RADIO FREQUENCY IDENTIFICATION (RFID) SECURITY APPARATUS HAVING SECURITY FUNCTION AND METHOD THEREOF

• US 20100017617A1
• Filed: 07/20/2009
• Published: 01/21/2010
• Est. Priority Date: 07/21/2008
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Choi, Doo Ho, Chae, Jong-Suk, Pyo, Cheol Sig, Lee, Heyung Sub, Kang, You Sung, Shin, Dong-Beom, Choi, Yong-Je, Kim, Hyunseok, Jung, Jae-young, LEE, Sang Yeoun
• Granted Patent: US 8,607,333 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: H03M 13/09 Error detection only, e.g. using cyclic redundancy check [CRC] codes or single parity bit
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0631 Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Disclosed are a radio frequency identification (RFID) security apparatus and a method thereof. According to the RFID security method, a secure tag reader performs determining an AES key using security information received from a secure tag and generating an output key using the determined AES key, decrypting AES data received from the secure tag using the output key, and encrypting data to be transmitted to the secure tag using the output key and transmitting the data, and a secure tag performs generating an output key using an AES key and security information, and transmitting the security information to a secure tag reader, encrypting data to be transmitted to the secure tag reader using the output key, and transmitting the encrypted data to the secure tag reader, and decrypting data received from the secure tag reader using the output key.

Claims

1. A radio frequency identification (RFID) security apparatus, the apparatus comprising:

an output key generator to receive security information of a secure tag, to determine an advanced encryption standard (AES) key using the security information, and to generate an output key using the determined AES key; and

at least one of an encryption unit to encrypt transmission data transmitted to the secure tag, and a decryption unit to decrypt encrypted reception data received from the secure tag.

2. The apparatus of claim 1, wherein the encryption unit perform exclusive OR (XOR) with respect to the the transmission data and the output key, and the decryption unit perform XOR with respect to the reception data and the output key.

3. The apparatus of claim 1, further comprising:

a tag authentication unit to authenticate the secure tag,

wherein the encryption unit encrypts a predetermined length of challenge data using the output key and transmits the encrypted challenge data to the secure tag, the decryption unit receives encrypted challenge reply data corresponding to the encrypted challenge data from the secure tag and decrypts the encrypted challenge reply data using the output key, and the tag authentication unit compares the predetermined length of challenge data and the decrypted challenge reply data to authenticate the secure tag.

4. The apparatus of claim 1, wherein the output key generator recognizes whether data subsequent to extended protocol (XPC) is the security information used for encrypting using a predetermined bit of the XPC received from the secure tag.

5. The apparatus of claim 1, wherein the output key generator generates the output key using a round number included in the security information, the round number being adjusted according to power required for generating the output key and a reply time required for generating the output key.

6. The apparatus of claim 1, wherein the encryption unit encrypts data and the decryption unit decrypts data, excluding a command and a cyclic redundancy check (CRC) with respect to the reception data and the transmission data.

7. An RFID security apparatus, the apparatus comprising:

an output key generator to generate an output key using an AES key; and

at least one of an encryption unit to encrypt data transmitted to a secure tag reader using the output key, and a decryption unit to decrypt data received from the secure tag reader.

8. The apparatus of claim 7, further comprising:

a key updating unit to store, in a secure memory, a new AES key different from the AES key,

wherein the key updating unit receives a plurality of packets including parts of the new AES key from the secure tag reader, and stores the new AES key in the secure memory when a value obtained by performing CRCs respectively included in the packets and a CRC checksum with respect to the new AES key received from the secure tag reader are identical.

9. The apparatus of claim 7, wherein the encryption/decryption unit decrypts encrypted challenge data received from the secure tag reader using the output key, re-encrypts the decrypted challenge data using the output key to generate an encrypted challenge reply data that transmits the re-encrypted challenge data to the secure tag reader.

10. An RFID security method, comprising:

determining an AES key using security information received from a secure tag and generating an output key using the determined AES key;

decrypting AES data received from the secure tag using the output key; and

encrypting data to be transmitted to the secure tag using the output key and transmitting the data.

11. An RFID security method, comprising:

generating an output key using an AES key and security information, and transmitting the security information to a secure tag reader;

encrypting data to be transmitted to the secure tag reader using the output key, and transmitting the encrypted data to the secure tag reader; and

decrypting data received from the secure tag reader using the output key.