USE OF RADIO FREQUENCY IDENTIFIER (RFID) TAGS FOR IDENTIFICATION OF AN AUTHENTICATION STATUS OF AN ITEM

• US 20090045911A1
• Filed: 10/16/2006
• Published: 02/19/2009
• Est. Priority Date: 12/15/2005
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Marmigere, Gerard, Clement, Jean-Yves, Bauchot, Frederic, Secondo, Pierre
• Granted Patent: US 8,212,651 B2
• Time in Patent Office: Days
• US Class Current: 340/5.800
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method and system for identifying an authentication status of a first item. An RFID reader transmits zero and a random number to a first RFID tag associated with the first item. The first RFID tag uses a hashing function to compute a hash (H1) of a concatenation of an identifier (Id1) of the first RFID tag, the random number, and a first secret key and sends the hash H1 to the RFID reader which then transmits the identifier Id1 and the random number to a second RFID tag. The second RFID tag uses the hashing function to compute a hash (H2) of a concatenation of the identifier Id1, the random number, and a second secret key and sends the hash H2 to the RFID reader. The authentication status of authentic or counterfeit is determined for the first item based on whether or not H1 is equal to H2.

Claims

1-10. -10. (canceled)

11. A method for identifying an authentication status of a first item through use of an algorithm configured to be executed within a first Radio Frequency Identifier (RFID) tag associated with the first item and configured to be executed within a second RFID tag associated with a second item that is a genuine representation of the first item, wherein the algorithm performs:

receiving a first parameter as a first input and a second parameter as a second input;

forming a concatenation (C) of a parameter value, the second parameter, and a key value;

computing a hash (H) by applying a hashing function to the concatenation C; and

returning an identifier (Id) as a first output and the hash H as a second output, wherein the algorithm determines the parameter value to be the identifier Id if the first parameter is zero or to be the first parameter if the first parameter is not zero, wherein the method is performed by an apparatus comprising an RFID reader and a computer coupled to the RFID reader, and wherein the method comprises;

said computer generating a random number (R);

after said generating the random number R, said RFID reader transmitting zero (0) and the random number R from the RFID reader to the first RFID tag, wherein algorithm in the first RFID tag is configured to be executed using the transmitted zero and random number R as the first and second parameter, respectively, a first secret key stored in the first RFID tag as the key value, and an identifier Id1 of the first RFID tag stored in the first RFID tag as the identifier Id;

after said transmitting zero and the random number R, said RFID reader receiving from the first RFID tag first data comprising the identifier Id1 and a hash (H1) consisting of the hash H computed by the algorithm as a result of the algorithm being executed in the first RFID tag;

after said receiving the first data, said computer determining that the identifier Id1 in the first data is equal to an RFID identifier of the first item stored in a database;

after determining that the identifier Id1 in the first data is equal to the RFID identifier, said RFID reader transmitting the identifier Id1 and the random number R to the second RFID tag, wherein algorithm in the second RFID is configured to be executed using the transmitted identifier Id1 and random number R as the first and second parameter, respectively, a second secret key stored in the second RFID tag as the key value, and an identifier Id2 of the second RFID tag stored in the second RFID tag as the identifier Id;

after said transmitting the identifier Id1 and the random number R, said RFID reader receiving from the second RFID tag second data comprising the identifier ID2 and a hash (H2) consisting of the hash H computed by the algorithm as a result of the algorithm being executed in the second RFID tag;

after said receiving the second data, said computer determining the authentication status of the first item by ascertaining whether H1 is equal to H2 and subsequently determining that the authentication status is that the first item is authentic or counterfeit if said ascertaining has ascertained that H1 is equal to H2 or that H1 is unequal to H2, respectively;

said computer communicating the authentication status to a user.

12. The method of claim 11, wherein said ascertaining ascertains that H1 is equal to H2.

13. The method of claim 11, wherein said ascertaining ascertains that H1 is unequal to H2.

14. The method of claim 11, wherein the second item comprises the second RFID while the method is being performed.

15. The method of claim 14, wherein the secret key is associated with an organization that sent a request to an RFID manufacturer to manufacture the first RFID and transmit the first RFID to an item manufacturer, wherein the organization had received the first item comprising the first RFID from the item manufacturer and had transmitted the received the first item comprising the first RFID to an agency that uses the apparatus to perform the method.

