RADIO FREQUENCY IDENTIFICATION (RFID) TAG, INTERROGATOR, AND METHOD FOR AUTHENTICATION BETWEEN THE RFID TAG AND THE INTERROGATOR

• US 20140023195A1
• Filed: 07/19/2013
• Published: 01/23/2014
• Est. Priority Date: 07/23/2012
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: LEE, Sang Yeoun, Park, Joo Sang, Lee, Kang Bok
• Application Number:
  US13/946,484
• Publication Number:
  US 20140023195A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

Provided is a method for authentication between a radio frequency identification (RFID) tag and an interrogator configured to communicate with the RFID tag. An authentication method performed by the interrogator may include: transmitting, to an RFID tag, a challenge command comprising random interrogator information for initializing an encryption engine and challenge interrogator information for authenticating the RFID tag; receiving, from the RFID tag, random tag information, encrypted challenge tag information, and encrypted tag authentication data; initializing the encryption engine based on the random to interrogator information and the random tag information; decrypting the encrypted challenge tag information and the encrypted tag authentication data; and authenticating the RFID tag based on the decrypted challenge tag information, the decrypted tag authentication data, and the challenge interrogator information.

Claims

1. A radio frequency identification (RFID) tag authentication method performed by an interrogator, the method comprising:

transmitting, to an RFID tag, a challenge command comprising random interrogator information for initializing an encryption engine and challenge interrogator information for authenticating the RFID tag;

receiving, from the RFID tag, random tag information, encrypted challenge tag information, and encrypted tag authentication data;

initializing the encryption engine based on the random interrogator information and to the random tag information;

decrypting the encrypted challenge tag information and the encrypted tag authentication data; and

authenticating the RFID tag based on the decrypted challenge tag information, the decrypted tag authentication data, and the challenge interrogator information.

2. The method of claim 1, further comprising:

re-encrypting the decrypted challenge tag information and transmitting the re-encrypted challenge tag information to the RFID tag after an inventory procedure when authentication of the RFID tag is determined as a success.

3. The method of claim 1, wherein the authenticating of the RFID tag comprises:

generating authentication data based on the challenge interrogator information and the decrypted challenge tag information; and

authenticating the RFID tag by comparing the generated authentication data and the decrypted tag authentication data.

4. The method of claim 3, wherein the generating of the authentication data comprises:

generating the authentication data by performing an exclusive-OR (XOR) operation on the decrypted challenge tag information and the challenge interrogator information.

5. The method of claim 3, wherein the authenticating of the RFID tag comprises determining that the authentication of the RFID tag is a success when the generated authentication data is identical to the decrypted tag authentication data.

6. The method of claim 1, wherein the challenge command comprises the random interrogator information, a length of the random interrogator information, the challenge interrogator information, and a length of the challenge interrogator information.

7. The method of claim 1, wherein the random interrogator information and challenge interrogator information are randomly generated.

8. An interrogator authentication method performed by a radio frequency identification (RFID) tag, the method comprising:

receiving, from an interrogator, a challenge command comprising random interrogator information for initializing an encryption engine and challenge interrogator information for authenticating the RFID tag;

generating random tag information for initializing the encryption engine and challenge tag information for authenticating the interrogator;

initializing the encryption engine based on the random interrogator information and the random tag information;

generating tag authenticating data based on the challenge interrogator information and the challenge tag information;

encrypting the challenge tag information and the tag authentication data;

transmitting, to the interrogator, the random tag information, the encrypted challenge tag information, and the encrypted tag authentication; and

authenticating the interrogator by decrypting re-encrypted challenge tag information that is received from the interrogator after an inventory procedure, and by comparing the decrypted challenge tag information and the challenge tag information generated by the RFID tag.

9. The method of claim 8, wherein the transmitting comprises:

determining a transmission point in time of the random tag information, the encrypted challenge tag information, and the encrypted tag authentication data based on a bit value of an Immed field comprised in the challenge command.

