Location-based access to RFID tag information

• US 9,959,435 B1
• Filed: 11/23/2016
• Issued: 05/01/2018
• Est. Priority Date: 11/25/2015
• Status: Active Grant

• Current Assignee: Impinj, Inc.
• Original Assignee: Impinj, Inc.
• Inventors: Diorio, Christopher J., Cooper, Scott A., Sundstrom, Kurt E., Humes, Todd E., Pesavento, Alberto
• Primary Examiner(s): Nguyen, Nam V
• Application Number:
  US15/360,411
• Time in Patent Office: 524 Days
• Field of Search: 3405722, 3405724, 340 101- 104
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Embodiments are directed to restricting access to Radio Frequency Identification (RFID) tag information based on location. Access to RFID tag information may be restricted at the reader level, at the requester level, and at the network level. When reader-level restrictions exist, devices may be prevented from inventorying tags and retrieving information from tags. When requester-level restrictions exist, a requester or device may be prevented from receiving tag information from inventoried tags or a network. When network-level restrictions exist, a network may discard or otherwise restrict tag information received from devices.

Claims

1. A method for a Radio Frequency Identification (RFID) reader to restrict access to RFID tag information based on reader location, the method comprising:

determining a location of the reader based on at least one of a global navigation system, an indoor positioning system, a beacon, an infrastructure tag, and location information from a coupled device;

determining the reader is in a first location;

receiving a first request for first tag information while the reader is in the first location;

determining that the reader is not authorized to engage tags in the first location;

refraining from responding to the first request with the first tag information;

determining the reader is in a second location different from the first location;

receiving a second request for second tag information while the reader is in the second location;

determining that the reader is authorized to engage tags in the second location;

retrieving the second tag information, wherein at least one of determining that the reader is not authorized to engage tags in the first location and is authorized to engage tags in the second location comprises;

determining restricted-location information; and

determining whether the reader is authorized to engage tags based on the restricted-location information; and

responding to the second request with the second tag information.

2. The method of claim 1, wherein determining the restricted-location information comprises receiving the restricted-location information from at least one of a network server and a local cache.

3. The method of claim 1, further comprising determining the restricted-location information based on at least one of a beacon and an infrastructure tag associated with at least one of the first location and the second location.

4. The method of claim 1, wherein refraining from responding with the first tag information comprises at least one of:

disabling a transmit capability of the reader;

disabling a receive capability of the reader;

disabling a logical functionality of the reader;

refraining from forwarding received tag data; and

responding with a message indicating that the reader is not authorized to engage tags.

5. A method to restrict Radio Frequency Identification (RFID) tag information based on location, the method comprising:

receiving, from a reader system, first tag information;

determining that the reader system is in a first location;

determining that the reader system is not authorized to engage tags in the first location;

in response to determining that the reader system is not authorized to engage tags in the first location, indicating that the first tag information is restricted;

receiving, from the reader system, second tag information;

determining that the reader system is in a second location different from the first location;

determining that the reader system is authorized to engage tags in the second location; and

in response to determining that the reader system is authorized to engage tags in the second location, indicating that access to the second tag information is authorized, wherein determining that the reader system is in the first location or the second location is based on at least one of;

receipt of a message sent by a location marker associated with one of the first location and the second location;

restricted-location information;

an identifier for the reader system;

an identifier for a user of the reader system;

a message from a tag; and

a cryptographically secured message from the reader system.

6. The method of claim 5, wherein indicating that the first tag information is restricted comprises at least one of:

discarding the first tag information,

storing the first tag information while indicating that access to the first tag information is restricted,

sending a message to the reader system indicating that the first tag information is restricted, and

sending a message to the reader system indicating that the reader system is not authorized to engage tags in the first location.

7. The method of claim 5, wherein indicating that access to the second tag information is authorized comprises sending additional information associated with the second tag information to the reader system.

8. A Radio Frequency Identification (RFID) reader configured to restrict access to RFID tag information based on reader location, the reader comprising:

an interface module configured to receive requests for tag information;

a transceiver module configured to transmit commands to and receive information from RFID tags;

a location module configured to;

determine a location of the reader based on at least one of a global navigation system, an indoor positioning system, a beacon, an infrastructure tag, and location information from a coupled device; and

provide the determined location to the processor module; and

a processor module configured to;

receive, from the interface module, a first request for first tag information while the reader is in a first location;

determine that the reader is not authorized to engage tags in the first location;

refrain from responding to the first request with the first tag information;

receive, from the interface module, a second request for second tag information while the reader is in a second location different from the first location;

determine that the reader is authorized to engage tags in the second location;

retrieve, via the transceiver module, the second tag information;

respond to the second request with the second tag information,

determine restricted-location information; and

determine whether the reader is authorized to engage tags in the first and second locations based on the restricted-location information.

9. The reader of claim 8, wherein the processor module is configured to receive the restricted-location information from at least one of a network server and a local cache.

10. The reader of claim 8, wherein the processor module is configured to determine the restricted-location information based on at least one of a beacon and an infrastructure tag associated with at least one of the first and second locations.

11. The reader of claim 8, wherein the processor module is configured to refrain from responding with the first tag information by at least one of:

disabling the transceiver module;

disabling a logical functionality of the transceiver module;

preventing the transceiver module from transmitting inventorying commands;

preventing the transceiver module from receiving tag replies;

refraining from forwarding received tag replies; and

responding with a message indicating that the reader is not authorized to engage tags.