Radio frequency identification system and method

• US 20070057768A1
• Filed: 09/12/2006
• Published: 03/15/2007
• Est. Priority Date: 09/13/2005
• Status: Active Grant

• Current Assignee: NEC Company Limited
• Original Assignee: NEC Company Limited
• Inventors: Zeng, Ke, Fujita, Tomoyuki, Hsueh, Min-Yu
• Granted Patent: US 8,058,973 B2
• Time in Patent Office: Days
• US Class Current: 340/10.100
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 9/302 involving the integer factorization problem, e.g. RSA or quadratic sieve [QS] schemes
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

The invention discloses a radio frequency identification system, comprising: a radio frequency identification tag having an identification code and a set of verifiable data stored therein; and a radio frequency identification reader which sends a reading request to the radio frequency identification tag, requesting to read a first portion of the set of verifiable data, wherein the radio frequency identification tag further comprising control means, which, when the radio frequency identification tag receives the reading request from the radio frequency identification reader, in case of that the set of verifiable data has not been performed a locking operation, performs the locking operation on the set of verifiable data, so that from then on any data of a second portion of the set of verifiable data cannot be read.

Claims

1. A radio frequency identification system, comprising:

a radio frequency identification tag having an Identification code and a set of verifiable data stored therein; and

a radio frequency identification reader which sends a reading request to the radio frequency identification tag, requesting to read a first portion of the set of verifiable data, wherein

the radio frequency identification tag further comprising control means, which, when the radio frequency identification tag receives the reading request from the radio frequency identification reader, in case of that the set of verifiable data has not been performed a locking operation, performs the locking operation on the set of verifiable data, so that from then on any data of a second portion of the set of verifiable data cannot be read.

2. The radio frequency identification system according to claim 1, wherein the control means has the first portion of the set of verifiable data be read by the radio frequency identification reader before performing the locking operation.

3. The radio frequency identification system according to claim 1, wherein the control means has the first portion of the set of verifiable data be read by the radio frequency identification reader after performing the locking operation.

4. The radio frequency identification system according to claim 1, wherein the identification code uniquely identifies the radio frequency identification tag.

5. The radio frequency identification system according to claim 1, wherein the radio frequency identification tag is attached onto a product to be authenticated, and the identification code includes an EPC code.

6. The radio frequency identification system according to claim 1, wherein the data in the set of verifiable data is obtained by encrypting the identification code.

7. The radio frequency identification system according to claim 1, wherein the data in the set of verifiable data is obtained by encrypting the identification code and other information.

8. The radio frequency identification system according to claim 1, wherein the first portion of the set of verifiable data is randomly selected from the set of verifiable data.

9. The radio frequency identification system according to claim 1, wherein the second portion of the set of verifiable data does not include any data in the first portion of the set of verifiable data.

10. The radio frequency identification system according to claim 1, wherein the radio frequency identification reader further comprising authenticating means to authenticate the radio frequency identification tag based on a portion of the set of verifiable data read from the radio frequency identification tag.

11. The radio frequency identification system according to claim 1, wherein the set of verifiable data includes n digital signatures SIG₁, SIG₂, . . . , SIG_n, the first portion of the set of verifiable data includes k digital signatures of the n digital signatures, and the second portion of the set of verifiable data includes q digital signatures of the n digital signatures.

12. The radio frequency identification system according to claim 11, wherein k=n*0.5 if n is even;

and k=n*0.5+0.5 or k=n*0.5−

0.5 if n is odd.

13. The radio frequency identification system according to claim 11, wherein each digital signature SIG_i of the n digital signatures SIG₁, SIG₂, . . . , SIG_n takes a form of (S_i, C), including a portion S_i and a portion C, i=1, . . . , n, and all digital signatures of the n digital signatures share one common portion C.

