Method and Apparatus for Providing Security in a Radio Frequency Identification System

• US 20090028334A1
• Filed: 12/31/2007
• Published: 01/29/2009
• Est. Priority Date: 07/23/2007
• Status: Active Grant

• Current Assignee: Savi Technology Incorporated
• Original Assignee: Savi Technology Incorporated
• Inventors: Stough, Stephen Alan, Shiledar, Devendra, Evans, Allan M., Balabine, Igor V., Cargonja, Nikola, Zhu, Liping Julia
• Granted Patent: US 8,204,225 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

One aspect involves a communication that contains a portion encrypted with a selected key can be wirelessly transmitted by a part for reception and decryption by plural tags. A different aspect involves a tag receiving a first sequence of wireless communications that each contain sequencing information regarding the first sequence, while receiving a second sequence of wireless communications that each include sequencing information regarding the second sequence, and further involves monitoring the sequencing information from received communications of the first sequence while separately monitoring the sequencing information from received communications of the second sequence.

Claims

1. An apparatus comprising a part that can prepare a communication containing a portion encrypted with a selected key, and that can wirelessly transmit said communication for reception and decryption by plural tags.

2. An apparatus according to claim 1, wherein said encrypted portion includes a command for tags.

3. An apparatus according to claim 1, including a plurality of tags that each possess a further key corresponding to said selected key, and that can each receive said communication and decrypt said encrypted portion thereof with said further key.

4. An apparatus according to claim 3, including a plurality of further tags that each lack possession of a key corresponding to said selected key.

5. An apparatus according to claim 1, wherein said communication conforms to a communications protocol, and has a payload that includes said encrypted portion.

6. An apparatus according to claim 5, wherein said communications protocol is ISO 18000-7.

7. A method of operating a tag, comprising:

receiving a first sequence of wireless communications that each contain sequencing information regarding said first sequence while receiving a second sequence of wireless communications that each include sequencing information regarding said second sequence; and

monitoring said sequencing information from received communications of said first sequence while separately monitoring said sequencing information from received communications of said second sequence.

8. A method according to claim 7, including transmitting said first and second sequences from respective different sources.

9. A method according to claim 7, including:

transmitting said first sequence from a first interrogator; and

transmitting said second sequence from a second interrogator different from said first interrogator.

10. A method according to claim 7, wherein said monitoring of each said sequence includes identifying a situation in which a received communication of that sequence is a duplicate of a previously-received communication of that sequence.

11. A method according to claim 7, including configuring each said sequence so that at least one said communication thereof contains selected information that is subject to a security provision.

12. A method according to claim 11, including configuring said security provision to include at least one of encryption and authentication of said selected information.