Method and apparatus for providing security in a radio frequency identification system

• US 20090028078A1
• Filed: 12/31/2007
• Published: 01/29/2009
• Est. Priority Date: 07/23/2007
• Status: Active Grant

• Current Assignee: Savi Technology Incorporated
• Original Assignee: Savi Technology Incorporated
• Inventors: Cargonja, Nikola, Zhu, Liping Julia, Stough, Stephen Alan, Shiledar, Devendra, Evans, Allan M., Balabine, Igor V.
• Granted Patent: US 8,547,957 B2
• Time in Patent Office: Days
• US Class Current: 370/310
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A part can receive a communication that originates externally of the part, that conforms to a predetermined communications protocol, and that contains payload information consistent with the protocol but subject to a security provision supplemental to the protocol. The part extracts the payload information from the security provision.

Claims

1. An apparatus comprising a part configured to receive a communication that originates externally of said part, that conforms to a predetermined communications protocol, and that contains payload information consistent with said protocol but subject to a security provision supplemental to said protocol, said part extracting said payload information from said security provision.

2. An apparatus according to claim 1, wherein said communication is a wireless communication.

3. An apparatus according to claim 2, wherein said communications protocol is ISO 18000-7.

4. An apparatus according to claim 1, wherein said part is a tag.

5. An apparatus according to claim 1, wherein said security provision includes said payload information being encrypted and authenticated.

6. An apparatus according to claim 1, wherein said security provision includes said payload information being encrypted.

7. An apparatus according to claim 6, including a data segment received by said part and including a type identifier, a length value, and a data field containing cryptographic information relating to said encrypted payload information.

8. An apparatus according to claim 1, wherein said security provision includes said payload information being authenticated.

9. An apparatus according to claim 1, including a data segment received by said part and including a type identifier, a length value, and a data field containing authentication information, said part carrying out an authentication operation as a function of said authentication information and said communication.

10. An apparatus according to claim 1,

wherein said communication has a portion separate from said payload information containing a first command that is a command from said communications protocol;

and

wherein said payload information includes at least a portion of a further communication containing a second command that is a command from said communications protocol.

11. An apparatus according to claim 10, wherein said first and second commands are different.

12. An apparatus according to claim 10, wherein said first and second commands are the same.

13. An apparatus according to claim 10, wherein said part successively receives a plurality of communications, the payload information in each said communication being a respective fragment of said further communication.

14. An apparatus according to claim 10,

wherein said part includes a memory containing a table;

and

wherein said part responds to said first command in said portion of said communication by storing said payload information in said table.

15. An apparatus according to claim 14, wherein said communication is a wireless communication, and said communications protocol is ISO 18000-7.

16. An apparatus according to claim 10,

wherein said first command is one of a subset of commands of said communications protocol, said subset containing less than all of the commands of said communications protocol;

wherein said part maintains a virtual object, said first command specifying said virtual object as a destination for said payload information; and

wherein said part responds to said second command by transmitting a further communication for propagation away from said part externally thereof, said further communication including tag response information that is subject to a further security provision.

17. An apparatus according to claim 16,

wherein said payload information includes a random bit having a randomly selected binary state;

wherein said response information includes a response bit; and

wherein said further security provision includes performing an exclusive or between said response bit and said random bit.

18. An apparatus according to claim 1,

wherein said communication has a portion separate from said payload information containing one of first and second commands that are respective different commands from said communications protocol;

wherein said payload information includes at least a portion of a further communication containing a third command that is a command from said communications protocol;

wherein said part includes a memory containing first and second tables;

wherein said part responds to said communication by storing said payload information in said first table if said portion of said communication contains said first command; and

wherein said part responds to said communication by storing said payload information in said second table if said portion of said communication contains said second command.

19. An apparatus according to claim 18, wherein said third command is different from each of said first and second commands.

20. An apparatus according to claim 18, wherein said third command is the same as one of said first and second commands.

21. An apparatus according to claim 18, wherein said communication is a wireless communication, and said communications protocol is ISO 18000-7.

22. An apparatus according to claim 1,

wherein said part includes a memory containing a table with further payload information stored therein;

wherein said communication has a portion separate from said payload information that includes a selected command that is a command from said communications protocol; and

wherein said part responds to said selected command by transmitting a further communication for propagation away from said part externally thereof, said further communication conforming to said communications protocol and containing said further payload information subject to a further security provision supplemental to said communications protocol.

23. An apparatus according to claim 22, wherein said further security provision includes said further payload information being encrypted.

24. An apparatus according to claim 22, wherein said further security provision includes said further payload information being authenticated.

25. An apparatus according to claim 22, wherein said communication is a wireless communication, and said communications protocol is ISO 18000-7.

26. An apparatus according to claim 1, wherein said protocol specifies a maximum length for said payload information.