NFC Tag Authentication via Shared Secret Exchange

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Near Field Communications (NFC) devices pose security risks due to the ease of identifier retrieval and cloning, allowing malicious actors to impersonate legitimate NFC tags and access secured areas.

Innovation Solution

Implementing a method where NFC tags and readers authenticate each other by exchanging unique IDs and shared secrets, stored in protected memory, before performing actions, thereby preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If NFC tag transmits identifying information to any NFC reader, then ease of operation is improved, but security is worsened

Engineering Contradiction:

Improveease of operationVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary authentication actions before allowing NFC communication. The NFC reader verifies the NFC tag's identifying information against stored credentials (shared secrets, passwords) before establishing a communication session, preventing unauthorized tags from accessing the system

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces intermediary authentication credentials (shared secrets, passwords, encrypted identifying information) that mediate between the NFC tag and reader. These intermediaries verify legitimacy before allowing direct communication, adding a security layer without preventing legitimate operation

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If NFC tag stores additional authentication credentials, then security is improved, but device complexity is worsened

Engineering Contradiction:

ImprovesecurityVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple authentication credentials (identifying information, shared secrets, passwords) into the existing NFC tag structure. Rather than adding separate authentication devices, the credentials are merged into the tag's memory, maintaining a single integrated component while enhancing security

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The system changes the parameters of the NFC tag by adding cryptographic elements (shared secrets, encrypted data) to its existing identifying information. This transforms the tag from a simple identifier to a multi-credential authentication device without fundamentally changing its NFC communication functionality

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS11706622B1Methods, systems, and media for protected near-field communications

Publication Date: 2023.07.18 MCAFEE LLC

AI summary

Methods, systems, and media for protected near-field communications are provided. In some embodiments, the method comprises: receiving, from an NFC tag device, a request for an NFC reader device identifier (ID); transmitting the NFC reader device ID to the NFC tag device; receiving an NFC tag device ID; determining whether the NFC tag device ID matches an NFC tag device ID stored in memory of the NFC reader device; in response to determining that the NFC tag device ID matches the NFC tag device ID, transmitting a password to the NFC tag device; receiving, from the NFC tag device, a shared secret; determining whether the received shared secret matches a shared secret stored in the memory of the NFC reader device; and in response to determining that the received shared secret matches the shared secret, causing an action to be performed by a device associated with the NFC reader device.