RFID Transponder Pseudonym Security via Hash Tree
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
RFID tags pose privacy and security risks due to their ability to be read without line of sight and invisibly embedded in consumer products, leading to unauthorized access and tracking, especially in supply chains where multiple parties handle the same tag without ownership transfer, compromising the privacy of current and past owners.
Innovation Solution
Implementing a pseudonym scheme using a hash tree structure where RFID transponders provide different identifiers for each interrogation attempt, and a third-party authorization system grants temporary access to authorized readers with a limited number of read attempts, using one-way hash functions and pseudo-random functions to manage access securely and flexibly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If RFID tags use a fixed identifier for all read operations, then reading efficiency is improved, but tracking and unauthorized access risks increase
Solution Approach 1:
The patent implements dynamic identifier generation where the RFID tag changes its identifier with each read operation using a one-way hash function. The tag maintains a sequence of pseudonyms generated from a secret key, allowing efficient reading while preventing tracking since each identifier is temporary and cannot be reversed to reveal the original ID or predict future identifiers.
Solution Approach 2:
The system changes the identifier parameter dynamically during operation. Instead of using a static ID, the tag generates a sequence of pseudonyms by applying a one-way hash function multiple times to a secret key, revealing a different pseudonym at each step. This allows the system to maintain reading efficiency while eliminating tracking risks.
2Ease of operation
If RFID tags provide open access to all readers, then ease of operation is improved, but unauthorized access and information leakage increase
Solution Approach 1:
The patent introduces an intermediary authorization system consisting of a key authority and reader authority. These intermediaries manage secret key distribution and authorization without being part of the direct tag-reader communication. The tag itself remains simple and open, but the intermediary layer enforces security by controlling which readers can obtain the necessary keys to read legitimate tags.
Solution Approach 2:
The system segments the access control function into separate components: the RFID tag contains only the identification function, while the authorization and key management functions are separated into independent authority systems. This segmentation allows the tag to remain simple and universally readable, while security is handled by specialized authorization infrastructure.
3Adaptability or versatility
If RFID tags are made cheap for ubiquitous deployment, then adaptability is improved, but security capabilities are compromised
Solution Approach 1:
The patent replaces complex hardware security mechanisms with cryptographic software-based security. Instead of requiring expensive secure hardware elements in each tag, the system uses one-way hash functions and secret key management that can be implemented in inexpensive RFID tags. The security relies on the mathematical properties of hash functions rather than physical security features.
Solution Approach 2:
The system offloads complex security processing to intermediary authorization servers rather than requiring it in the tag itself. The tag remains simple and cheap, performing only basic identification. The heavy cryptographic operations and key management are handled by external authorization infrastructure, allowing ubiquitous deployment of low-cost tags while maintaining strong security through centralized management.
Data Source
AI summary
Security and privacy of tag information in an RFID-based system can be achieved through the usage of pseudonyms generated based on one-way hash functions. A system based on binary one-way trees allows for the scalable generation and decoding of authentication keys to obtain access to tag identities. The apparatus and methods described can also be adapted to provide limited access for readers to tag information.