NFC Authentication Using Hashed Security Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current RFID authentication methods lack sufficient security controls to prevent counterfeiting, making it difficult to ensure the authenticity and origin of products.

Innovation Solution

A multi-step authentication method using NFC technology that involves a mobile reader, an RFID tag, and a database, utilizing hash functions to generate unique security keys and product codes, and encrypting data to ensure the inviolability of the authentication process, including verification of the tag's unique identifier, reader authorization, and biometric user authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional RFID authentication methods are used, then the authentication process is simple and fast, but the security control is insufficient to prevent counterfeiting

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication process is segmented into multiple independent verification steps: (1) verifying the tag's unique identifier against the database, (2) verifying the hashed product code, and (3) verifying the security key. Each step operates independently and contributes to the overall security, making counterfeiting require replication of all steps rather than a single vulnerable point

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Security keys and hashed product codes are pre-generated and stored in the database before authentication occurs. The database contains predetermined security parameters that are verified during authentication, allowing the system to validate products without requiring complex real-time computation or additional hardware components

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multiple verification steps are added to improve security, then counterfeiting becomes harder, but the authentication process becomes more complex

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication operation simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs automatic verification of multiple security parameters without requiring manual intervention. The reader automatically queries the database, verifies the unique identifier, checks the hashed product code, and validates the security key in sequence, making the complex multi-step process transparent to the user while maintaining high security

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The database acts as an intermediary that stores and verifies security parameters. Instead of requiring the reader to perform complex cryptographic operations or store sensitive data locally, the database mediates the authentication process by providing pre-stored security keys and hashed codes for verification, simplifying the reader's functionality while maintaining security

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2979393B1Authentication method
Publication Date: 2020.01.08 IDCAPT
  • EP2979393B1 patent drawingFigure 1
  • EP2979393B1 patent drawingFigure 2~3

AI summary

The present invention relates to a method of authentication by an NFC reader of an electronic tag equipping a product, the product having an identifier, the tag comprising a memory and in this memory a unique tag identifier recorded moreover in a database, at least one security key having been generated by applying a hash function to the unique tag identifier modified by a transformation function having as parameter at least one value associated with the product, said at least one security key being recorded in the database, a hashed product code associated with the product having been generated by applying a hash function to the identifier of the product modified by a transformation function having as parameter at least one value associated with the product.