RFID and Sensor Signing System

• US 20080303667A1
• Filed: 06/05/2007
• Published: 12/11/2008
• Est. Priority Date: 06/05/2007
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Rehman, Samuelson
• Granted Patent: US 7,800,499 B2
• Time in Patent Office: Days
• US Class Current: 340/572.1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

In various embodiments, a method for signing tags associated with objects includes receiving a first identifier associated with a tag. A first signature is generated for the tag based on the identifier and a public key. The first identifier and the first signature are then stored in the tag.

Claims

1. A method for signing tags associated with objects, the method comprising:

receiving a first identifier associated with a tag;

generating a first signature for the tag based on the identifier and a public key; and

storing the first identifier and the first signature in the tag.

2. The method of claim 1 wherein generating the first signature for the tag comprise generating a hash key using the first identifier and the public key with a hash function.

3. The method of claim 1 further comprising:

receiving information from the tag using a reader;

determining the first identifier based on the received information;

determining the first signature based on the received information;

authenticating the first identifier associated with the tag based on the first signature and a private key associated with the public key.

4. The method of claim 1 further comprising:

receiving an EPC identifier associated with an object; and

generating the first identifier based on the EPC identifier.

5. The method of claim 1 further comprising:

receiving a window indicative of validity of the first identifier;

determining whether reception of the first identifier from the tag satisfies the window; and

generating a signal indicating validity of the first identifier based on the determination.

6. The method of claim 1 wherein the first identifier comprises a reduced number of bits than that which may be stored in the tag.

7. The method of claim 1 further comprising:

generating a second identifier for the tag based on a rotation scheme;

generating a second signature for the tag based on the second identifier and the public key; and

storing the second identifier and the second signature in the tag.

8. A data processing system comprising:

a processor; and

a memory coupled to the processor, the memory configured to store a plurality of code modules which when executed by the processor cause the processor to;

receive a first identifier associated with a tag;

generate a first signature for the tag based on the identifier and a public key; and

generate one or more instructions to store the first identifier and the first signature in the tag.

9. The system of claim 8 wherein the processor is configured to generate a hash key using the first identifier and the public key with a hash function.

10. The system of claim 8 wherein the processor is configured to:

receive information from the tag using a reader;

determine the first identifier based on the received information;

determine the first signature based on the received information;

authenticate the first identifier associated with the tag based on the first signature and a private key associated with the public key.

11. The system of claim 8 wherein the processor is configured to:

receive an EPC identifier associated with an object; and

generate the first identifier based on the EPC identifier.

12. The system of claim 8 wherein the processor is configured to:

receive a window indicative of validity of the first identifier;

determine whether reception of the first identifier from the tag satisfies the window; and

generate a signal indicating validity of the first identifier based on the determination.

13. The system of claim 8 wherein the first identifier comprises a reduced number of bits than that which may be stored in the tag.

14. The system of claim 8 wherein the processor is configured to:

generate a second identifier for the tag based on a rotation scheme;

generate a second signature for the tag based on the second identifier and the public key; and

generate one or more instructions indicating to store the second identifier and the second signature in the tag.

15. A computer program product stored on a computer readable medium for signing tags associated with objects, the computer program product comprising:

code for receiving a first identifier associated with a tag;

code for generating a first signature for the tag based on the identifier and a public key; and

code for storing the first identifier and the first signature in the tag.

16. The computer program product of claim 15 wherein the code for generating the first signature for the tag comprise code for generating a hash key using the first identifier and the public key with a hash function.

17. The computer program product of claim 15 further comprising:

code for receiving information from the tag using a reader;

code for determining the first identifier based on the received information;

code for determining the first signature based on the received information;

code for authenticating the first identifier associated with the tag based on the first signature and a private key associated with the public key.

18. The computer program product of claim 15 further comprising:

code for receiving an EPC identifier associated with an object; and

code for generating the first identifier based on the EPC identifier.

19. The computer program product of claim 15 further comprising:

code for receiving a window indicative of validity of the first identifier;

code for determining whether reception of the first identifier from the tag satisfies the window; and

code for generating a signal indicating validity of the first identifier based on the determination.

20. The computer program product of claim 15 further comprising:

code for generating a second identifier for the tag based on a rotation scheme;

code for generating a second signature for the tag based on the second identifier and the public key; and

code for storing the second identifier and the second signature in the tag.