Method For Enhancing Anti-Cloning Protection of RFID Tags

• US 20090201133A1
• Filed: 12/03/2008
• Published: 08/13/2009
• Est. Priority Date: 12/03/2007
• Status: Abandoned Application

• Current Assignee: GSI Group Corporation (Novanta Inc.)
• Original Assignee: SkyeTek, Inc. (RFID Holdings, Inc.)
• Inventors: Bruns, Logan
• Application Number:
  US12/327,721
• Publication Number:
  US 20090201133A1
• Time in Patent Office: Days
• US Class Current: 340/10.100
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04Q 2213/13095 PIN / Access code, authentication

Abstract

A method for determining validity of an RFID tag. The method includes probing the tag using a series of tag commands to trigger a corresponding series of tag responses, comparing the tag responses to tag reference data stored in a database, and repeating the probing and comparing operations to determine whether or not the tag is valid.

Claims

1. A method for determining validity of an RFID tag comprising:

probing the tag using a series of tag commands to trigger a corresponding series of tag responses;

comparing the tag responses to tag reference data stored in a database;

repeating the steps of probing and comparing to determine the validity of the tag.

2. A method for determining validity of an RFID tag comprising:

storing, in a reference database, a tag fingerprint including attributes for a specific type of RFID tag;

including the tag fingerprint in contents stored in a specific RFID tag;

reading the contents stored in a selected RFID tag;

determining whether the selected RFID tag is a valid specific type of RFID tag by comparing the tag fingerprint in the contents read from the selected RFID tag with the attributes for the specific type of RFID tag stored in the reference database.

3. The method of claim 2, wherein, when the comparing step does not result in an exact match between the attributes being compared, then:

determining whether the selected RFID tag is a valid specific type of RFID tag based on a comparison of a predetermined threshold set of available attributes, read from the selected RFID tag, with the attributes, for the specific type of RFID tag, stored in the reference database.

4. The method of claim 3, wherein said attributes for the specific type of RFID tag include at least one attribute selected from the list of attributes consisting of specific timing values for protocol actions, off-specification protocol actions, tag circuit impedance, responses to certain intentional error conditions, changes in said attributes based on tag communication frequency, and non-linear circuit characteristics of the tag.

5. A method for determining validity of an RFID tag comprising:

storing, in a reference database, a tag fingerprint including attributes for a specific type of RFID tag, wherein the tag behavior comprises responses, from the tag, to a specific sequence of commands sent to the tag;

including the tag fingerprint in a digital signature performed over contents stored in a specific RFID tag;

reading a selected RFID tag; and

determining whether the selected RFID tag is a valid specific type of RFID tag by comparing the tag fingerprint in the contents read from the selected RFID tag with the attributes, for the specific type of RFID tag, stored in the reference database.

6. The method of claim 5, further comprising:

storing, in the reference database, a tag fingerprint including indicia of tag behavior indicative of the specific type of RFID tag; and

comparing the tag behavior of the selected tag with the indicia of tag behavior, for the specific type of RFID tag, stored in the reference database.

7. The method of claim 5, wherein said attributes include at least one attribute selected from the list of attributes consisting of specific timing values for protocol actions, off-specification protocol actions, tag circuit impedance, responses to certain intentional error conditions, changes in said attributes based on tag communication frequency, and non-linear circuit characteristics of the tag.

8. The method of claim 5, wherein, when the comparing step does not result in an exact match between the attributes being compared, then:

determining whether the selected RFID tag is a valid specific type of RFID tag based on a comparison of a predetermined threshold set of available attributes, read from the selected RFID tag, with the attributes, for the specific type of RFID tag, stored in the reference database.

9. A method for determining validity of an RFID tag comprising:

storing, in a reference database, a tag fingerprint including indicia of tag behavior indicative of a specific type of RFID tag, wherein the tag behavior comprises responses, from the tag, to a specific sequence of commands sent to the tag;

including the tag fingerprint in a digital signature performed over contents stored in a specific RFID tag;

reading a selected RFID tag; and

determining whether the selected RFID tag is a valid specific type of RFID tag by comparing the tag behavior of the selected tag with the indicia of tag behavior, for the specific type of RFID tag, stored in the reference database.

10. The method of claim 9, further comprising:

storing, in the reference database, a tag fingerprint including attributes for the specific type of RFID tag; and

determining whether the selected RFID tag is a valid specific type of RFID tag by comparing the tag fingerprint in the contents read from the selected RFID tag with the attributes, for the specific type of RFID tag, stored in the reference database.

11. The method of claim 10, wherein, when the step of comparing the tag fingerprint does not result in an exact match between the attributes being compared, then:

determining whether the selected RFID tag is a valid specific type of RFID tag based on a comparison of a predetermined threshold set of available attributes, read from the selected RFID tag, with the attributes, for the specific type of RFID tag, stored in the reference database.

12. The method of claim 11, wherein said attributes include at least one attribute selected from the list of attributes consisting of specific timing values for protocol actions, off-specification protocol actions, tag circuit impedance, responses to certain intentional error conditions, changes in said attributes based on tag communication frequency, and non-linear circuit characteristics of the tag.

13. A method for determining validity of an RFID tag comprising:

storing, in a reference database, a tag fingerprint including attributes for, and indicia of tag behavior indicative of, a specific type of RFID tag, wherein the tag behavior comprises responses, from the tag, to a specific sequence of commands sent to the tag;

including the tag fingerprint in a digital signature performed over contents stored in a specific RFID tag;

reading a selected RFID tag; and

determining whether the selected RFID tag is a valid specific type of RFID tag by;

comparing the tag fingerprint in the contents read from the selected RFID tag with the attributes, for the specific type of RFID tag, stored in the reference database; and

comparing the tag behavior of the selected tag with the indicia of tag behavior, for the specific type of RFID tag, stored in the reference database.

14. The method of claim 13, wherein, when neither of the comparing steps results in an exact match between the attributes being compared, then:

determining whether the selected RFID tag is a valid specific type of RFID tag based on a comparison of a predetermined threshold set of available attributes, read from the selected RFID tag, with the attributes, for the specific type of RFID tag, stored in the reference database.

15. The method of claim 14, wherein said attributes include at least one attribute selected from the list of attributes consisting of specific timing values for protocol actions, off-specification protocol actions, tag circuit impedance, responses to certain intentional error conditions, changes in said attributes based on tag communication frequency, and non-linear circuit characteristics of the tag.