and

receiving data corresponding to the item ID from the object information service server.

11. The post-purchase item information provision method of claim 10, further comprising displaying the purchased item list generated using the data received from the object information service server on a screen of the mobile reader.

13. A pre-purchase item information provision system using a radio frequency identification system, comprising:

a mobile reader which receives a certificate containing information on a location of an object information service server and an authentication value from a local server installed in a salesroom, transmits a query for requesting item ID to a tag attached to a specific item in response to a user command, receives item ID information generated by encrypting the item ID using the authentication value from the tag, and transmits the item ID information and the authentication value to the object information service server;

a tag which receives the query from the mobile reader and transmits item ID information generated by encrypting the item ID using the authentication value;

an object information service server which searches a database for the authentication value, retrieves, if the authentication value is found, data corresponding to item ID from the database, and transmits the data to the mobile reader; and

a local server storing certificate containing the information of the object information service server and authentication value.

14. A post-purchase item information provision system using a radio frequency identification system, comprising:

a tag which generates a second random value, generates a first value by encrypting an item ID with the second random value, generates a second value by encrypting the second random value with a tag key, and transmits the first and second values to a mobile reader;

a mobile reader which receives item keys of purchased items from an object information service server, transmits a query containing a first random value generated by the mobile reader to a tag attached to the purchased item, extracts the second random value from the second value using the item key, and extracts the item IDs from the first value using the second random value; and

an object information service server which transmits, when an item ID formatted in electronic product code (EPC) is received, data corresponding to the item ID to the mobile reader.

15. The post-purchase item information provision system of claim 14, further comprising an object naming system server which checks item ID received from the mobile reader and transmits a uniform resource location of the object information service server having the data corresponding to the item ID, wherein the mobile reader transmits item ID formatted in EPC to the object naming system server and requests data corresponding to the EPC to the object information service server using the uniform resource location and the item ID.