System and method for enhanced RFID instrument security

• US 8,698,595 B2
• Filed: 08/07/2012
• Issued: 04/15/2014
• Est. Priority Date: 11/30/2004
• Status: Active Grant

• Current Assignee: Qualcomm FYX Incorporated (Qualcomm, Inc.)
• Original Assignee: Qualcomm, Inc.
• Inventors: Baranowski, James A.
• Primary Examiner(s): HOLLOWAY III, EDWIN C
• Application Number:
  US13/568,621
• Publication Number:
  US 20120300933A1
• Time in Patent Office: 616 Days
• Field of Search: 340/5.61, 340/5.62, 340/5.63, 340/10.1, 340/10.51, 340/572.1, 340/572.4, 340/8.1, 380/270, 380/271, 380/272, 380/273, 380/279, 713/169, 713/173, 713/175, 713/176, 713/179, 713/180
• US Class Current: 340/5.61
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system and method for using an RFID read/write device to secure an RFID operable instrument or an RF communication is provided. The invention includes security databases in communication with a processor for storing and communicating security protocols to the RFID read/write device. The invention includes a method for restricting the unauthorized use of an RFID read/write device. The invention includes a subscription service for communicating user credentials to a certificate authority to obtain a counter security protocol. The invention also includes decrypting information stored on an RF operable device or transmitted via radio-frequency using counter security protocols.

Claims

1. A method, comprising:

receiving, by a transponder, an encrypted interrogation signal, an authentication code, and GPS information associated with a sender of the encrypted interrogation signal and the authentication code, wherein the encrypted interrogation signal is associated with the authentication code;

activating the transponder in response to the receiving the encrypted interrogation signal and the authentication code;

authenticating the sender of the encrypted interrogation signal by using the GPS information and by decrypting the encrypted interrogation signal; and

authenticating the transponder in response to authenticating the sender of the encrypted interrogation signal, wherein the authenticating the transponder comprises;

encrypting the authentication code; and

transmitting the encrypted authentication code.

2. The method of claim 1, wherein the authenticating the transponder is in response to the activating the transponder.

3. The method of claim 1, wherein the interrogation signal comprises a random code generated by an RFID device.

4. The method of claim 1, wherein the authentication code is associated with the transponder.

5. The method of claim 1, wherein the transponder comprises a transponder identification code.

6. The method of claim 5, wherein the encrypted authentication code is decryptable using a security authentication key unique to the transponder identification code.

7. The method of claim 1, wherein the transponder is configured with global positioning system (GPS) capability to be operable in a predetermined area.

8. The method of claim 7, further comprising deactivating the transponder in response to the GPS capability indicating the transponder has moved outside of the predetermined area.

9. The method of claim 1, further comprising receiving communications using a communications security protocol.

10. The method of claim 9, wherein the communications security protocol is an HTTPS protocol.

11. A transponder comprising:

a receiver configured to receive an encrypted interrogation signal, a transponder authentication code, and GPS information associated with a sender of the encrypted signal and the authentication code;

a processor configured to decrypt the encrypted interrogation signal to authenticate the sender of the authentication signal,

wherein the processor is further configured to use the GPS information to authenticate the sender of the encrypted signal;

wherein the encrypted interrogation signal is associated with the transponder authentication code, and

wherein the processor is further configured to encrypt the transponder authentication code in response to authenticating the encrypted interrogation signal; and

a transmitter configured to transmit the encrypted transponder authentication code.

12. A transponder including a tangible, non-transitory memory having instructions stored thereon that, in response to execution by the transponder, cause the transponder to perform operations comprising:

receiving, by a transponder, an encrypted interrogation signal, an authentication code, and GPS information associated with a sender of the encrypted interrogation signal and the authentication code, wherein the encrypted interrogation signal is associated with the authentication code;

activating the transponder in response to the receiving the encrypted interrogation signal and the authentication code;

authenticating the sender of the encrypted interrogation signal by using the GPS information and by decrypting the encrypted interrogation signal; and

authenticating the transponder to the sender of the encrypted interrogation signal in response to authenticating the sender of the encrypted interrogation signal, wherein the authenticating the transponder comprises;

encrypting the authentication code; and

transmitting the encrypted authentication code.

13. A transponder comprising:

means for receiving, by a transponder, an encrypted interrogation signal, an authentication code, and GPS information associated with a sender of the encrypted interrogatin signal and the authentication code;

means for activating the transponder in response to the receiving the encrypted interrogation signal and the authentication code;

means for authenticating the sender of the encrypted interrogation signal using the GPS information and by decrypting the encrypted interrogation signal in response to authenticating the sender of the encrypted interrogation signal; and

means for authenticating the transponder to the sender of the encrypted interrogation signal in response to authenticating the sender of the encrypted interrogation signal, wherein the means for authenticating the transponder comprises;

means for encrypting the authentication code; and

means for transmitting the encrypted authentication code.