RFID Reader Proxy Authentication via Verification Authority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing RFID systems face challenges in authenticating tags and readers without relying on password or key distribution, which is difficult to manage securely across global trading partners, especially in combating counterfeiting in industries like luxury goods and pharmaceuticals.
Innovation Solution
Implementing a system where RFID tags and readers authenticate using a challenge-response mechanism with a verification authority, utilizing cryptographic algorithms like AES and RSA, and optionally involving a reader proxy for authentication, with electronic signatures for validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password or key distribution is used for RFID authentication, then authentication security is improved, but system complexity and difficulty of managing keys among global trading partners increases
Solution Approach 1:
The patent introduces a verification authority as an intermediary that centralizes key management. Instead of each trading partner managing their own keys, the verification authority acts as a mediator that issues and manages cryptographic keys for RFID tags and readers, thereby reducing the complexity of direct key distribution among global partners while maintaining security
Solution Approach 2:
The patent extracts the key management function from the distributed RFID system and concentrates it in a separate verification authority. This separation removes the complex key distribution problem from the RFID communication itself, allowing secure authentication without embedding key management complexity into the tag and reader operations
2Reliability
If cryptographic algorithms like AES and RSA are used for authentication, then counterfeiting prevention is improved, but computational requirements and processing time increase
Solution Approach 1:
The patent segments the computational burden by dividing cryptographic operations between different system components. Heavy computational tasks like key generation and certificate validation are performed by the verification authority and readers, while RFID tags perform lighter operations such as receiving challenges and generating responses using provided cryptographic parameters, thereby reducing the power requirements for tags
3Reliability
If challenge-response authentication mechanism is implemented, then authentication reliability is improved, but the number of communication rounds and verification time increases
Solution Approach 1:
The patent implements preliminary actions by having the verification authority pre-issue cryptographic certificates and keys to authorized RFID tags and readers before actual authentication is needed. This preliminary setup allows the authentication process itself to be streamlined, as the heavy cryptographic infrastructure is already in place, reducing the time required for actual verification during operation
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach securely authenticates RFID tags and readers, preventing counterfeiting by ensuring only legitimate items and devices are verified, without the need for complex password management, thereby enhancing the integrity of global commerce.
Implementation Method 1
The RF wave is typically electromagnetic, at least in the far field
Implementation Method 2
The tag either generates the transmitted back RF wave originally, or by reflecting back a portion of the interrogating RF wave in a process known as backscatter
Data Source
AI summary
A Radio Frequency Identification (RFID) system including an RFID reader and a reader proxy authenticates itself to a verification authority. The proxy receives a proxy challenge from a verification authority and determines a proxy response based on the proxy challenge and a proxy key known to the proxy. The proxy response is then sent to the verification authority along with an identifier for the reader. The reader then authenticates an RFID tag by sending a tag response to the verification authority, which determines whether the reader is authentic based on the authenticity of the proxy response.