ECC RFID Tags for Secure Supply Chain Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current RFID systems require large and expensive tags to store RSA signatures, limiting their use due to size constraints and making it impractical to accommodate multiple signatures, which is a challenge in ensuring supply chain integrity, especially in the pharmaceutical industry.
Innovation Solution
Implementing a key management system that uses elliptic curve cryptography (ECC) for smaller RFID tags, allowing for multiple signatures to be stored securely while maintaining similar security levels, by employing semi-aggregate and fully-aggregate signature schemes to reduce signature size and enhance storage efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RSA signatures are used for RFID tag authentication, then security is improved, but tag size and cost increase
Solution Approach 1:
The patent transitions from RSA signature parameters to ECC signature parameters, changing the cryptographic algorithm's mathematical foundation. This parameter change enables achieving the same security level (e.g., 128-bit security) with significantly smaller key sizes (256 bits vs. 2048 bits), directly resolving the contradiction between security and tag size
Solution Approach 2:
The patent replaces the RSA cryptographic mechanism with an ECC cryptographic mechanism. This substitution maintains the security function while fundamentally changing the underlying mathematical operations from integer factorization to elliptic curve discrete logarithm problems, enabling compact tag implementation
2Adaptability or versatility
If multiple signatures are stored on RFID tags, then authentication capability is improved, but tag size and cost increase
Solution Approach 1:
By changing from RSA to ECC signature parameters, the patent reduces the size of each individual signature. This parameter change enables storing multiple signatures (e.g., from manufacturer, distributor, retailer) within the limited memory of small RFID tags, resolving the contradiction between multiple signature capability and tag size
Solution Approach 2:
The patent implements a universal authentication framework where multiple signatures from different entities in the supply chain can be stored and verified on the same tag. This multi-functionality allows a single tag to serve multiple authentication purposes without requiring separate tags for each signer
3Loss of information
If product ID information is stored on RFID tags, then traceability is improved, but security is worsened due to exposure to unauthorized readers
Solution Approach 1:
The patent segments product information into multiple components: visible information (product ID, manufacturer ID), hidden information (hidden product ID, serial number), and signature information. This segmentation allows selective disclosure where unauthorized readers can only access visible information while sensitive data remains protected until proper authentication occurs
Solution Approach 2:
The patent introduces signatures and verification keys as intermediaries between the stored information and unauthorized readers. The signature acts as a mediator that proves authenticity without revealing hidden information, while the verification key enables selective disclosure only to authorized parties who possess the corresponding private key
Data Source
AI summary
An authenticated RFID system is provided that uses elliptic curve cryptography (ECC) to reduce the signature size and read/write times when compared to traditional public key implementations such as RSA. Either ECDSA or ECPVS can be used to reduce the signature size and ECPVS can be used to hide a portion of the RFID tag that contains sensitive product identifying information. As a result, smaller tags can be used or multiple signatures can be written at different stages in a manufacturing or supply chain. A key management system is used to distribute the verification keys and aggregate signature schemes are also provided for adding multiple signatures to the RFID tags, for example in a supply chain.