RFID readers limiting theft of confidential information

• US 8,115,590 B1
• Filed: 02/13/2009
• Issued: 02/14/2012
• Est. Priority Date: 03/24/2008
• Status: Active Grant

• Current Assignee: Impinj, Inc.
• Original Assignee: Impinj, Inc.
• Inventors: Diorio, Christopher J., Peshkin, Joel, Aiouaz, Ali, Cooper, Scott
• Primary Examiner(s): MULLEN, THOMAS J
• Application Number:
  US12/370,907
• Time in Patent Office: 1,096 Days
• Field of Search: 340/572.1, 340/10.1, 340/10.5, 340/10.51, 340/5.2, 340/5.4, 340/5.8, 380/270
• US Class Current: 340/5.2
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00

Abstract

RFID reader and methods of operating an RFID reader are provided to limit or prevent the issuing of confidential information such as encryption keys, passwords, shared secrets, and the like to RFID tags if a reader is not authorized. The reader may determine its authorization status based on a self-check, information from another reader, or information from a controller, and limit an operational aspect of itself or for communication with the tags.

Claims

1. A method for protecting confidential information from being issued in communication between a Radio Frequency Identification (RFID) reader and an RFID tag, the method comprising:

determining an authorization status of the reader at the reader; and

if the reader is not authorized, limiting an operational aspect of the reader associated with issuing of confidential information wirelessly to the tag.

2. The method of claim 1, wherein the authorization status of the reader is determined based on at least one from a set of:

a self-check process;

a communication with a controller; and

a communication with another reader.

3. The method of claim 2, wherein the communication with the controller and the communication with the other reader are one of:

a wired communication and a wireless communication.

4. The method of claim 2, wherein the authorization status of the reader is determined based upon one of:

expiration of a predefined period at the reader, detection of illicit activity by the reader, detection of a power cycling of the reader, and a user input to the reader.

5. The method of claim 1, wherein the confidential information includes at least one from a set of:

a password, a shared secret, a confidential command, and an encryption key.

6. The method of claim 5, wherein the confidential information is derived by the reader from at least one of:

a mathematical function and a look-up table.

7. The method of claim 6, wherein the deriving is updated in response to at least one from a set of:

an expiration of a predefined period, a number of confidential transactions, an authorization value, and a command from a controller.

8. The method of claim 6, wherein the at least one of the mathematical function and lookup table is stored in one of:

the reader and a controller.

9. The method of claim 1, wherein limiting the operational aspect of the reader includes at least one from a set of:

disabling a memory storage of the reader;

disabling a wireless communication capability of the reader; and

disabling a power management unit of the reader.

10. The method of claim 9, wherein limiting the operational aspect of the reader is reversible.

11. The method of claim 9, wherein limiting the operational aspect of the reader is irreversible.

12. The method of claim 1, wherein limiting the operational aspect of the reader includes one of destroying and rendering secure at least one from a set of:

a program stored in the reader for deriving the confidential information;

a data file stored in the reader for deriving the confidential information; and

a portion of contents of a data file stored in the reader for deriving the confidential information.

13. The method of claim 1, wherein limiting the operational aspect of the reader includes at least one from a set of:

reducing RF power of the reader such that a range for communication with the tag is restricted; and

reducing a number of communications to the tag for issuing the confidential information.

14. A Radio Frequency Identification (RFID) reader configured to communicate with an RFID tag, the reader comprising:

a transceiver arranged to transmit and receive a modulated wave for communicating with the tag;

a processing block coupled to the transceiver, the processing block arranged to;

determine an authorization status of the reader; and

if the reader is not authorized, limit an operational aspect of the reader associated with issuing of confidential information wirelessly to the tag.

15. The reader of claim 14, wherein the processing block is further arranged to determine the authorization status of the reader employing at least one from a set of:

a self-check process;

a communication with a controller through one of;

a wired communication and a wireless communication;

a communication with another reader;

determination of an expiration of a predefined period at the reader;

detection of illicit activity by the reader;

detection of a power cycling of the reader; and

a user input to the reader.

16. The reader of claim 14, wherein the confidential information includes at least one from a set of:

a password, a shared secret, a confidential command, and an encryption key, and wherein the confidential information is derived by the reader from at least one of;

a mathematical function and a look-up table, stored in one of;

the reader and a controller.

17. The reader of claim 16, wherein the deriving is updated in response to at least one from a set of:

an expiration of a predefined period, a number of confidential transactions, an authorization value, and a command from a controller.

18. The reader of claim 14, wherein the processing block is further arranged to limit the operational aspect of the reader by at least one from a set of:

disabling a memory storage of the reader;

disabling a wireless communication capability of the reader;

disabling a power management unit of the reader;

reducing RF power of the reader such that a range for communication with the tag is restricted;

reducing a number of communications to the tag for issuing the secure information; and

one of destroying and rendering secure of at least one from a set of;

a program stored in the reader for deriving the confidential information;

a data file stored in the reader for deriving the confidential information; and

a portion of contents of a data file stored in the reader for deriving the confidential information.

19. The reader of claim 18, wherein the processing block is arranged to limit the operational aspect of the reader irreversibly.