NFC Tag Authentication with Speck Encryption and ECDSA Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Near Field Communication (NFC) standards lack secure communication protocols to prevent security attacks such as man-in-the-middle attacks and data modification in supply chain authentication, compromising the integrity and authenticity of assets.
Innovation Solution
A secure data scheme using a lightweight Speck cryptographic algorithm and Elliptic Curve Digital Signature Algorithm (ECDSA) for NFC tags, which involves encrypting a shared key, signing it with ECDSA, and verifying challenge/response messages to ensure authenticity and confidentiality of assets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If NFC standard is used for asset authentication, then communication between devices is enabled, but security attacks such as man-in-the-middle attacks and data modification cannot be prevented
Solution Approach 1:
The patent applies preliminary action by pre-provisioning the NFC tag with an encrypted shared key and digital signature before the asset enters the supply chain. The authentication server generates the shared key, encrypts it with the NFC tag's unique identifier, and signs it with its private key in advance. This pre-prepared secure data is then verified during authentication to prevent man-in-the-middle attacks and data modification, resolving the security vulnerability while maintaining ease of NFC communication.
2Adaptability or versatility
If NFC tag stores authentication data, then asset identification is enabled, but data integrity and confidentiality are compromised
Solution Approach 1:
The patent uses an intermediary approach by introducing an authentication server that acts as a trusted mediator between the NFC tag and the verifying device. The server securely stores the shared key and performs the decryption and verification processes. The NFC tag only stores the encrypted shared key and digital signature, while the authentication server mediates the verification by decrypting with its private key and comparing against stored credentials, thereby preserving data integrity and confidentiality while enabling versatile asset identification.
3Productivity
If simple NFC authentication is implemented, then authentication process is fast, but vulnerability to counterfeit assets exists
Solution Approach 1:
The patent applies partial action by implementing a two-layer verification process: the first layer is the quick NFC communication that retrieves authentication data, and the second layer is the cryptographic verification of the digital signature and encrypted shared key. The system performs only the necessary verification steps (signature validation and shared key matching) rather than full cryptographic analysis, maintaining fast authentication speed while effectively detecting counterfeit assets through the ECDSA signature verification.
Data Source
AI summary
An authentication system and method for authenticating an asset includes a Near Field Communication (NFC) tag associated with the asset, an NFC enabled user device, and an authentication server. The NFC tag includes a unique identifier and an encrypted output of a shared key that is stored on the authentication server. The encrypted output includes a Speck cryptographic algorithm. The unique identifier and the encrypted output are signed by an Elliptic Curve Digital Signal Algorithm (ECDSA) signature. When the user device verifies challenge/response messages and the unique identifier, and the ECDSA signature is verified by either the user device or the authentication server, the encrypted output is decrypted and the authentication server compares the decrypted data with the stored shared key to either determine that the asset is authentic or notify a stakeholder associated with the asset that the asset is inauthentic.