14. The radio frequency identification system according to claim 13, wherein each digital signature of the n digital signatures SIG₁, SIG₂, . . . , SIG_n is computed and verified as follows:

selecting a group G of order v;

selecting a subgroup of order u of said group G, where u≦

v;

selecting n private keys x1, x2, . . . , xn based on said order u, where 1<

|xi|<

u, i=1, . . . , n;

selecting an element g of group G as the generator;

selecting n integers r1, r2, . . . , rn as indicators within said order u, where 0<

|ri|<

u, i=1, . . . , n;

selecting a random integer r within said order u, where 0<

|r|<

u, and computing C=H(M, g^{r*r1*r2* . . . *rn}) where H is secure hashing function, and M represents the identification code and other information;

computing S_i=r*(r1*r2* . . . *rn)/ri−

C *xi;

releasing (S₁, C), (S₂, C), . . . , (S_n, C) as n digital signatures on the same message M;

computing public keys y_i=(g^ri, g^ri*xi) based on said private key, said generator and said indicator.

based on public-key y_i, verifying whether SIG_i=(S_i, C) is valid signature on the message M by computing C′

=H(M, (g^ri)^si*(g^ri*xi)^C), and If C′

=C, SIG_i is a valid digital signature on message M;

otherwise, SIG_i is invalid.

15. The radio frequency identification system according to claim 13, wherein each digital signature of the n digital signatures SIG₁, SIG₂, . . . , SIG_n is computed and verified as follows:

selecting a group G of order v;

selecting a subgroup of order u of said group G, where u≦

v;

selecting n private keys x1, x2, . . . , xn based on said order u, where 1<

|xi|<

u, i=1, . . . ,n;

selecting an element g of group G as the generator;

selecting n integers r1, r2, . . . , rn as indicators within said order u, where 0<

|ri|<

u, i=1, . . . , n;

selecting a random integer r within said order u, where 0<

|r|<

u, and computing C=H(M, g^{r*r1*r2* . . . *rn}) where H is secure hashing function, and M represents the identification code and other information;

computing S_i=r*(r1*r2* . . . *rn)/(r1*r2* . . . *ri)−

C*xi;

releasing (S₁, C), (S₂, C), . . . , (S_n, C) as n digital signatures on the same message M;

computing public keys y_i=(g^{r1*r2* . . . *ri}, g^{r1*r2* . . . *ri*xi}) based on said private key, said generator and said indicator.

based on public-key y_i, verifying whether SIG_i=(S_i, C) is valid signature on the message M by computing C′

=H(M, (g^{r1*r2* . . . *ri})^si*(g^{r1*r2* . . . *ri*xi})^C), and If C′

=C, SIG_i is a valid digital signature on message M;

otherwise, SIG_i is invalid.

16. The radio frequency identification system according to claim 1, wherein,

the radio frequency identification tag further has another m sets of verifiable data stored therein;

the radio frequency identification reader further sends at least one more reading request, requesting to read a portion of at least one set of the m sets of verifiable data; and

when the radio frequency identification tag receives the at least one more reading request from the radio frequency identification reader, in case of that the set of verifiable data being requested has not been performed a locking operation, the control means performs the locking operation on the set of verifiable data being requested, so that from then on any signature of another portion of the set of verifiable data being requested cannot be read.

17. A radio frequency identification tag having an Identification code and a set of verifiable data stored therein, wherein

the radio frequency identification tag further comprising control means, which, when the radio frequency identification tag receives a reading request that requests to read a first portion of the set of verifiable data, in case of that the set of verifiable data has not been performed a locking operation, performs the locking operation on the set of verifiable data, so that from then on any data of a second portion of the set of verifiable data cannot be read.

18. The radio frequency identification tag according to claim 17, wherein the control means has the first portion of the set of verifiable data be read before performing the locking operation.

19. The radio frequency identification tag according to claim 17, wherein the control means has the first portion of the set of verifiable data be read after performing the locking operation.

20. The radio frequency identification tag according to claim 17, wherein the identification code uniquely identifies the radio frequency identification tag.

21. The radio frequency identification tag according to claim 17, wherein the radio frequency identification tag is attached onto a product to be authenticated, and the identification code includes an EPC code.

22. The radio frequency identification tag according to claim 17, wherein the data in the set of verifiable data is obtained by encrypting the identification code.

23. The radio frequency identification tag according to claim 17, wherein the data in the set of verifiable data is obtained by encrypting the identification code and other information.

