Contactless Sensor Tag Verification System Using Dynamic Challenge-Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional contactless sensor tag verification systems lack reliability and security, as they are vulnerable to counterfeiting and deciphering, especially in high-security applications like financial transactions, due to the ease with which responding and reading devices can be compromised.
Innovation Solution
A system and method that involves a reading device generating a first verification code and an authority request, a sensor tag generating a second verification code through ciphering calculation, and a verifying device determining the authenticity of both the reading device and sensor tag by comparing dynamic values, using radio frequency communication and various operator and cipher modes to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional verification methods using dynamic verification codes are employed, then anti-faking effect is provided, but the devices are vulnerable to being counterfeited or deciphered due to ease of obtaining reading and responding devices
Solution Approach 1:
The verification system is segmented into three distinct components: the sensor tag, the reading device, and the verifying device. Each component has specific functions and capabilities, with the verifying device being a separate entity that neither the sensor tag nor the reading device can fully control or predict. This segmentation prevents any single component from being compromised and allows independent verification of each component's authenticity through separate challenge-response protocols.
Solution Approach 2:
The verifying device acts as an intermediary between the sensor tag and the reading device. It receives verification requests from the reading device, independently verifies both the reading device and the sensor tag using separate challenge-response protocols, and makes the final authentication decision. This intermediary role prevents direct trust relationships between the sensor tag and reading device, eliminating the vulnerability where a compromised reading device could trick the sensor tag.
2Reliability
If a verifying device is introduced to verify both sensor tag and reading device, then authenticity determination is improved, but device complexity increases
Solution Approach 1:
The verification system uses dynamic challenge-response protocols where verification codes change with each interaction. The verifying device generates dynamic challenges for both the reading device and the sensor tag, and the verification codes are time-varying or sequence-varying. This dynamic approach ensures that even if one verification instance is compromised, future verifications remain secure, while the computational operations remain relatively simple.
Solution Approach 2:
The system changes verification parameters (challenge values, verification codes, sequence numbers) for each verification attempt. The verifying device uses different challenge parameters when verifying the reading device versus the sensor tag, and these parameters change with each interaction. This parameter variation provides strong security without requiring complex cryptographic algorithms, as the security derives from the changing parameters rather than computational complexity.
Data Source
AI summary
A system and a method capable of verifying contactless sensor tag, the system comprising: a reading device, served to generate a first verification code according to a first dynamic value and generate an authority request according to an authority code; a sensor tag, used to obtain the first verification code of the reading device in a contactless way, generate a second verification code according to a second dynamic value, and process a ciphering calculation according to an identification code, the first verification code and the second verification code for generating the authority code, and send the authority code to the reading device in a contactless way; and a verifying device, used to receive the authority request of the reading device, and perform a deciphering calculation on the authority request for obtaining the first dynamic value and the second dynamic value for determining whether the sensor tag is real.