RFID Challenge-Response Protocol for Protected Memory Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing UHF RFID protocols require numerous steps for unilateral entity authentication and authenticated encryption of data, leading to inefficient communication between RFID tags and readers.

Innovation Solution

Implementing a streamlined communication protocol that combines authenticated encryption and challenge-response mechanisms, reducing the number of wireless transmissions required for both tag and reader authentication operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional RFID protocols are used for unilateral entity authentication and authenticated encryption, then security objectives are achieved, but the number of wireless transmissions increases

Engineering Contradiction:

Improveauthentication securityVSAvoidcommunication efficiency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent combines the authentication process and data encryption process into a single integrated workflow. The reader sends a challenge that includes both authentication verification and encryption key establishment, allowing the tag to prove its identity while simultaneously establishing secure encryption for subsequent data transmission, thereby reducing the number of separate communication rounds

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If multiple separate steps are used for authentication and encryption, then security verification is thorough, but the communication protocol complexity increases

Engineering Contradiction:

Improveauthentication verificationVSAvoidprotocol complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple cryptographic operations into a single challenge-response exchange. The challenge message contains embedded instructions for both authentication verification and encryption key derivation, allowing the tag to perform multiple security functions in one response rather than requiring separate protocol steps for each function

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The challenge-response mechanism is designed to serve multiple purposes simultaneously: it verifies tag authenticity, establishes encryption keys, and initiates secure data transmission protocols. This multi-functional approach reduces protocol complexity by eliminating the need for separate dedicated steps for each security function

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12463834B2Embedding protected memory access into a RFID authentication process based on a challenge-response mechanism

Publication Date: 2025.11.04 CENTRO DE PESQUISAS AVANCADES VON BRAUN

AI summary

A RFID tag, a reader and a protocol allow a protected read operation in a two-step tag authentication with cipher-block cryptography. A challenge-response mechanism using a shared secret symmetric key for tag authentication includes a challenge and information to read data from a tag's memory. Tag's enhanced reply to the challenge-response mechanism includes a response to the reader's challenge and data from the tag's memory. A method embeds a protected write operation in a four-step reader authentication with cipher-block cryptography. The protocol allows a challenge-response mechanism using the shared secret symmetric key for reader authentication including a challenge and information to write data to the tag's memory. Reader's enhanced reply to the challenge-response mechanism includes a response to the tag's challenge and data for writing to the tag's memory. Authenticated read and write data may be in plaintext, message authentication code (MAC)-protected, encrypted, or both encrypted and MAC protected.