Method and system for providing information on pre-purchase and post-purchase items using RFID and computer-readable storage media storing programs for executing the method

• US 9,213,971 B2
• Filed: 02/07/2008
• Issued: 12/15/2015
• Est. Priority Date: 02/28/2007
• Status: Active Grant

• Current Assignee: Korea University Industrial & Academic Collaboration Foundation
• Original Assignee: Korea University Industrial & Academic Collaboration Foundation
• Inventors: Lee, Dong Hoon, Choi, Eun Young, Kim, Il Jung
• Primary Examiner(s): NEUBIG, MARGARET M
• Application Number:
  US12/027,932
• Publication Number:
  US 20080208753A1
• Time in Patent Office: 2,868 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06K 7/10366 the interrogation device being adapted for miscellaneous applications
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G07G 1/009 the reader being an RFID reader
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Pre-purchase and post-purchase item information provision methods and systems using an RFID technology and computer readable storage media storing programs for executing the methods are provided. A pre-purchase item information provision method for a radio frequency identification system according to the present invention includes transmitting, if a mobile reader is detected by a local server installed in a salesroom, a certificate containing information on a location of an object information service server and an authentication value to the mobile reader; transmitting, at the mobile reader, a query requesting an item ID to a tag attached to a target item; transmitting, at the tag, a item ID information generated by encrypting the item ID using the authentication value to the mobile reader; transmitting, at the mobile reader, the item ID information and the authentication value to the object information service server; and transmitting, at the object information service server, data retrieved in a database in correspondence to the item ID, the data being retrieved when the authentication value exists in the database. The item information provision method and system of the present invention can guarantee reliability of information on an item in the pre-purchase state and prevent the information from being eavesdropped in both the pre-purchase and post-purchase states. Also, the item information provision method and system can prevent the tag ID from being tracked, thereby protecting purchaser'"'"'s privacy, preventing the tag from being forged, and improving computation efficiency.

Claims

1. A pre-purchase item information provision method for a radio frequency identification system, comprising:

transmitting to a mobile reader by a local server installed in a salesroom, a certificate containing information on a location of an object information service server and an authentication value, in response to the mobile reader being detected by the local server;

transmitting, by the mobile reader, a query requesting an item ID uniquely identifying the target item, the item ID being stored in a tag attached to a target item, the query including the authentication value;

encrypting, by the tag, the item ID based on the authentication value transmitted in the query;

transmitting, by the tag, the encrypted item ID to the mobile reader;

transmitting to the object information service server, by the mobile reader, based on the location information in the certificate, the encrypted item ID and the authentication value;

determining, by the object information service server, whether the authentication value transmitted by the mobile reader exists in a database accessible to the object information service server;

retrieving, by the object information service server, data associated with the target item in response to determining that the authentication value exists in the database;

transmitting, by the object information service server, the data retrieved from the database to the mobile reader; and

displaying, by the mobile reader, the data transmitted by the object information service server.

2. The method of claim 1, wherein the encrypting the item ID includes:

performing a hash operation based on a tag key, hash function, and authentication value (C_i), and generating a keyed hash h_k(C_i) in response; and

performing an exclusive-OR operation on the item ID and the keyed hash h_k(C_i).

3. The method of claim 1, wherein the object information server stores information associated with Electronic Product Code (EPC).

5. The method of claim 2, wherein the tag key is a value associated with the tag.

6. The method of claim 5, wherein the tag key is stored in the mobile reader.

7. The method of claim 2 further comprising:

obtaining by the object information service server the item ID of the target item based on the key value, the encrypted item ID, and the authentication value.

8. The method of claim 1, wherein the local server stores a corresponding authentication value for each of a plurality of target items available for purchase.

9. The method of claim 1, wherein the local server is remotely located from the object information service server.

10. The method of claim 1, wherein the item ID uniquely identifying the target item is an electronic product code of the target item.

11. The method of claim 1, wherein the data retrieved by the object information service server in response to determining that the authentication value exists in the database, is product information of the target item.

12. The method of claim 7, wherein the obtaining the item ID includes performing an exclusive-OR operation on the encrypted item ID and the keyed hash h_k(C_i).

4. A pre-purchase item information provision system comprising:

an object information service server;

a local server operatively coupled to the object information service server, the local server being configured to transmit a certificate containing information on a location of the object information service server and an authentication value;

a mobile reader configured to receive from the local server the certificate containing the information on the location of the object information service server and the authentication value, the mobile reader being further configured to transmit a query for requesting an item ID uniquely identifying a specific item in response to a user command, the query including the authentication value; and

a tag means coupled to the specific item and storing the item ID of the specific item, the tag means being configured to receive the query from the mobile reader, encrypt the item ID based on the authentication value transmitted in the query, and transmit the encrypted item ID,

wherein, the object information service server is configured to receive from the mobile reader the encrypted item ID and the authentication value, determine whether the authentication value transmitted by the mobile reader exists in a database accessible to the object information service server, retrieve data associated with the specific item in response to determining that the authentication value exists in the database, and transmit the retrieved data to the mobile reader for display.