RFID Tag Authentication via Challenge-Response and CPRF

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

RFID systems are vulnerable to hacking and counterfeiting due to the ability of malicious actors to intercept and replicate RFID tag signals, leading to potential theft and security breaches.

Innovation Solution

Implementing a security system that includes a Controlled Physical Random Function (CPRF) and Noisy Bloom Filters to authenticate RFID tags by using a secret mathematical function and unique seed values generated from the imperfections in the silicon substrate of the RFID tag, combined with a verification process to ensure the authenticity of the tag.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If RFID tags transmit identification numbers wirelessly, then reading information becomes convenient and flexible, but the system becomes vulnerable to interception and relay attacks by malicious intruders

Engineering Contradiction:

Improveconvenience of reading informationVSAvoidvulnerability to interception and relay attacks

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the identification number transmission from the RFID communication process, keeping only the challenge-response authentication mechanism. The actual ID number is never transmitted over the wireless channel, only authenticated responses to challenges are sent, preventing interception and relay attacks while maintaining operational convenience

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The system applies preliminary anti-action by implementing challenge-response authentication before any meaningful data exchange. The tag must prove its authenticity through cryptographic verification of a challenge before the reader accepts any information, preemptively blocking relay attacks rather than reacting to them

Inventive Principle:

Principle #9Preliminary anti-action

2Reliability

If a unique identification number is stored on the RFID tag, then product identification becomes possible, but the number alone is insufficient to verify ownership and can be easily read and relayed by intruders

Engineering Contradiction:

Improveproduct identification capabilityVSAvoidinability to verify ownership

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent changes the parameter from static identification number to dynamic challenge-response pairs. Instead of relying on a fixed ID that can be read and relayed, the system uses dynamically generated challenges and cryptographic responses that change with each interaction, providing both identification and ownership verification

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The challenge-response mechanism acts as an intermediary between the identification number and the verification process. Rather than directly transmitting or verifying the ID number, the system uses cryptographic challenges and responses as intermediaries to prove ownership without exposing the actual identification data

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS8384546B2Enhanced security protocol for radio frequency systems

Publication Date: 2013.02.26 MASSACHUSETTS INST OF TECH

AI summary

This invention relates to security protocols for RFID systems. Systems and methods are presented to protect the system from hackers attempting to compromise the RFID system. Also, methods and systems for improving RFID security are disclosed. The systems utilize mechanisms to determine the authenticity of the RFID tags used in such systems. The systems and methods also reduce unauthorized access to the RFID system. A system and method to make tags more difficult to compromise or counterfeit is also described.