RFID Tag Authentication via Cryptographic Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge in the RFID system is to authenticate the legitimacy of items in the supply chain, as illegitimate activities such as counterfeiting, theft, and fraudulent returns undermine legitimate supply chain operations, making it difficult for agents to determine whether an RFID-tagged item is genuine or not.
Innovation Solution
The solution involves using RFID readers and a reference database to authenticate RFID tags by verifying the Item Identifier (II) and Declared Password (DP) associated with the items, ensuring that only authorized users can access the actual codes, thereby preventing illegitimate items from entering the supply chain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If RFID tags are used to track items in the supply chain, then item identification and tracking capability is improved, but vulnerability to counterfeiting and fraudulent activities increases
Solution Approach 1:
The system performs preliminary authentication of RFID tags before items are accepted into the supply chain. The authentication service verifies tag legitimacy in advance through cryptographic validation against a reference database, preventing counterfeit items from entering the supply chain in the first place
Solution Approach 2:
An authentication service acts as an intermediary between RFID readers and the supply chain system. This mediator validates RFID tags by comparing them against authenticated tag identifiers in a reference database, blocking fraudulent tags without requiring changes to existing RFID infrastructure
2Reliability
If authentication mechanisms are added to verify RFID tag legitimacy, then security against fraudulent items is improved, but system complexity increases
Solution Approach 1:
The authentication service serves as a separate intermediary component that handles cryptographic validation. This isolates complexity from the core supply chain system, allowing authentication to be added as a modular layer without fundamentally redesigning existing RFID infrastructure
Solution Approach 2:
The system uses cryptographic copies (hashes) of authentication data stored in a reference database. Instead of storing sensitive authentication credentials directly, the system validates tags by comparing cryptographic representations, reducing security risks and simplifying data management
3Measurement precision
If the reference database stores actual authentication codes, then verification accuracy is improved, but security risk from database exposure increases
Solution Approach 1:
The reference database stores cryptographic hashes (copies) of authentication credentials rather than the actual sensitive data. This allows accurate verification by comparing hash values while preventing recovery of original authentication codes even if the database is compromised
Solution Approach 2:
The system converts the potential harm of database exposure into a benefit by using one-way cryptographic hashing. The hashing function ensures that even if database contents are exposed, the original authentication codes cannot be recovered, and any attempted brute-force attacks would be computationally infeasible
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach effectively diminishes the incentive for illegitimate activities by ensuring that only authenticated items are accepted, reducing the risk of counterfeiting and fraud, and maintaining the integrity of the supply chain without the need for additional defensive features on the RFID tags.
Implementation Method 1
A tag that senses the interrogating RF wave responds by transmitting back another RF wave. The tag generates the transmitted back RF wave either originally, or by reflecting back a portion of the interrogating RF wave in a process known as backscatter.
Data Source
AI summary
RFID readers, computers, and methods are provided for reporting on the authentication of one or more RFID tags associated with a proffered item, while requiring special permissions be cleared before reporting. In some embodiments, a question is input about whether a Declared Password (DP) is regarded as proper for an Item Identifier (II), both of which have been input from the tags. An answer is generated for the question from the reference database, and transmitted to the user. The answer does not reveal an Actual Code that is indeed regarded as proper, unless the user first demonstrates they already know it. Beyond the authentication of the tag, the answer can further indicate the legitimacy of the proffered item, for a supply chain, at a Customs Office, etc.