RFID Tag Authentication Using Built-in Hashing and Secret Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing RFID-based authentication methods are vulnerable to duplication of identifiers, making it difficult to ensure that an item has been produced or issued by the rightful manufacturer or administration.

Innovation Solution

Implementing an RFID system with a memory for storing a unique identifier and a secret key, using a built-in hashing function to authenticate items by comparing them with a genuine item, involving a random number generation and response comparison to verify authenticity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional RFID identifiers are used for authentication, then the authentication process is simple and fast, but the identifiers can be duplicated on other RFIDs using a RFID scanner and writer

Engineering Contradiction:
Improveauthentication securityVSAvoidRFID system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent transforms the static RFID identifier into a dynamic cryptographic response by changing the parameter from a simple identification value to a hashed output that depends on secret keys and random challenges. This makes the RFID authentication resistant to duplication while maintaining operational simplicity

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent prevents copying of RFID identifiers by replacing the copyable identifier with a cryptographic hash that cannot be reversed or duplicated. The hash function ensures that even if the RFID is scanned and written to another tag, the original authentication capability cannot be replicated without the secret key

Inventive Principle:
Principle #26Copying

2Reliability

If a secret key and hashing function are implemented in the RFID, then duplication becomes difficult, but the RFID system becomes more complex

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication process simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The RFID tag performs cryptographic operations autonomously using its built-in secret key and hashing function. The tag itself generates the cryptographic response without requiring external cryptographic processing, making the system secure while keeping the operation simple for the user

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The secret key is pre-loaded into the RFID during manufacturing, and the hashing function is pre-programmed into the tag's memory. This preliminary setup enables secure authentication without requiring complex runtime configuration or external cryptographic infrastructure

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP1960945B1Method and systems using radio frequency identifier tags for comparing and authenticating items
Publication Date: 2009.06.24 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • EP1960945B1 patent drawingFigure 1~2b
  • EP1960945B1 patent drawingFigure 3~4
  • EP1960945B1 patent drawingFigure 5~6

AI summary

A method for authenticating an item comprising an RFID having a memory for storing an identifier and a secret key, and a built-in hashing function, is disclosed. According to the method of the invention, the output of the RFID of the item to be authenticated is compared with the output of the RFID of a genuine item. To that end, a random number is transmitted to the item to be authenticated with zero as parameters. The RFID 's identifier, the random number, and the secret key are concatenated and use as input of the built-in hashing function that result is output with the RFID identifier. The RFID 's identifier and the random number are then transmitted to the RFID of the genuine item that returns its identifier and the output of the built-in hashing function computed with the RFID 's identifier of the item to be authenticated, the random number, and the secret key. If the results of both built-in hashing functions are identical, the item is authenticated else, it is counterfeiting.