Blockchain Asset Tracking with RFID Nonce Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain-based asset tracking systems are vulnerable to fraud due to the potential misuse of serial numbers, as entities can manipulate asset status updates without actual possession of the assets, leading to unauthorized control and tampering.
Innovation Solution
Implementing a two-factor identification mechanism using RFID tags with a nonce system, where a serial number and a dynamically updated nonce value are used to validate asset updates in the blockchain, ensuring that only the asset's current possessor can perform legitimate updates by matching the nonce values stored on the tag and in the blockchain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a serial number is used to identify an asset in the blockchain ledger, then the asset can be tracked and ownership established, but the system becomes vulnerable to fraud where entities can manipulate asset status updates without actual possession of the assets
Solution Approach 1:
The identification system is segmented into two distinct components: a static serial number stored in the RFID tag and a dynamic nonce value that changes with each update. This segmentation prevents fraud because possessing only the serial number is insufficient - the attacker also needs the current nonce value stored in the RFID tag, which is not derivable from the serial number alone.
Solution Approach 2:
The system transitions from a static identification approach (serial number only) to a dynamic approach by introducing the nonce value that is updated with each asset status change. The nonce is read from the RFID tag during each update operation, ensuring that the identification credentials change over time and cannot be reused or predicted by attackers.
2Ease of operation
If only a serial number is used for asset identification, then the system is simple to operate, but security is compromised allowing unauthorized control
Solution Approach 1:
The RFID tag automatically provides both the serial number and the current nonce value during the update process. The reader device simply reads these values from the tag without requiring manual input or complex authentication procedures from the user. This maintains ease of operation while significantly improving security through the two-factor identification mechanism.
3Reliability
If a two-factor identification mechanism with nonce is implemented, then fraud risk is reduced and security is enhanced, but the system complexity increases
Solution Approach 1:
The RFID tag serves as an intermediary device that stores and provides both the serial number and nonce value. This intermediary handles the complexity of managing two identification factors, while the reader device and blockchain system only need to perform simple read and validation operations. The intermediary approach distributes the complexity appropriately across system components.
4Reliability
If the nonce value is stored and validated in the blockchain, then tamper-proof tracking is achieved, but the data storage requirements and validation complexity increase
Solution Approach 1:
The system implements feedback by storing the nonce value in the blockchain ledger and using it to validate subsequent update requests. Each successful update provides feedback by confirming the nonce match, and the validated nonce becomes the basis for the next validation cycle. This feedback mechanism ensures continuous verification of asset possession while maintaining a clear audit trail in the blockchain.
Data Source
AI summary
A blockchain of transactions may be referenced for various purposes and may be later accessed by interested parties for ledger verification. One example method of operation may include reading a tag affixed to an asset, transmitting a request to update an asset status of the asset in a blockchain, receiving validation confirmation based on content of the request, and updating the asset status of the asset in the blockchain.