RFID SECURITY AND MOBILITY ARCHITECTURE

• US 20110291803A1
• Filed: 02/04/2011
• Published: 12/01/2011
• Est. Priority Date: 05/27/2010
• Status: Abandoned Application

• Current Assignee: Savi Technology Incorporated
• Original Assignee: Savi Technology Incorporated
• Inventors: HO, Joseph S.M., BAJIC, Zeljko, SCHNELL, Richard, CARGONJA, Nikola
• Application Number:
  US13/021,602
• Publication Number:
  US 20110291803A1
• Time in Patent Office: Days
• US Class Current: 340/10.1
• CPC Class Codes: G08B 13/2462 Asset location systems combined with EAS inventory, tracking, logistic G06Q10/00; entrance control systems G07C9/00
• CPC Class Codes: G08B 13/2482 EAS methods, e.g. description of flow chart of the detection procedure
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04Q 2213/095 User access; PIN code

Abstract

A method of communication between RFID devices that includes mutually authenticating the RFID devices is disclosed. Once mutual authentication is completed, one or more encrypted messages based on the encryption scheme can be exchanged between the RFID devices.

Claims

1. A method of communication between RFID devices, comprising:

mutually authenticating the RFID devices; and

exchanging one or more encrypted payloads based on the encryption scheme.

2. The method of claim 1, wherein mutually authenticating the RFID devices includes a reader device transmitting an “

I am a friendly reader”

message.

3. The method of claim 1, wherein mutually authenticating the RFID devices includes

transmitting a first challenge to a reader;

receiving an encrypted first challenge and a second challenge;

authenticating the reader based on the encrypted first challenge; and

transmitting an encrypted second challenge to the reader.

4. The method of claim 1, wherein mutually authenticating the RFID devices includes

receiving a first challenge from a reader;

encrypting the first challenge with a pairwise masterkey and transmitting the encrypted first challenge with a second challenge to the reader;

receiving an encrypted second challenge from the reader; and

authenticating the reader based on the encrypted second challenge.

5. The method of claim 1, further including receiving an encrypted broadcast key along with the encrypted first challenge before exchanging one or more encrypted payloads.

6. The method of claim 2, further included providing an acknowledgment after receiving the encrypted broadcast key.

7. The method of claim 1, wherein mutually authenticating the RFID devices includes exchanging certificates between a reader and a tag.

8. The method of claim 1, wherein mutually authenticating the RFID devices includes

receiving a first challenge from a reader in a tag;

transmitting an encrypted first challenge to the reader with a second challenge, the encrypted first challenge being the first challenge encrypted with a tag'"'"'s private key;

receiving an encrypted second challenge from the reader, the encrypted second challenge being encrypted with the reader'"'"'s private key.

authenticating the reader and the tag.

9. The method of claim 8, wherein authenticating the reader and the tag includes

comparing the encrypted first challenge with the first challenge;

and

comparing the encrypted second challenge with the second challenge.

10. A method of communicating between RFID devices, comprising:

transmitting a collection command;

receiving responses from one or more tag devices;

for each tag device, mutually authenticating with each tag device and communicating encrypted messages with each tag device.

11. The method of claim 10, wherein mutually authenticating is a three-way handshake.

12. The method of claim 10, wherein a broadcast key is sent to the tag after the tag is authenticated.

13. The method of claim 10, wherein the tag transmits an acknowledgment after receiving the broadcast key.

14. The method of claim 10, wherein mutually authenticating relies on exchange of challenges.

15. The method of claim 10, wherein mutually authenticating relies on public key encryption.

16. A security environment, including

a central server;

one or more security domains in communication with the central server, wherein the one or more security domains includes one or more readers that mutually authenticate tags and exchange encrypted messages with tags.

17. The security environment of claim 16, wherein the one or more security domains includes a distribution center and a decommission center.

18. The security environment of claim 16, wherein the one or more security domains includes at least one shipping terminal.

19. The security environment of claim 16, wherein a mutually authenticated tag of a first security domain traveling to a second security domain becomes a mutually authenticated tag of the second security domain through a mutual authentication.

20. The security environment of claim 19, wherein the second security domain receives keys for mutually authenticating the tag from the central server.

21. The security environment of claim 19, wherein travel of the tag between the first security domain and the second security domain is an expected routing of the tag.

22. The security environment of claim 19, wherein travel of the tag between the first security domain and the second security domain is an unexpected routing of the tag.

23. A method of providing tag security, comprising:

providing a tag security to a distribution center;

writing the tag security into a tag at the distribution center;

authenticating the tag at one or more shipping terminals on a shipping route; and

decommissioning the tag at a decommissioning center.

24. The method of claim 23, wherein the tag security includes a pre-shared key.

25. The method of claim 24, wherein authenticating the tag includes exchanges of challenges and encrypted challenges based on the pre-shared key.

26. The method of claim 23, wherein the tag security includes establishment of a public key and a private key.

27. The method of claim 26, wherein mutual authentication includes exchanging challenges encrypted with the public key and the private key.

28. The method of claim 23, wherein the tag security includes establishment of a certificate received from a certificate authority.

29. The method of claim 28, wherein mutual authentication includes exchanging certificates.

30. The method of claim 23, wherein the tag is routed between a first terminal and a second terminal of the one or more shipping terminals.31. The method of claim 30, wherein the tag is mutually authenticated with a shipping terminal upon arrival at the shipping terminal.