SYSTEMS AND METHODS FOR RFID SECURITY

• US 20120087501A1
• Filed: 12/21/2011
• Published: 04/12/2012
• Est. Priority Date: 03/21/2006
• Status: Active Grant

• Current Assignee: Knapp Investment Company Limited
• Original Assignee: Radiofy, LLC
• Inventors: Shoarinejad, Kambiz, Soltan, Maryam
• Granted Patent: US 8,325,043 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06K 7/00 Methods or arrangements for sensing record carriers, e.g. for reading patterns methods or arrangements for marking the record carrier in digital fashion G06K1/00; pattern recognition G06F18/00; arrangements for image or video recognition or understanding G06V10/00; character recognition, recognising digital ink or document-oriented image-based pattern recognition G06V30/00
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

An RFID system includes an RFID tag, an RFID reader, and a server. The RFID tag communicates to the server via encrypted information. The information may be encrypted with synchronized encryption keys. In this manner, the reader need not decrypt the information from the RFID tag. The effectiveness of malicious readers is thereby reduced, resulting in improved RFID tag security.

Claims

1-44. -44. (canceled)

45. An apparatus comprising a tag for use in a system including a tag reader and a server communicatively coupled to the tag reader, the tag comprising:

a transceiver to communicate with the tag reader through a wireless link; and

a processor coupled to the transceiver, the processor to execute sets of instructions to (i) receive information from the tag reader that enables encryption of identification data identifying the tag and (ii) encrypt the identification data according to the predetermined encryption scheme using the received information to produce encrypted data for the reader to transmit to the server, the encrypted data for the server to decrypt according to the predetermined encryption scheme in order to produce the identification data of the tag.

46. The apparatus of claim 45, wherein the identification data is for the server to authorize transmission from the reader.

47. The apparatus of claim 45, wherein the tag further comprises a display to display an authentication code for a user of the tag to provide to the reader as authentication data.

48. The apparatus of claim 45, wherein the tag further comprises a switch for activating the tag.

49. The apparatus of claim 45, wherein the tag further comprises an input device for a user to enter one of a password and biometric information to activate the tag.

50. The apparatus of claim 45, wherein the processor of the tag is further to execute a set of instructions to generate a pseudorandom number based on the information received from the reader, wherein the processor uses the pseudorandom number to encrypt the identification data.

51. The apparatus of claim 45, wherein the information received from the reader comprises an encryption key generated by the server, wherein the processor of the tag uses the encryption key to encrypt the identification data, wherein the server uses a same encryption key to decrypt the encrypted data.

52. The method of claim 45, wherein the server and the tag share an encryption key, wherein the processor of the tag generates an updated encryption key according to a defined process using the information and encrypts the identification data using the updated encryption key, wherein the server generates a same updated encryption key according to the defined process using said information and uses the same updated encryption key to decrypt the encrypted data.

53. The method of claim 45, wherein the reader reads the encrypted data by backscattering.

54. A method of transmitting information between a tag and a server via a reader, the method comprising:

at the tag, generating a pseudorandom number according to a predetermined scheme; and

at the tag, encrypting identification data identifying the tag using the pseudorandom number, the predetermined scheme shared with the server for the server to generate a same pseudorandom number and decrypt the encrypted identification data using the pseudorandom number.

55. The method of claim 54 further comprising activating the tag prior to generating the pseudorandom number.

56. The method of claim 55, wherein activating the tag comprises activating with one of a switch, biometric information, and a password.

57. The method of claim 54 further comprising:

receiving from the reader information for verification by a user; and

transmitting the encrypted identification data to the reader when the user verifies the information received from the reader.

58. The method of claim 57, wherein the tag comprises a display, the method further comprising displaying the information received from the reader on the display.

59. The method of claim 54, wherein the tag comprises a display, the method further comprising displaying the generated pseudorandom number on the display.

60. A system comprising:

a tag configured (i) to generate a pseudorandom number according to a predetermined scheme for encryption of identification data, the identification data identifying the tag, (ii) to encrypt the identification data using the generated pseudorandom number, and (iii) to send the encrypted identification data to a server; and

the server configured (i) to receive the encrypted data transmitted by the tag, (ii) to generate a same pseudorandom number according to the predetermined scheme, and (iii) to decrypt the encrypted identification data using the generated pseudorandom number.

61. The system of claim 60, wherein the tag is configured to generate the pseudorandom number after the tag has been activated.

62. The system of claim 60 further comprising a reader, wherein the tag is further configured to receive information from the reader, wherein a user verifies the information from the reader and activates the tag, wherein the tag is configured to send the encrypted identification to the server only when the user verifies the information from the reader.

63. The system of claim 62, wherein the tag comprises a display, wherein the tag is further configured to display the information to the user.

64. The system of claim 60, wherein the tag comprises a display, wherein the tag is further configured to display the pseudorandom number.