24. The radio frequency identification tag according to claim 17, wherein the second portion of the set of verifiable data does not include any data in the first portion of the set of verifiable data.

25. The radio frequency identification tag according to claim 17, wherein the set of verifiable data includes n digital signatures SIG₁, SIG₂, . . . , SIG_n, the first portion of the set of verifiable data includes k digital signatures of the n digital signatures, and the second portion of the set of verifiable data includes q digital signatures of the n digital signatures.

26. The radio frequency identification tag according to claim 25, wherein k=n*0.5 if n is even;

and k=n*0.5+0.5 or k=n*0.5−

0.5 if n is odd.

27. The radio frequency identification tag according to claim 25, wherein each digital signature SIG_i of the n digital signatures SIG₁, SIG₂, . . . SIG_n takes a form of (S_i, C), including a portion S_i and a portion C, i=1, . . . , n, and all digital signatures of the n digital signatures share one common portion C.

28. The radio frequency identification tag according to claim 27, wherein each digital signature of the n digital signatures SIG₁, SIG₂, . . . , SIG_n is computed and verified as follows:

selecting a group G of order v;

selecting a subgroup of order u of said group G, where u≦

v;

selecting n private keys x1, x2, . . . , xn based on said order u, where 1<

|xi|<

u, i=1, . . . , n;

selecting an element g of group G as the generator;

selecting n integers r1, r2, . . . ,rn as indicators within said order u, where 0<

|ri|<

u, i=1, . . . , n;

selecting a random integer r within said order u, where 0<

|r|<

u, and computing C=H(M, g^{r*r1*r2* . . . *rn}) where H is secure hashing function, and M represents the identification code and other information;

computing S_i=r*(r1*r2* . . . *rn)/ri−

C*xi;

releasing (S₁, C), (S₂, C), . . . , (S_n, C) as n digital signatures on the same message M;

computing public keys y_i=(g^ri, g^ri*xi) based on said private key, said generator and said indicator.

based on public-key y_i, verifying whether SIG_i=(S_i, C) is valid signature on the message M by computing C′

=H(M, (g^ri)^si*(g^ri*xi)^C), and If C′

=C, SIG_i is a valid digital signature on message M;

otherwise, SIG_i is invalid.

29. The radio frequency identification tag according to claim 27, wherein each digital signature of the n digital signatures SIG₁, SIG₂, . . . , SIG_n is computed and verified as follows:

selecting a group G of order v;

selecting a subgroup of order u of said group G, where u≦

v;

selecting n private keys x1, x2, . . . , xn based on said order u, where 121 |xi|<

u, i=1, . . . , n;

selecting an element g of group G as the generator;

selecting n integers r1, r2, . . . , rn as indicators within said order u, where 0<

|ri|<

u, i=1, . . . , n;

selecting a random integer r within said order u, where 0<

|r|<

u, and computing C=H(M, g^{r*r1*r2* . . . *rn}) where H is secure hashing function, and M represents the identification code and other information;

computing S_i=r*(r1*r2* . . . *rn)/(r1*r2* . . . *ri)−

C*xi;

releasing (S₁, C), (S₂, C), . . . , (S_n, C) as n digital signatures on the same message M;

computing public keys y_i=(g^{r1*r2 . . . *ri}, g^{r1*r2* . . . *ri*xi}) based on said private key, said generator and said indicator.

based on public-key y_i, verifying whether SIG_i=(S_i, C) is valid signature on the message M by computing C′

=H(M, (g_{r1*r2* . . . *ri})^si*(g^{r1*r2* . . . *ri*xi})^C), and If C′

=C, SIG_i is a valid digital signature on message M;

otherwise, SIG_i is invalid.

30. The radio frequency identification tag according to claim 17, wherein,

the radio frequency identification tag further has another m sets of verifiable data stored therein;

the radio frequency identification reader further sends; and

when the radio frequency identification tag receives at least one more reading request which requests to read a portion of at least one set of the m sets of verifiable data, in case of that the set of verifiable data being requested has not been performed a locking operation, the control means performs the locking operation on the set of verifiable data being requested, so that from then on any signature of another portion of the set of verifiable data being requested cannot be read.