16. The method of claim 11, wherein while the method is being performed the second item does not comprise the second RFID, wherein while the method is being performed the second RFID is in a book that comprises a plurality of RFIDs respectively associated with a plurality of items to be authenticated, wherein the plurality of RFIDs comprises the second RFID, wherein each RFID of the plurality of RFIDs is in a respective area on a page of a plurality of pages in the book, and wherein each respective area comprises an RFID of the plurality of RFIDs associated with a unique item of the plurality of items and further comprises a reference pertaining to the unique item.

17. The method of claim 11, wherein said communicating the authentication status comprises displaying text indicative of the authentication status, displaying a color indicative of the authentication status, or sounding an alert indicative of the authentication status.

18. A system comprising an apparatus, said apparatus comprising an RFID reader, a computer coupled to the RFID reader, and a computer readable storage medium comprising instructions that when implemented by the computer perform a being authentic or counterfeit through use of an algorithm configured to be executed within a first Radio Frequency Identifier (RFID) tag associated with the first item and configured to be executed within a second RFID tag associated with a second item that is a genuine representation of the first item, wherein the algorithm performs:

receiving a first parameter as a first input and a second parameter as a second input;

forming a concatenation (C) of a parameter value, the second parameter, and a key value;

computing a hash (H) by applying a hashing function to the concatenation C; and

returning an identifier (Id) as a first output and the hash H as a second output, wherein the algorithm determines the parameter value to be the identifier Id if the first parameter is zero or to be the first parameter if the first parameter is not zero, and wherein the method comprises;

said computer generating a random number (R);

after said generating the random number R, said RFID reader transmitting zero (0) and the random number R from the RFID reader to the first RFID tag, wherein algorithm in the first RFID tag is configured to be executed using the transmitted zero and random number R as the first and second parameter, respectively, a first secret key stored in the first RFID tag as the key value, and an identifier Id1 of the first RFID tag stored in the first RFID tag as the identifier Id;

after said transmitting zero and the random number R, said RFID reader receiving from the first RFID tag first data comprising the identifier Id1 and a hash (H1) consisting of the hash H computed by the algorithm as a result of the algorithm being executed in the first RFID tag;

after said receiving the first data, said computer determining that the identifier Id1 in the first data is equal to an RFID identifier of the first item stored in a database;

after determining that the identifier Id1 in the first data is equal to the RFID identifier, said RFID reader transmitting the identifier Id1 and the random number R to the second RFID tag, wherein algorithm in the second RFID is configured to be executed using the transmitted identifier Id1 and random number R as the first and second parameter, respectively, a second secret key stored in the second RFID tag as the key value, and an identifier Id2 of the second RFID tag stored in the second RFID tag as the identifier Id;

after said transmitting the identifier Id1 and the random number R, said RFID reader receiving from the second RFID tag second data comprising the identifier ID2 and a hash (H2) consisting of the hash H computed by the algorithm as a result of the algorithm being executed in the second RFID tag;

after said receiving the second data, said computer determining the authentication status of the first item by ascertaining whether H1 is equal to H2 and subsequently determining that the authentication status is that the first item is authentic or counterfeit if said ascertaining has ascertained that H1 is equal to H2 or that H1 is unequal to H2, respectively;

said computer communicating the authentication status to a user.

19. The system of claim 18, wherein said ascertaining ascertains that H1 is equal to H2.

20. The system of claim 18, wherein said ascertaining ascertains that H1 is unequal to H2.

21. The system of claim 18, wherein the second item comprises the second RFID while the method is being performed.

22. The system of claim 21, wherein the secret key is associated with an organization that sent a request to an RFID manufacturer to manufacture the first RFID and transmit the first RFID to an item manufacturer, wherein the organization had received the first item comprising the first RFID from the item manufacturer and had transmitted the received the first item comprising the first RFID to an agency that uses the apparatus to perform the method.

