RFID Transponder Authentication via Challenge-Response Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
RFID technology faces security challenges due to hacking and counterfeiting, particularly in the luxury goods sector, where existing solutions for securing data exchanges are either costly or vulnerable to interception, and there is a need for enhanced security without increasing system resources or costs.
Innovation Solution
A secure communication method between RFID readers and transponders using random numbers and cryptographic functions, where the RFID reader and transponder authenticate each other by exchanging results of random numbers processed with stored encryption functions, without exchanging encryption keys, ensuring only authorized devices can access unique identification numbers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted data exchanges are used to secure RFID communication, then security level is improved, but system cost and complexity increase
Solution Approach 1:
The patent extracts the encryption function from the RFID transponder and places it in the RFID reader. The transponder only performs simple random number generation and comparison operations, while the reader handles all cryptographic computations. This extraction reduces the complexity and cost of the transponder while maintaining security.
Solution Approach 2:
The patent introduces a challenge-response mechanism as an intermediary between the reader and transponder. The reader sends random challenges, the transponder generates responses using simple operations, and the reader verifies using stored encryption functions. This intermediary protocol provides security without requiring complex encryption hardware in the transponder.
2Reliability
If encryption keys are exchanged between RFID reader and transponder, then authentication is improved, but vulnerability to interception increases
Solution Approach 1:
The patent performs preliminary authentication actions before any data exchange. The reader and transponder first engage in a challenge-response protocol to verify their identities and establish trust. Only after successful preliminary authentication does the system proceed to transmit actual data, preventing interception of authentication keys during data transmission.
Solution Approach 2:
The transponder performs self-authentication by generating random challenges and comparing responses using locally stored encryption functions. This self-service mechanism eliminates the need for the transponder to store or transmit sensitive encryption keys, reducing interception risk while maintaining strong authentication.
3Reliability
If multiple encryption functions are stored in RFID transponder, then security is improved, but device resources increase
Solution Approach 1:
The patent extracts multiple encryption functions from the transponder and stores them in the reader's memory. The transponder only needs simple random number generation capabilities and comparison logic, significantly reducing its resource requirements while the reader handles all cryptographic operations with multiple encryption functions.
Solution Approach 2:
Instead of storing encryption functions in the transponder as is conventional, the patent inverts the architecture by placing all encryption functions in the reader. This inversion allows the resource-constrained transponder to maintain security through simple operations while the more powerful reader handles the computational burden of multiple encryption functions.
Data Source
AI summary
A secure communication method between an RFID transponder and an RFID reader. The method includes at least the following steps: the RFID reader sends a series of random numbers A1 to the RFID transponder; the RFID transponder sends a series of random numbers A2 to the RFID reader; the RFID reader sends a result R1 to the at least one RFID transponder; the RFID transponder compares the result R1 with a result R1′. If R1′ is equal to R1, then the RFID transponder switches from a locked communication mode to an unlocked communication mode, and sends a result R2′ to the at least one RFID reader.