31. A radio frequency identification method, comprising:

storing an Identification code and a set of verifiable data in a radio frequency identification tag; and

a radio frequency identification reader sends a reading request to the radio frequency identification tag, requesting to read a first portion of the set of verifiable data, wherein

the radio frequency identification tag upon receiving the reading request from the radio frequency identification reader, in case of that the set of verifiable data has not been performed a locking operation, performs the locking operation on the set of verifiable data, so that from then on any data of a second portion of the set of verifiable data cannot be read.

32. The radio frequency identification method according to claim 31, further comprising having the first portion of the set of verifiable data read by the radio frequency identification reader before performing the locking operation.

33. The radio frequency identification method according to claim 31, further comprising having the first portion of the set of verifiable data read by the radio frequency identification reader after performing the locking operation.

34. The radio frequency identification method according to claim 31, wherein the identification code uniquely identifies the radio frequency identification tag.

35. The radio frequency identification method according to claim 31, wherein the radio frequency identification tag is attached onto a product to be authenticated, and the identification code includes an EPC code.

36. The radio frequency identification method according to claim 31, further comprising encrypting the identification code to obtain the data in the set of verifiable data.

37. The radio frequency identification method according to claim 31, further comprising encrypting the identification code and other information to obtain the data in the set of verifiable data.

38. The radio frequency identification method according to claim 31, further comprising randomly selecting the first portion of the set of verifiable data from the set of verifiable data.

39. The radio frequency identification method according to claim 31, wherein the second portion of the set of verifiable data does not include any data in the first portion of the set of verifiable data.

40. The radio frequency identification method according to claim 31, further comprising that the radio frequency identification reader authenticates the radio frequency identification tag based on a portion of the set of verifiable data read from the radio frequency identification tag.

41. The radio frequency identification method according to claim 31, wherein the set of verifiable data includes n digital signatures SIG₁, SIG₂, . . . , SIG_n, the first portion of the set of verifiable data includes k digital signatures of the n digital signatures, and the second portion of the set of verifiable data includes q digital signatures of the n digital signatures.

42. The radio frequency identification method according to claim 41, wherein k=n*0.5 if n is even;

and k=n*0.5+0.5 or k=n*0.5−

0.5 if n is odd.

43. The radio frequency identification method according to claim 41, wherein each digital signature SIG_i of the n digital signatures SIG₁, SIG₂, . . . , SIG_n takes a form of (S_i, C), including a portion S_i and a portion C, i=1, . . . , n, and all digital signatures of the n digital signatures share one common portion C.

44. The radio frequency identification method according to claim 43, further comprising computing and verifying each digital signature of the n digital signatures as follows:

selecting a group G of order v;

selecting a subgroup of order u of said group G, where u≦

v;

selecting n private keys x1, x2, . . . , xn based on said order u, where 1<

|xi|<

u, i=1, . . . , n;

selecting an element g of group G as the generator;

selecting n integers r1, r2, . . . ,rn as indicators within said order u, where 0<

|ri|<

u, i=1, . . . , n;

selecting a random integer r within said order u, where 0<

|r|<

u, and computing C=H(M, g^{r*r1*r2* . . . *rn}) where H is secure hashing function, and M represents the identification code and other information;

computing S_i=r*(r1*r2* . . . *rn)/ri−

C*xi;

releasing (S₁, C), (S₂, C), . . . , (S_n, C) as n digital signatures on the same message M;

computing public keys y_i=(g^ri, g^ri*xi) based on said private key, said generator and said indicator.

based on public-key y_i, verifying whether SIG_i=(S_i, C) is valid signature on the message M by computing C′

=H(M, (g^ri)^si*(g^ri*xi)^C), and If C′

=C, SIG_i is a valid digital signature on message M;

otherwise, SIG_i is invalid.