10. The method of claim 9, wherein the transmitting comprises:

transmitting, to the interrogator during an inventory procedure, the random tag information, the encrypted challenge tag information, and the encrypted tag authentication data when the bit value of the Immed field is “

1”

; and

transmitting, to the interrogator after the inventory procedure, the random tag information, the encrypted challenge tag information, and the encrypted tag authentication data in response to a ReadBuffer command transmitted from the interrogator when the bit value of the Immed field is “

0”

.

11. The method of claim 8, wherein the generating of the tag authentication data comprises generating the tag authentication data by performing an exclusive-OR (XOR) operation on the challenge interrogator information and the challenge tag information.

12. The method of claim 8, wherein the authenticating of the interrogator comprises determining that the authentication is a success when the decrypted challenge tag information is identical to the challenge tag information generated by the RFID tag.

13. The method of claim 8, wherein the random tag information and the challenge tag information are randomly generated.

14. A mutual authentication method performed by an interrogator and a radio frequency identification (RFID) tag, the method comprising:

transmitting, by the interrogator to the RFID tag, a challenge command comprising random interrogator information for initializing an encryption engine and challenge interrogator information for authenticating the RFID tag;

generating, by the RFID tag, random tag information for initializing the encryption engine and challenge tag information for authenticating the interrogator;

initializing, by the RFID tag, the encryption engine based on the random tag information and the random interrogator information received from the interrogator;

generating, by the RFID tag, tag authentication data based on the challenge tag information and the challenge interrogator information received from the interrogator;

encrypting, by the RFID tag, the challenge tag information and the tag authentication data;

transmitting, by the RFID tag to the interrogator, the random tag information, the encrypted challenge tag information, and the encrypted tag authentication data;

initializing, by the interrogator, the encryption engine based on the random interrogator information and the random tag information received from the RFID tag;

decrypting, by the interrogator, the encrypted challenge tag information and the encrypted tag authentication data received from the RFID tag;

authenticating, by the interrogator, the RFID tag based on the decrypted challenge tag information, the decrypted tag authentication data, and the challenge interrogator information;

re-encrypting, by the interrogator, the decrypted challenge tag information, and transmitting the re-encrypted challenge tag information to the RFID tag after an inventory procedure; and

authenticating, by the RFID tag, the interrogator by decrypting the re-encrypted challenge tag information received from the interrogator, and by comparing the decrypted challenge tag information and the challenge tag information generated by the RFID tag.

15. A radio frequency identification (RFID) tag authentication method performed by an interrogator, the method comprising:

transmitting, to an RFID tag, a first challenge command comprising random interrogator information for initializing an encryption engine and a second challenge command comprising challenge interrogator information for authenticating the RFID tag;

receiving, from the RFID tag, random tag information, encrypted challenge tag information, and encrypted tag authentication data;

initializing the encryption engine based on the random interrogator information and the random tag information;

decrypting the encrypted challenge tag information and the encrypted tag authentication data; and

authenticating the RFID tag based on the decrypted challenge tag information, the decrypted tag authentication data, and the challenge interrogator information.

16. The method of claim 15, further comprising:

re-encrypting the decrypted challenge tag information, and transmitting the re-encrypted challenge tag information to the RFID tag after an inventory procedure when authentication of the RFID tag is determined as a success

17. An interrogator authentication method performed by a radio frequency identification (RFID) tag, the method comprising:

receiving, from an interrogator, a first challenge command comprising random interrogator information for initializing an encryption engine and a second challenge command comprising challenge interrogator information for authenticating the RFID tag;

generating random tag information for initializing the encryption engine and challenge tag information for authenticating the interrogator;

initializing the encryption engine based on the random interrogator information and the random tag information;

generating tag authentication data based on the challenge interrogator information and the challenge tag information;

encrypting the challenge tag information and the tag authentication data;

transmitting, to the interrogator, the random tag information, the encrypted challenge tag information, and the encrypted tag authentication data; and

authenticating the interrogator by decrypting the re-encrypted challenge tag information received from the interrogator after an inventory procedure, and by comparing the decrypted challenge tag information and the challenge tag information generated by the RFID tag.