Radio frequency identification (RFID) based authentication system and methodology

• US 8,214,651 B2
• Filed: 07/09/2008
• Issued: 07/03/2012
• Est. Priority Date: 07/09/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Anemikos, Theodoros, Fetterolf, Shawn P., McPadden, Adam J.
• Primary Examiner(s): Davis, Zachary A
• Application Number:
  US12/169,834
• Publication Number:
  US 20100011211A1
• Time in Patent Office: 1,455 Days
• Field of Search: 713/155, 713/168, 713/171, 713/183, 713/182, 713/185, 380/255, 380/270, 380/277, 380/285, 380/30, 726/2, 726/3, 726/21, 726/5, 726/9, 726/17, 726/20, 340/13.26, 235/375, 235/380, 235/382, 235/382.5
• US Class Current: 713/185
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

Disclosed are embodiments of a radio frequency identification (RFID) authentication system and an associated authentication methodology. The embodiments incorporate an identification device (e.g., an identification badge, a key fob, etc.) with an embedded RFID tag. The embedded RFID tag is associated with a specific user and stores a private key generated as part of a public key-private key encryption scheme. The private key is read by an RFID reader and used to decode public key encrypted data stored within or accessible by a computer system (e.g., a desktop computer system, a laptop computer system, a personal digital assistant (PDA), a digital fax machine, wireless telephone, etc.). Thus, the embodiments provide a portable way to use public key-private key encryption scheme data anywhere using RFID technology.

Claims

1. A radio frequency identification (RFID) authentication system comprising:

a RFID tag associated with a user, said RFID tag comprising a first memory storing a private key and a RFID tag antenna connected to said first memory, said RFID tag antenna transmitting said private key, when activated;

a RFID reader comprising a RFID reader antenna activating said RFID tag antenna and receiving said private key; and

a computer system in communication with said RFID reader, said computer system comprising;

a processor; and

a second memory accessible by said processor, said second memory storing encrypted data, said encrypted data being encrypted with a public key related to said private key, said processor further using said private key, as transmitted by said RFID tag antenna of said RFID tag to said RFID reader antenna of said RFID reader, to decrypt said encrypted data in order to generate decrypted data, said decrypted data comprising a password required for access by said user to a secured domain, and said computer system further automatically providing said user with access to said secured domain using said password.

2. The radio frequency identification (RFID) authentication system according to claim 1, said computer system further comprising a display displaying said decrypted data to said user.

3. The radio frequency identification (RFID) authentication system according to claim 1, said secured domain comprising additional encrypted data encrypted using said public key and said processor further using said private key to decrypt said additional encrypted data in order to generate additional decrypted data.

4. The radio frequency identification (RFID) authentication system according to claim 3, said computer system further comprising a display displaying said additional decrypted data to said user.

5. The radio frequency identification (RFID) authentication system according to claim 1, said RFID tag antenna further operating over a private radio frequency.

6. The radio frequency identification (RFID) authentication system according to claim 1, said computer system further comprising a third memory temporarily storing said private key, as transmitted by said RFID tag antenna to said RFID reader, for a predetermined time period.

7. A radio frequency identification (RFID) authentication method comprising:

activating an RFID tag antenna of an RFID tag associated with a user such that said RFID tag antenna of said RFID tag transmits a private key stored in a first memory of said RFID tag;

receiving, by an RFID antenna of an RFID reader, said private key; and

using, by a computer system in communication with said RFID reader, said private key to decrypt encrypted data in order to generate decrypted data, said encrypted data being encrypted using a public key related to said private key and further being stored in a second memory accessible by said computer system, said decrypted data comprising a password required for access by said user to a secured domain; and

automatically providing, by said computer system, said user with access to said secured domain using said password.

8. The radio frequency identification (RFID) authentication method according to claim 7, further comprising displaying said decrypted data to said user.

9. The radio frequency identification (RFID) authentication method according to claim 7, said secured domain comprising additional encrypted data, said additional encrypted data being encrypted using said public key and said method further comprising using said private key to decrypt said additional encrypted data in order to generate additional decrypted data.

