RFID Mutual Authentication Protocol Using Ciphered CRCs

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current RFID systems lack effective methods for ensuring the privacy and security of communications between RFID tags and readers, particularly against unauthorized access, especially in scenarios where active tags can be easily removed from authorized communication ranges.

Innovation Solution

A protocol utilizing ciphered cyclic redundancy codes (CRCs) for mutual authentication between RFID tags and readers, ensuring that only authenticated devices can initiate and maintain a secure communication session by continuously verifying the correctness of encrypted CRCs in every command and response.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If mutual authentication protocol is implemented, then security and privacy protection is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidprotocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by performing mutual authentication between the RFID reader and tag before allowing any data communication to occur. The authentication protocol verifies the identities of both parties in advance, ensuring that only authenticated devices can establish a secure communication session. This preliminary verification step prevents unauthorized access while maintaining a relatively simple protocol structure suitable for RFID constraints.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If continuous verification of encrypted CRCs is performed, then communication security is improved, but communication time increases

Engineering Contradiction:
Improvecommunication securityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies continuity of useful action by continuously verifying encrypted CRCs for every command and response throughout the entire communication session. This continuous verification ensures that authentication remains valid for all data exchanges, preventing any unauthorized access during the session. The process maintains security without requiring repeated initial authentication, thereby balancing security with efficiency.

Inventive Principle:
Principle #20Continuity of useful action

3Loss of information

If encryption of CRCs is implemented, then data privacy protection is improved, but processing requirements increase

Engineering Contradiction:
Improvedata privacyVSAvoidprocessing complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent implements parameter changes by encrypting the CRC values using a shared secret key between the reader and tag. The encryption transforms the CRC from a simple error detection code into a secure authentication mechanism. This parameter transformation maintains the simplicity of CRC-based verification while adding cryptographic security, requiring only basic encryption/decryption operations that are computationally feasible for RFID devices.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUSRE46447E1RFID mutual authentication verification session
Publication Date: 2017.06.20 AMTECH SYSTEMS LLC
  • USRE46447E1 patent drawing
  • USRE46447E1 patent drawing
  • USRE46447E1 patent drawing

AI summary

In a protocol for preserving the privacy of communications between a RFID reader and a RFID tag, two distinct actions are taken. First, the reader and the tag must be mutually authenticated as being authorized participants in the communications. After that process is successfully completed, the authenticity of each authorized participant must be validated prior to each subsequent communication between reader and tag.