Identification Tag Anonymization for Secure Low-Memory RFID
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identification tags, such as RFID tags, face security risks due to unsecured data communication and limited memory capacity, making it impractical to implement full encryption and increasing computer resource consumption.
Innovation Solution
The method involves transforming a first identification code associated with an asset into a second identification code through an anonymization operation based on internal data, which is then written to the tag's memory bank, utilizing cryptographic operations that do not exceed the tag's memory capacity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full encryption is implemented on identification tags, then security is improved, but device complexity and memory requirements increase beyond tag capacity
Solution Approach 1:
The encryption process is segmented into two distinct parts: (1) anonymization operation performed at the tag using only the identification code and internal data, and (2) cryptographic operation performed at the reader or server using the anonymized code and internal data. This segmentation allows the tag to perform only lightweight operations within its memory constraints while the more complex cryptographic operations are performed elsewhere.
Solution Approach 2:
The anonymized identification code serves as an intermediary between the original identification code and the final decrypted data. The tag transforms the original code into an anonymized form that cannot be directly reverse-engineered, and this anonymized code is then used by the reader/server to retrieve or generate the corresponding internal data through cryptographic operations.
2Reliability
If encryption operations are performed on identification tags, then data security is improved, but computer resource consumption increases
Solution Approach 1:
Instead of performing complete encryption and decryption operations on the tag, only a partial anonymization operation is performed using the tag's limited resources. The full cryptographic operation is performed later at the reader or server where more computational resources are available, thus avoiding excessive resource consumption on the constrained tag while still achieving security.
3Reliability
If encryption data is stored on identification tags, then security is improved, but memory capacity requirements exceed tag limitations
Solution Approach 1:
The invention extracts only the essential identification code from the original data and transforms it into an anonymized form that fits within the tag's memory constraints. The full encryption data and internal data are stored separately in external databases or memory systems, allowing the tag to store only the compact anonymized code while maintaining security through the cryptographic relationship with the external data.
Data Source
AI summary
Various embodiments are related to anonymizing an identification code using internal data. Once anonymized, the identification code may be written to a tag, such as an RFID tag. Anonymizing the identification code using internal data may protect potentially sensitive tag data from outsiders while operating while operating within tag memory constraints.