10. The radio frequency identification (RFID) authentication method according to claim 9, further comprising displaying said additional decrypted data to said user.

11. The radio frequency identification (RFID) authentication method according to claim 7, said RFID tag antenna further operating over a private radio frequency.

12. The radio frequency identification (RFID) authentication method according to claim 7, further comprising temporarily storing said private key, as transmitted by said RFID tag antenna to said RFID reader, in a third memory for a predetermined time period.

13. A radio frequency identification (RFID) authentication system comprising:

a RFID tag associated with a user, said RFID tag comprising a first memory storing a private key and a RFID tag antenna connected to said first memory, said RFID tag antenna transmitting said private key over a private radio frequency, when activated;

a RFID reader comprising a RFID reader antenna activating said RFID tag antenna and receiving said private key; and

a computer system in communication with said RFID reader, said computer system comprising;

a processor;

a second memory accessible by said processor, said second memory storing an encrypted password, said encrypted password being encrypted with a public key related to said private key, and said processor further using said private key, as transmitted by said RFID tag antenna to said RFID reader, to decrypt said encrypted password in order to generate a decrypted password; and

a user interface in communication with said processor, said user interface prompting said user to enter an unencrypted password and said processor further comparing said unencrypted password, as entered by said user through said user interface, to said decrypted password in order to authenticate said user, said decrypted password being a specific password required for access by said user to a secured domain and said computer system further receiving a request by said user for access to said secured domain and, once said user is authenticated, automatically providing said user with access to said secured domain using said specific password.

14. The radio frequency identification (RFID) authentication system according to claim 13, said decrypted password comprising a universal password required for access by said user to a first secured domain storing a specific password required for access by said user to a second secured domain and said computer system further receiving a request by said user for access to said second secured domain, entering said first secured domain using said universal password, retrieving said specific password, and using said specific password to provide said user with access to said second secured domain.

15. The radio frequency identification (RFID) authentication system according to claim 14, said specific password being encrypted with said public key and said processor further using said private key to decrypt said specific password.

16. The radio frequency identification (RFID) authentication system according to claim 13, said processor further recognizing that said unencrypted password, as entered by said user through said user interface, comprises a designated panic password and automatically alerting a designated authority that said designated panic password has been entered.

17. The radio frequency identification (RFID) authentication system according to claim 14, said computer system further comprising a third memory temporarily storing said private key, as transmitted by said RFID tag antenna to said RFID reader, for a predetermined time period.

18. A radio frequency identification (RFID) authentication method comprising:

activating an RFID tag antenna of an RFID tag associated with a user such that said RFID tag antenna of said RFID tag transmits, over a private radio frequency, a private key stored in a first memory of said RFID tag;

receiving, by an RFID reader antenna of an RFID reader, said private key;

using, by a computer system in communication with said RFID reader, said private key to decrypt an encrypted password in order to generate a decrypted password, said encrypted password being encrypted using a public key related to said private key and being stored in a second memory accessible by said computer system;

prompting, by said computer system, said user to enter an unencrypted password; and

comparing, by said computer system, said unencrypted password, as entered by said user, to said decrypted password in order to authenticate said user, said decrypted password being a specific password required for access by said user to a secured domain and said method further comprising receiving a request by said user for access to said secured domain and, once said user is authenticated, automatically providing said user with access to said secured domain using said specific password.

19. The radio frequency identification (RFID) authentication method according to claim 18, said decrypted password comprising a universal password required for access by said user to a first secured domain storing a specific password required for access by said user to a second secured domain and said method further comprising receiving a request by said user for access to said second secured domain, entering said first secured domain using said universal password, retrieving said specific password, and using said specific password to provide said user with access to said second secured domain.

20. The radio frequency identification (RFID) authentication method according to claim 19, said specific password being encrypted with said public key and said method further comprising using said private key to decrypt said specific password.

21. The radio frequency identification (RFID) authentication method according to claim 18, further comprising recognizing that said unencrypted password, as entered by said user through said user interface, comprises a designated panic password and automatically alerting a designated authority that said designated panic password has been entered.