45. The radio frequency identification method according to claim 43, further comprising computing and verifying each digital signature of the n digital signatures as follows:

selecting a group G of order v;

selecting a subgroup of order u of said group G, where u≦

v;

selecting n private keys x1, x2, . . . , xn based on said order u, where 1<

|xi|<

u, i=1, . . . , n;

selecting an element g of group G as the generator;

selecting n integers r1, r2, . . . , rn as indicators within said order u, where 0<

|ri|<

u, i=1, . . . , n;

selecting a random integer r within said order u, where 0<

|r|<

u, and computing C=H(M, g^{r*r1*r2* . . . *rn}) where H is secure hashing function, and M represents the identification code and other information;

computing S_i=r*(r1*r2* . . . *rn)/(r1*r2* . . . *ri)−

C*xi;

releasing (S₁, C), (S₂, C), . . . , (S_n, C) as n digital signatures on the same message M;

computing public keys y_i=(g^{r1*r2* . . . , *ri}, g^{r1*r2* . . . *ri*xi}) based on said private key, said generator and said indicator.

based on public-key y_i, verifying whether SIG_i=(S_i, C) is valid signature on the message M by computing C′

=H(M, (g^{r1*r2* . . . *ri})^si*(g^{r1*r2* . . . *ri*xi})^C), and If C′

=C, SIG_i is a valid digital signature on message M;

otherwise, SIG_i is invalid.

46. The radio frequency identification method according to claim 31, further comprising,

storing another m sets of verifiable in the radio frequency identification tag,

the radio frequency identification reader further sends at least one more reading request, requesting to read a portion of at least one set of the m sets of verifiable data;

and

when the radio frequency identification tag receives the at least one more reading request from the radio frequency identification reader, in case of that the set of verifiable data being requested has not been performed a locking operation, the control means performs the locking operation on the set of verifiable data being requested, so that from then on any signature of another portion of the set of verifiable data being requested cannot be read.

47. A radio frequency identification system, comprising:

a radio frequency identification tag having an Identification code and m sets of verifiable data stored therein; and

a radio frequency identification reader which sends a reading request to the radio frequency identification tag, requesting to read a portion of each of t sets of verifiable data of the m sets of verifiable data, wherein

the radio frequency identification tag further comprising control means, which, when the radio frequency identification tag receives the reading request from the radio frequency identification reader, in case of that the t sets of verifiable data have not been performed a locking operation, performs the locking operation on the t sets of verifiable data, so that from then on another portion of each of the t sets of verifiable data cannot be read.

48. The radio frequency identification system according to claim 47, wherein the control means has the requested portion of each of the t sets of verifiable data be read by the radio frequency identification reader before performing the locking operation.

49. The radio frequency identification system according to claim 47, wherein the control means has the requested portion of each of the t sets of verifiable data be read by the radio frequency identification reader after performing the locking operation.

50. A radio frequency identification tag having an Identification code and m sets of verifiable data stored therein, wherein

the radio frequency identification tag further comprising control means, which, when the radio frequency identification tag receives a reading request that requests to read a portion of each of t sets of verifiable data of the m sets of verifiable data, in case of that the t sets of verifiable data have not been performed a locking operation, performs the locking operation on the t sets of verifiable data, so that from then on another portion of each of the t sets of verifiable data cannot be read.

51. The radio frequency identification tag according to claim 50, wherein the control means has the requested portion of each of the t sets of verifiable data be read before performing the locking operation.

52. The radio frequency identification tag according to claim 50, wherein the control means has the requested portion of each of the t sets of verifiable data be read after performing the locking operation.

53. A radio frequency identification method, comprising:

storing an Identification code and m sets of verifiable data in a radio frequency identification tag; and

a radio frequency identification reader sends a reading request to the radio frequency identification tag, requesting to read a portion of each of t sets of verifiable data of the m sets of verifiable data, wherein

the radio frequency identification tag upon receiving the reading request from the radio frequency identification reader, in case of that the t sets of verifiable data have not been performed a locking operation, performs the locking operation on the t sets of verifiable data, so that from then on another portion of each of the t sets of verifiable data cannot be read.

54. The radio frequency identification method according to claim 53, further comprising having the requested portion of each of the t sets of verifiable data read by the radio frequency identification reader before performing the locking operation.

55. The radio frequency identification method according to claim 53, further comprising having the requested portion of each of the t sets of verifiable data read by the radio frequency identification reader after performing the locking operation.