RFID Tag Authentication Using Asymmetric Cryptography
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
RFID systems face challenges in authenticating tags without requiring readers to store large numbers of keys or access networks, as existing cryptographic methods are vulnerable to counterfeiting and key management issues.
Innovation Solution
Implementing asymmetric cryptography with each RFID tag having a unique private-public key pair, where the reader only needs to store a single master public key, and authenticating tags by verifying their electronic signature and response using the master public key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric cryptography with password or key distribution is used, then authentication security is improved, but key management complexity and distribution difficulty increase
Solution Approach 1:
The patent applies asymmetric cryptography where each RFID tag possesses a unique private-public key pair. The private key remains securely stored in the tag's non-readable memory, while the public key is made available to readers. This asymmetric structure eliminates the need for complex key distribution networks, as readers only need to store a single master public key to verify tag identities, thereby resolving the contradiction between security and key management complexity
Solution Approach 2:
The master public key acts as an intermediary that enables readers to verify tag identities without direct access to private keys or network infrastructure. This intermediary mechanism allows secure authentication while simplifying the reader's key storage requirements to just one master public key, addressing both security and complexity concerns
2Adaptability or versatility
If readers store multiple tag keys for authentication, then authentication capability is improved, but memory storage requirements increase
Solution Approach 1:
The master public key serves as a universal verification tool that can authenticate any tag in the system. Instead of requiring readers to store individual keys for each tag, this single master public key can verify the identity of numerous tags through their respective electronic signatures, dramatically reducing memory storage requirements while maintaining broad authentication capability
Solution Approach 2:
The patent extracts the individual tag verification data (private keys) and stores it exclusively within the tags themselves in non-readable memory. The reader is left with only the master public key, separating the heavy key storage burden from the reader system and placing it where it belongs - within each tag's secure memory
3Ease of operation
If RFID tags use readable memory for key storage, then reader access is improved, but security against counterfeiting deteriorates
Solution Approach 1:
The patent implements asymmetric memory accessibility where the private key is stored in a non-readable portion of tag memory that only the tag can access, while the public key and electronic signature are stored in readable portions for reader verification. This asymmetric memory structure enables reader access to verification data while protecting the critical private key from extraction, thereby preventing counterfeiting
Solution Approach 2:
Different portions of tag memory have different access qualities: the private key resides in a non-readable, protected region accessible only by the tag's internal logic, while public keys and signatures are in readable regions. This local differentiation of memory properties allows simultaneous reader access and security protection
4Device complexity
If RFID systems require network access for key verification, then centralization of key management is improved, but system operational independence deteriorates
Solution Approach 1:
The system performs preliminary action by pre-computing and storing the master public key in readers during manufacturing or initial setup. This pre-loading of verification data enables readers to independently verify tag identities without requiring real-time network access to key management servers, thereby achieving operational independence while maintaining centralized key management architecture
Data Source
AI summary
An authentication method includes RFID readers authenticating RFID tags using public-key cryptography. A tag manufacturer or other legitimate authority produces a tag private-public key pair and stores the tag private key in externally unreadable tag memory and the tag public key in externally readable tag memory. The authority produces a master private-public key pair and distributes the master public key to readers in the field. The authority generates a tag-specific electronic signature based on at least the tag public key and the master private key and stores this signature in externally readable tag memory. A reader authenticates the tag by retrieving the tag public key and electronic signature from the tag, verifying the authenticity of the tag public key using the master public key and the electronic signature, challenging the tag, receiving a response from the tag to the challenge, and verifying the response using the tag public key.