System and method for enhanced RFID instrument security

• US 9,262,655 B2
• Filed: 02/19/2014
• Issued: 02/16/2016
• Est. Priority Date: 11/30/2004
• Status: Active Grant

• Current Assignee: Qualcomm FYX Incorporated (Qualcomm, Inc.)
• Original Assignee: Qualcomm FYX Incorporated (Qualcomm, Inc.)
• Inventors: Baranowski, James A.
• Primary Examiner(s): HOLLOWAY III, EDWIN C
• Application Number:
  US14/184,524
• Publication Number:
  US 20140169566A1
• Time in Patent Office: 727 Days
• Field of Search: 340/5.61, 340/10.1
• US Class Current: 1/1
• CPC Class Codes: G06K 7/10257 arrangements for protecting the interrogation against piracy attacks computer security in general G06F21/00; jamming of communication, countermeasures H04K3/00; secret communication H04K1/00
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system and method for using an RFID read/write device to secure an RFID operable instrument or an RF communication is provided. The invention includes security databases in communication with a processor for storing and communicating security protocols to the RFID read/write device. The invention includes a method for restricting the unauthorized use of an RFID read/write device. The invention includes a subscription service for communicating user credentials to a certificate authority to obtain a counter security protocol. The invention also includes decrypting information stored on an RF operable device or transmitted via radio-frequency using counter security protocols.

Claims

1. A method, comprising:

receiving, by a transponder, an encrypted interrogation signal, an authentication code, and GPS information associated with a sender of the encrypted interrogation signal and the authentication code, wherein the encrypted interrogation signal is associated with the authentication code;

activating the transponder in response to the receiving the encrypted interrogation signal and the authentication code;

authenticating the sender of the encrypted interrogation signal by using the GPS information and by decrypting the encrypted interrogation signal; and

in response to authenticating the sender of the encrypted interrogation signal,

encrypting the authentication code, and

transmitting the encrypted authentication code.

2. The method of claim 1, wherein the encrypted interrogation signal comprises a random code generated by an RFID device.

3. The method of claim 1, wherein the authentication code is associated with the transponder.

4. The method of claim 1, wherein the transponder comprises a transponder identification code.

5. The method of claim 4, wherein the encrypted authentication code is decryptable using a security authentication key unique to the transponder identification code.

6. The method of claim 1, wherein the transponder is configured with global positioning system (GPS) capability to be operable in a predetermined area.

7. The method of claim 6, further comprising deactivating the transponder in response to the GPS capability indicating the transponder has moved outside of the predetermined area.

8. The method of claim 1, further comprising receiving communications using a communications security protocol.

9. The method of claim 8, wherein the communications security protocol is an HTTPS protocol.

10. A transponder comprising:

a receiver configured to receive an encrypted interrogation signal, a transponder authentication code, and GPS information associated with a sender of the encrypted interrogation signal and an authentication code;

a processor configured to decrypt the encrypted interrogation signal to authenticate the sender of the authentication code,

wherein the processor is further configured to use the GPS information to authenticate the sender of the encrypted interrogation signal;

wherein the encrypted interrogation signal is associated with the transponder authentication code, and

wherein the processor is further configured to encrypt the transponder authentication code in response to authenticating the sender of the encrypted interrogation signal; and

a transmitter configured to transmit the encrypted transponder authentication code.

11. The transponder of claim 10, wherein the encrypted interrogation signal comprises a random code generated by an RFID device.

12. The transponder of claim 10, wherein the authentication code is associated with the transponder.

13. The transponder of claim 10, wherein the transponder comprises a transponder identification code.

14. The transponder of claim 13, wherein the encrypted authentication code is decryptable using a security authentication key unique to the transponder identification code.

15. The transponder of claim 10, wherein the transponder is configured with global positioning system (GPS) capability to be operable in a predetermined area.

16. The transponder of claim 15, wherein the processor is configured to deactivate the transponder in response to the GPS capability indicating the transponder has moved outside of the predetermined area.

17. A transponder including a tangible, non-transitory memory having instructions stored thereon that, in response to execution by the transponder, cause the transponder to perform operations, comprising:

code for receiving, by the transponder, an encrypted interrogation signal, an authentication code, and GPS information associated with a sender of the encrypted interrogation signal and the authentication code, wherein the encrypted interrogation signal is associated with the authentication code;

code for activating the transponder in response to the receiving the encrypted interrogation signal and the authentication code;

code for authenticating the sender of the encrypted interrogation signal by using the GPS information and by decrypting the encrypted interrogation signal; and

code for, in response to authenticating the sender of the encrypted interrogation signal,

encrypting the authentication code, and

transmitting the encrypted authentication code.

18. The transponder of claim 17, wherein the encrypted interrogation signal comprises a random code generated by an RFID device.

19. The transponder of claim 17, wherein the authentication code is associated with the transponder.

20. The transponder of claim 17, wherein the transponder comprises a transponder identification code.

21. The transponder of claim 20, wherein the encrypted authentication code is decryptable using a security authentication key unique to the transponder identification code.

22. The transponder of claim 17, wherein the transponder is configured with global positioning system (GPS) capability to be operable in a predetermined area.

23. The transponder of claim 22, further comprising code for deactivating the transponder in response to the GPS capability indicating the transponder has moved outside of the predetermined area.

24. A transponder comprising:

means for receiving, by the transponder, an encrypted interrogation signal, an authentication code, and GPS information associated with a sender of the encrypted interrogation signal and the authentication code;

means for activating the transponder in response to the receiving the encrypted interrogation signal and the authentication code;

means for authenticating the sender of the encrypted interrogation signal using the GPS information and by decrypting the encrypted interrogation signal in response to authenticating the sender of the encrypted interrogation signal; and

means for encrypting the authentication code and means for transmitting the authentication code responsive to authenticating the sender of the encrypted interrogation signal.

25. The transponder of claim 24, wherein the encrypted interrogation signal comprises a random code generated by an RFID device.

26. The transponder of claim 24, wherein the authentication code is associated with the transponder.

27. The transponder of claim 24, wherein the transponder comprises a transponder identification code.

28. The transponder of claim 27, wherein the encrypted authentication code is decryptable using a security authentication key unique to the transponder identification code.

29. The transponder of claim 24, wherein the transponder is configured with global positioning system (GPS) means operable in a predetermined area.

30. The transponder of claim 29, further comprising means for deactivating the transponder in response to the GPS means indicating the transponder has moved outside of the predetermined area.