Cryptographic Security Tag Detachment via Authorization Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Improper use of detaching units for EAS security tags, such as 'sweethearting' by store employees, undermines the effectiveness of retail theft prevention systems.
Innovation Solution
A method and system where security tags receive an authorization code signed with a cryptographic key, allowing for secure detachment or deactivation, verified by the tag and an enterprise system, ensuring legitimate removal from items after successful purchase.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a detaching unit is used to remove EAS security tags, then the security tag can be removed from the article, but unauthorized removal (sweethearting) can occur
Solution Approach 1:
An authorization code serves as an intermediary between the detaching unit and the security tag. The authorization code, generated by a POS terminal after a valid purchase, mediates the detachment process by providing cryptographic proof that the item has been legitimately purchased. This intermediary layer prevents unauthorized detachment while enabling legitimate removal.
Solution Approach 2:
The system performs preliminary verification of purchase authenticity before allowing tag detachment. The POS terminal generates an authorization code that cryptographically proves the item has been legitimately purchased. This preliminary action ensures that only authorized tags can be removed, preventing sweethearting before the actual detachment occurs.
2Reliability
If cryptographic verification is implemented in security tags, then unauthorized detachment is prevented, but system complexity increases
Solution Approach 1:
The complex cryptographic verification logic is extracted from the security tag and placed in the POS terminal and detaching unit. The security tag itself remains relatively simple, containing only the unique identifier and basic verification capability. This extraction reduces tag complexity while maintaining system-wide security through centralized authorization code generation and verification.
3Ease of operation
If traditional detaching units are used, then tag removal is simple, but they cannot verify legitimate purchase status
Solution Approach 1:
The traditional purely mechanical detaching unit is replaced with an intelligent system that combines mechanical detachment capability with electronic verification. The detaching unit now incorporates a reader that can read the security tag's unique identifier and verify the authorization code, replacing the simple mechanical system with an integrated electromechanical system that maintains operational simplicity while adding verification capability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for operating a security tag. The methods involve: receiving, by the security tag, an authorization code comprising a security tag identifier signed using a cryptographic key of a plurality of cryptographic keys that are respectively assigned to a plurality of security tags; performing operations by the security tag to verify a signature of the authorization code; and performing detach operations or deactivation operations by the security tag, responsive to the signature's verification. The detach operations cause a mechanical detachment of the security tag from an item. The deactivation operations cause a disablement of a response by the security tag to an interrogation signal from a Radio Frequency Identification ("RFID") system or an Electronic Article Surveillance ("EAS") system.