Method and Apparatus for Providing Security in a Radio Frequency Identification System

• US 20090028329A1
• Filed: 12/31/2007
• Published: 01/29/2009
• Est. Priority Date: 07/23/2007
• Status: Abandoned Application

• Current Assignee: Savi Technology Incorporated
• Original Assignee: Savi Technology Incorporated
• Inventors: Cargonja, Nikola, Zhu, Liping Julia, Stough, Stephen Alan, Shiledar, Devendra, Evans, Allan M., Balabine, Igor V.
• Application Number:
  US11/967,977
• Publication Number:
  US 20090028329A1
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A response to an event involves transmitting a communication for propagation away from a part externally thereof, the communication containing first and second segments that are respectively subject to first and second security provisions that are different.

Claims

1. An apparatus comprising a part that responds to an event by transmitting a communication for propagation away from said part externally thereof, said communication containing first and second segments that are respectively subject to first and second security provisions that are different.

2. An apparatus according to claim 1,

wherein said first security provision includes said first segment being encrypted with a first key;

and

wherein said second security provision includes said second segment being encrypted with a second key that is different from said first key.

3. An apparatus according to claim 2,

wherein said communication includes a third segment containing said first key encrypted with a third key different from each of said first and second keys;

and

wherein said communication includes a fourth segment containing said second key encrypted with a fourth key different from each of said first, second and third keys.

4. An apparatus according to claim 3,

wherein said third key is a public key associated with a first entity that is an intended recipient of said first segment;

and

wherein said fourth key is a public key associated with a second entity that is an intended recipient of said second segment, said first and second entities being different.

5. An apparatus according to claim 4,

wherein said tag includes recipient certificate storage, and structure that permits at least one of secure installation to and secure removal from said storage of recipient digital certificates;

and

wherein said storage contains first and second recipient digital certificates that are different, that respectively identify said first and second intended recipients, and that respectively contain said third and fourth keys.

6. An apparatus according to claim 1, wherein said communication is a wireless communication.

7. An apparatus according to claim 1, wherein said communication conforms to a predetermined communications protocol.

8. An apparatus according to claim 7, wherein said communications protocol is ISO 18000-7.

9. An apparatus according to claim 1, wherein said part is a tag.

10. An apparatus according to claim 1, wherein said part is configured to receive a further communication originating externally of said part and containing a command, said event being receipt by said part of said further communication.