RFID Tag Authentication via Verification Authority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
RFID systems face challenges in authenticating tags without requiring each reader to store numerous secret keys, making them vulnerable to counterfeiting, especially with the massive proliferation of tags, where securely managing and distributing keys is difficult.
Innovation Solution
Implementing a system where each RFID tag has a unique private-public key pair, with the reader only needing to know a single master public key, allowing for tag authentication without access to secret keys or a network, using a verification authority to determine the tag's key through an identifier or algorithmic key generator.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If each RFID tag uses a unique secret key for authentication, then security against counterfeiting is improved, but key management complexity and distribution difficulty increase significantly
Solution Approach 1:
The patent extracts the secret key from the tag and stores it only in the verification authority. The tag contains only a public key or identifier, while the verification authority holds the corresponding secret key. This extraction resolves the contradiction by eliminating the need for complex key distribution to tags while maintaining authentication security through centralized key storage.
Solution Approach 2:
The verification authority acts as an intermediary between the RFID reader and the tag authentication process. It mediates the authentication by verifying tags using stored secret keys and providing authentication results to readers, thereby simplifying the overall system architecture and key management while maintaining security.
2Adaptability or versatility
If RFID readers store multiple secret keys for tag authentication, then authentication capability is improved, but memory requirements and processing overhead increase
Solution Approach 1:
The patent extracts secret keys from readers and centralizes them in the verification authority. Readers only need to store minimal information such as verification authority identifiers or public keys, dramatically reducing memory requirements while maintaining the ability to authenticate multiple tags through the centralized verification authority.
3Reliability
If cryptographic authentication is implemented in RFID tags, then counterfeiting prevention is improved, but computational requirements and power consumption increase
Solution Approach 1:
The patent extracts complex cryptographic verification operations from resource-constrained RFID tags and relocates them to the powered verification authority. Tags perform only simple operations such as transmitting identifiers or public keys, while the verification authority handles computationally intensive secret key operations, thereby reducing tag power consumption while maintaining strong counterfeiting prevention.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach enhances security by preventing counterfeiting and cloning, allowing for efficient authentication of tags without the need for extensive key management, even in scenarios with unreliable network connectivity.
Implementation Method 1
The reader transmitting a Radio Frequency (RF) wave performs the interrogation. The RF wave is typically electromagnetic, at least in the far field.
Implementation Method 2
The tag generates the transmitted back RF wave either originally, or by reflecting back a portion of the interrogating RF wave in a process known as backscatter.
Data Source
AI summary
An authentication method includes RFID tags authenticating RFID readers. A tag sends a tag identifier and a reader challenge to a reader in response to one or more commands from the reader. The reader then either derives a response to the reader challenge itself or has a verification authority derive the response. The response may be derived from parameter(s) in the reader challenge, and may be derived using a cryptographic key. The reader then sends the response to the tag along with one or more commands. The tag verifies the response before executing action(s) associated with the command(s).