Radio security leader controlling operation mode, and radio security tag supporting security mode and normal mode

• US 8,587,409 B2
• Filed: 03/07/2011
• Issued: 11/19/2013
• Est. Priority Date: 03/08/2010
• Status: Expired due to Fees

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Lee, Sang Yeoun, Lee, Heyung Sub, Kang, You Sung, Lee, Kang Bok, Choi, Su Na, Shin, Dong Beom, Choi, Doo Ho, Kim, Hyun Seok
• Primary Examiner(s): Wu, Daniel
• Assistant Examiner(s): Haile, Benyam
• Application Number:
  US13/042,263
• Publication Number:
  US 20110215908A1
• Time in Patent Office: 988 Days
• Field of Search: 340/10.1, 340/5.1, 340/572.9, 713/168
• US Class Current: 340/10.1
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/01 Details
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00

Abstract

Disclosed are a radio secure reader and a radio secure tag for supporting a secure mode and a normal mode. The radio secure reader for controlling an operation mode of the radio secure tag may include a reader modem to receive the operation mode from the radio secure tag, and a reader processing unit to identify the received operation mode as a normal mode or a secure mode, and to control the radio secure tag based on the identified operation mode.

Claims

1. A radio secure reader for controlling an operation mode of a radio secure tag, comprising:

a reader modem to receive the operation mode from the radio secure tag; and

a reader processing unit to identify the received operation mode as a normal mode or a secure mode, and to control the radio secure tag based on the identified operation mode, wherein the control comprises of operating the radio secure tag only in a single mode, either the secure mode or the normal mode, using a toggle mode command unit, and wherein

when the operation mode is identified as the normal mode, the reader processing unit performs a first inventory process and performs authentication processing with respect to the radio secure tag, and when the authentication processing is completed, the reader processing unit is allowed to control the radio secure tag, and

when the operation mode is identified as the secure mode, the reader processing unit performs a second inventory process including authentication processing with respect to the radio secure tag and then, is allowed to control the radio secure tag.

2. The radio secure reader of claim 1, wherein:

as the authentication processing, the reader processing unit receives a first challenge_tag message from the radio secure tag and transmits, to the radio secure tag, a first challenge_int message together with a second challenge_tag message in which the first challenge_tag message is encrypted, and

the reader processing unit receives, from the radio secure tag, a second challenge_int message associated with the first challenge_int message and authenticates the radio secure tag when the first challenge_int message matches the second challenge_int message as a comparison result.

3. The radio secure reader of claim 1, wherein:

as the authentication processing included in the second inventory process, the reader processing unit receives a first random number from the radio secure tag and transmits, to the radio secure tag, a first challenge_int message together with a second random number in which the first random number is encrypted, and

the reader processing unit receives, from the radio secure tag, a second challenge_int message associated with the first challenge_int message and authenticates the radio secure tag when the first challenge_int message matches the second challenge_int message as a comparison result.

4. The radio secure reader of claim 1, wherein when the radio secure tag is shifted to an authenticated sate, the reader processing unit maintains or changes the operation mode of the radio secure tag, or controls data stored in the radio secure tag to be changed.

5. The radio secure reader of claim 1, further comprising:

a toggle mode command unit to determine the operation mode, and to set the determined operation mode to be set in the radio secure tag through the reader modem.

6. A radio secure tag for supporting a secure mode and a normal mode, comprising:

a tag modem to transmit a predetermined operation mode to a radio secure reader in response to an access request from the radio secure reader; and

a tag processing unit to perform authentication processing according to processing in the radio secure reader based on the operation mode, and to operate according to control of the authenticated radio secure reader when the radio secure reader is authenticated, wherein the control comprises of operating the radio secure tag only in a single mode, either the secure mode or the normal mode, using a toggle mode command unit, and wherein;

the tag processing unit comprises a normal mode tag processing unit,

when the predetermined operation mode corresponds to the normal mode, the normal mode tag processing unit performs a first inventory process and then, as the authentication processing, transmits a first challenge_tag message to the radio secure reader and receives, from the radio secure reader, a second challenge_tag message in which the first challenge_tag message is encrypted and compares the first challenge_tag message with the second challenge_tag message, and

the tag processing unit comprises a secure mode tag processing unit,

when the predetermined operation mode corresponds to the secure mode, the secure mode tag processing unit performs a second inventory process and then, as the authentication processing, transmits a first random number to the radio secure reader and receives, from the radio secure reader, a second random number in which the first random number is encrypted and compares the first random number with the second random number.