PRODUCTION METHOD, RFID TRANSPONDER, AUTHENTICATION METHOD, READER DEVICE AND COMPUTER PROGRAM PRODUCT

• US 20130342311A1
• Filed: 06/21/2013
• Published: 12/26/2013
• Est. Priority Date: 06/21/2012
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Barbaric, Tvrtko, de Jong, Hans, Bukovjan, Peter, Arts, Ad
• Granted Patent: US 10,007,815 B2
• Time in Patent Office: Days
• US Class Current: 340/5.8
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06K 7/10009 sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/108 Source integrity

Abstract

The exemplary embodiments of the invention realize an efficient prevention of massive infiltration of cloned RFID transponders into existing and new RFID systems. Furthermore, reader devices used for authentication of RFID transponders do not need to be on-line and do not need to be equipped with a Security Authentication Module (SAM). This simplifies authentication procedures and reduces costs. According to an exemplary embodiment of the invention a transponder-specific originality signature is stored by a transponder manufacturer on the transponder. The transponder-specific originality signature may, for example, be stored in the non-volatile memory (EEPROM) of the transponder during the fabrication of the transponder. This transponder-specific originality signature can be checked at any time in a convenient way, which provides an indication of originality of said transponder.

Claims

1. A method for producing an RFID transponder, the method comprising the following steps:

providing the transponder with a transponder-specific identifier;

providing the transponder with a signature usable for authentication of the transponder;

generating said signature by signing at least a part of the transponder-specific identifier,

characterized in that said signature is stored in a hidden memory of the transponder.

2. A method as claimed in claim 1, wherein the signature is generated by signing at least a part of the transponder-specific identifier with a private key of a private-public key pair.

3. A method as claimed in claim 2, wherein the private-public key pair is based on any one of Elliptic Curve Cryptography, RSA cryptography, NTRU cryptography, and the Digital Signature Standard.

4. A method as claimed in claim 1, wherein the transponder-specific identifier comprises at least a part of the unique identification number of the transponder.

6. An RFID transponder produced by a method as claimed in claim 1.

5. (canceled)

7. A method for authenticating an RFID transponder, wherein the authentication is performed by:

reading a transponder-specific identifier or a part of the transponder-specific identifier from the transponder;

reading a signature from the transponder, said signature comprising the transponder-specific identifier or said part of the transponder-specific identifier in signed form;

verifying the signature and determining that the transponder is authentic only if the signature is valid,

characterized in that said signature is read from a hidden memory from the transponder by means of a dedicated command.

8. A method as claimed in claim 7, wherein the signature has been generated by signing the transponder-specific identifier or said part of the transponder-specific identifier with a private key of a private-public key pair, and wherein the signature is verified with the public key of said private-public key pair.

9. A method as claimed in claim 8, wherein the private-public key pair is based on any one of Elliptic Curve Cryptography, RSA cryptography, NTRU cryptography, and the Digital Signature Standard.

10. A method as claimed in claim 7, wherein the transponder-specific identifier comprises at least a part of the unique identification number of the transponder.

11. A reader device for reading an RFID transponder, wherein the reader device is arranged to carry out or control respective steps of a method as claimed in claim 7.

12. A computer program product comprising instructions which, when being executed by a processing unit, carry out or control respective steps of a method as claimed in claim 7.