Network-enabled RFID tag endorsement

• US 9,928,390 B1
• Filed: 06/23/2016
• Issued: 03/27/2018
• Est. Priority Date: 04/08/2011
• Status: Active Grant

• Current Assignee: Impinj, Inc.
• Original Assignee: Impinj, Inc.
• Inventors: Diorio, Christopher J., Arnstein, Larry, Cooper, Scott A.
• Primary Examiner(s): Holloway, III, Edwin
• Application Number:
  US15/190,212
• Time in Patent Office: 642 Days
• Field of Search: 340 103
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06K 7/10128 the step consisting of detection of the presence of one or more record carriers in the vicinity of the interrogation device
• CPC Class Codes: G06K 7/10227 loading programming parameters or programs into the interrogator, e.g. for configuring the interrogator
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G08B 13/2454 Checking of authorisation of a person accessing tagged items in an EAS system
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A Radio Frequency Identification (RFID) reader may be configured to endorse an RFID tag. The reader receives an identifier from the tag and challenges the tag with a challenge. After receiving a response from the tag, the reader sends a first message including at least the identifier, challenge, and response to an authenticating entity and sends a second message including at least the identifier to a certifying entity. The reader then receives a first reply from the authenticating entity and a second reply from the certifying entity. The second reply may include a certificate associated with the tag, or may identify some property of the tag or an item associated with the tag. In some embodiments, the reader may serve as the authenticating and/or certifying entity.

Claims

1. A method for endorsing an RFID tag, the method comprising:

receiving an identifier from the tag;

challenging the tag with a challenge;

receiving a response from the tag;

sending a first message including at least the identifier, challenge, and response to an authenticating entity;

sending a second message including at least the identifier to a certifying entity;

receiving a first reply from the authenticating entity;

receiving a second reply from the certifying entity, wherein the second reply identifies a property of the tag or of an item to which the tag is affixed, the property including at least one of a production process property, an entity approval, a safety property, and a satisfaction rating; and

endorsing the RFID tag based on at least one of the first reply and the second reply.

2. The method of claim 1, wherein sending the second message comprises:

forming a certificate from the identifier and at least one assertion associated with the tag; and

sending the second message including the certificate to the certifying entity.

3. The method of claim 1, further comprising at least one of identifying and locating one or more of the authenticating entity and the certifying entity based on information received from the tag.

4. The method of claim 1, wherein at least one of the first and second messages further includes at least one of:

a reader certificate,

a physical location for the reader, and

a reader electronic signature.

5. The method of claim 1, wherein at least one of:

the authenticating entity and the certifying entity are the same entity,

the first and second messages are combined into a single message, and

the first and second replies are combined into a single reply.

6. The method of claim 1, further comprising challenging multiple tags with the challenge simultaneously, and wherein at least one of the tags is configured to store its response for a subsequent reading by the reader.

7. The method of claim 1, wherein at least one of:

the production process property indicates one or more of country of origin, labor practices, farming practices, energy usage, and whether the item is organic, vegan, or vegetarian; and

the entity approval indicates one or more of approval by a nongovernmental organization, approval by a government, and approval by a laboratory.

8. A method for endorsing an RFID tag, the method comprising:

receiving an identifier from the tag;

challenging the tag with a challenge;

receiving a response from the tag;

authenticating the response;

sending a message including at least the identifier to a certifying entity;

receiving a reply from the certifying entity, wherein the reply identifies a property of the tag or of an item to which the tag is affixed, the property including at least one of a production process property, an entity approval, a safety property, and a satisfaction rating; and

endorsing the RFID tag based on the reply.

9. The method of claim 8, wherein authenticating the response comprises authenticating the response based on the challenge and a tag key.

10. The method of claim 9, wherein the tag key is a private key and authenticating the response comprises authenticating the response based on the challenge and a public key associated with the private key.

11. The method of claim 8, wherein the message further includes at least one of:

a reader certificate;

a physical location for the reader; and

a reader electronic signature.

12. The method of claim 8, wherein receiving the identifier and receiving the response comprises receiving the identifier concatenated with the response.

13. The method of claim 8, wherein at least one of:

the production process property indicates one or more of country of origin, labor practices, farming practices, energy usage, and whether the item is organic, vegan, or vegetarian; and

the entity approval indicates one or more of approval by a nongovernmental organization, approval by a government, and approval by a laboratory.

14. A method for endorsing an RFID tag, the method comprising:

receiving an identifier from the tag;

challenging the tag with a challenge;

receiving a response from the tag;

authenticating the response;

sending a message including at least the identifier to a certifying entity; and

receiving a reply from the certifying entity, wherein the reply identifies a property of the tag or of an item to which the tag is affixed; and

endorsing the RFID tag based on the reply.

15. The method of claim 14, wherein authenticating the response comprises authenticating the response based on the challenge and a tag key.

16. The method of claim 15, wherein the tag key is a private key and authenticating the response comprises authenticating the response based on the challenge and a public key associated with the private key.

17. The method of claim 14, wherein receiving the identifier and receiving the response comprises receiving the identifier concatenated with the response.

18. The method of claim 14, further comprising challenging multiple tags with the challenge simultaneously, and wherein at least one of the tags is configured to store its response for a subsequent reading by the reader.

19. The method of claim 14, further comprising at least one of identifying and locating the certifying entity based on information received from the tag.

20. The method of claim 14, wherein the message further includes at least one of:

a reader certificate,

a physical location for the reader, and

a reader electronic signature.