23. The system of claim 18, wherein while the method is being performed the second item does not comprise the second RFID, wherein while the method is being performed the second RFID is in a book that comprises a plurality of RFIDs respectively associated with a plurality of items to be authenticated, wherein the plurality of RFIDs comprises the second RFID, wherein each RFID of the plurality of RFIDs is in a respective area on a page of a plurality of pages in the book, and wherein each respective area comprises an RFID of the plurality of RFIDs associated with a unique item of the plurality of items and further comprises a reference pertaining to the unique item.

24. The system of claim 18, wherein said communicating the authentication status comprises displaying text indicative of the authentication status, displaying a color indicative of the authentication status, or sounding an alert indicative of the authentication status.

25. A computer readable storage medium comprising instructions that when implemented by a computer perform a method for identifying an authentication status of a first item through use of an algorithm configured to be executed within a first Radio Frequency Identifier (RFID) tag associated with the first item and configured to be executed within a second RFID tag associated with a second item that is a genuine representation of the first item, wherein the algorithm performs:

receiving a first parameter as a first input and a second parameter as a second input;

forming a concatenation (C) of a parameter value, the second parameter, and a key value;

computing a hash (H) by applying a hashing function to the concatenation C; and

returning an identifier (Id) as a first output and the hash H as a second output, wherein the algorithm determines the parameter value to be the identifier Id if the first parameter is zero or to be the first parameter if the first parameter is not zero, wherein an apparatus comprises an RFID reader and the computer coupled to the RFID reader, and wherein the method comprises;

said computer generating a random number (R);

after said generating the random number R, said RFID reader transmitting zero (0) and the random number R from the RFID reader to the first RFID tag, wherein algorithm in the first RFID tag is configured to be executed using the transmitted zero and random number R as the first and second parameter, respectively, a first secret key stored in the first RFID tag as the key value, and an identifier Id1 of the first RFID tag stored in the first RFID tag as the identifier Id;

after said transmitting zero and the random number R, said RFID reader receiving from the first RFID tag first data comprising the identifier Id1 and a hash (H1) consisting of the hash H computed by the algorithm as a result of the algorithm being executed in the first RFID tag;

after said receiving the first data, said computer determining that the identifier Id1 in the first data is equal to an RFID identifier of the first item stored in a database;

after determining that the identifier Id1 in the first data is equal to the RFID identifier, said RFID reader transmitting the identifier Id1 and the random number R to the second RFID tag, wherein algorithm in the second RFID is configured to be executed using the transmitted identifier Id1 and random number R as the first and second parameter, respectively, a second secret key stored in the second RFID tag as the key value, and an identifier Id2 of the second RFID tag stored in the second RFID tag as the identifier Id;

after said transmitting the identifier Id1 and the random number R, said RFID reader receiving from the second RFID tag second data comprising the identifier ID2 and a hash (H2) consisting of the hash H computed by the algorithm as a result of the algorithm being executed in the second RFID tag;

after said receiving the second data, said computer determining the authentication status of the first item by ascertaining whether H1 is equal to H2 and subsequently determining that the authentication status is that the first item is authentic or counterfeit if said ascertaining has ascertained that H1 is equal to H2 or that H1 is unequal to H2, respectively;

said computer communicating the authentication status to a user.

26. The medium of claim 25, wherein said ascertaining ascertains that H1 is equal to H2.

27. The medium of claim 25, wherein said ascertaining ascertains that H1 is unequal to H2.

28. The medium of claim 25, wherein the second item comprises the second RFID while the method is being performed.

29. The medium of claim 28, wherein the secret key is associated with an organization that sent a request to an RFID manufacturer to manufacture the first RFID and transmit the first RFID to an item manufacturer, wherein the organization had received the first item comprising the first RFID from the item manufacturer and had transmitted the received the first item comprising the first RFID to an agency that uses the apparatus to perform the method.

30. The medium of claim 25, wherein while the method is being performed the second item does not comprise the second RFID, wherein while the method is being performed the second RFID is in a book that comprises a plurality of RFIDs respectively associated with a plurality of items to be authenticated, wherein the plurality of RFIDs comprises the second RFID, wherein each RFID of the plurality of RFIDs is in a respective area on a page of a plurality of pages in the book, and wherein each respective area comprises an RFID of the plurality of RFIDs associated with a unique item of the plurality of items and further comprises a reference pertaining to the unique item.