RFID Tag Authentication Mechanism for Unauthorized Access Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

RFID technology faces challenges in data security, particularly with passive RFID tags, as data transmitted over RF signals is not encrypted, making it vulnerable to unauthorized access and theft.

Innovation Solution

Implementing an authentication mechanism in RFID tags using a memory block with predetermined authorization codes, where only authenticated RFID readers can access or modify data, and incorporating encryption methods to protect data transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If RFID technology is used for data transmission without encryption, then data read/write speed is fast and communication is convenient, but data security is insufficient and vulnerable to unauthorized access

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements authentication before data transmission by storing authorization codes in the RFID tag and requiring readers to prove their identity before accessing data. This preliminary authentication action ensures security is established upfront, preventing unauthorized access without requiring complex continuous encryption during transmission.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary authentication mechanism using authorization codes stored in the RFID tag. This intermediary layer mediates between the reader and the data, requiring the reader to authenticate through the authorization code verification process before gaining access to the stored information.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authorization authentication is added to RFID tags, then data security is improved, but communication time is increased due to additional authentication steps

Engineering Contradiction:
Improvedata securityVSAvoidcommunication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The authentication process is performed as a preliminary action before actual data transmission begins. The authorization code verification happens once at the start of communication, establishing security credentials that can then be used for subsequent data exchanges without repeating the full authentication sequence, thus minimizing time loss.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If authorization codes are stored in RFID tags, then unauthorized access is prevented, but manufacturing cost is increased

Engineering Contradiction:
Improvedata securityVSAvoidmanufacturing cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent uses authorization codes that can be replicated and stored in the RFID tag memory. Rather than requiring complex hardware security modules or expensive cryptographic processors, the system uses software-based authorization code storage and verification, which can be implemented in standard RFID tag memory at minimal additional cost.

Inventive Principle:
Principle #26Copying

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enhances data security by preventing unauthorized access and misuse of RFID tag data, ensuring that only authenticated readers can retrieve or modify information stored in the tag, thereby reducing the risk of data theft.

Implementation Method 1

an antenna of the RFID tag receives an RF signal transmitted from an RFID reader within a specific distance, and provides a chip circuit with power using a received radio wave

Methodology Applied
Scientific EffectElectromagnetic induction: Electromagnetic Induction

Data Source

PatentUS8547202B2RFID tag and operating method thereof
Publication Date: 2013.10.01 XUESHAN TECH INC
  • US8547202B2 patent drawing
  • US8547202B2 patent drawing
  • US8547202B2 patent drawing

AI summary

An RFID tag and a method of operating the RFID tag are provided. The RFID tag comprises a memory block that stores at least one predetermined authorization code associated with an RFID reader. In this method, according to the predetermined authorization code and an approval request transmitted from the RFID reader, it is determined by the RFID tag whether the RFID reader is authenticated. When the RFID reader is not authenticated, the RFID tag is controlled to not respond to a subsequent request transmitted from the RFID reader. As a result, the risk that data in the RFID tag may be illegally acquired by an unauthorized RFID reader is reduced.