RFID Tag Encryption for Secure Item Data Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional RFID systems face issues with information security, as data transmitted between RFID tags and readers is vulnerable to eavesdropping, leading to potential privacy infringement and forgery, especially after purchase, and lack efficient computation processes.

Innovation Solution

The proposed solution involves encrypting item IDs using authentication values and random values, with a mobile reader and RFID tag communicating securely through an object information service server, ensuring only authorized access to item information and preventing unauthorized tracking or forgery by using encrypted Electronic Product Codes (EPC) and pseudo-random number generation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If RFID tags transmit item ID information openly to mobile readers, then customers can easily access item information before purchase, but the system becomes vulnerable to eavesdropping and forgery attacks

Engineering Contradiction:

Improveitem information accessibilityVSAvoidinformation security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent introduces an authentication value as an intermediary element that mediates between the RFID tag and mobile reader. The authentication value is used to encrypt the item ID before transmission, allowing legitimate access while preventing unauthorized eavesdropping and forgery attacks

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms the item ID parameter by encrypting it with an authentication value before transmission. This parameter change ensures that the transmitted information cannot be easily intercepted or forged, while still allowing authorized readers to decrypt and access the original item ID

Inventive Principle:

Principle #35Parameter changes

2Productivity

If RFID tags transmit EPC information without security authentication, then communication is simple and fast, but attackers can eavesdrop on EPC for forgery and tracking purposes

Engineering Contradiction:

Improvecommunication speedVSAvoideavesdropping and forgery vulnerability

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by pre-loading authentication values into the RFID tags during manufacturing or initialization. This allows the tags to immediately encrypt their EPC information with the authentication value when queried, providing security without adding significant communication overhead

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The authentication value serves as an intermediary that is already present in both the RFID tag and the system, enabling secure encryption of the EPC during normal operation without requiring complex real-time authentication protocols

Inventive Principle:

Principle #24Intermediary (Mediator)

3Loss of information

If mobile readers can read RFID tag information after purchase, then customers can track purchased items, but the purchaser's privacy is infringed and tracking can be used illegally

Engineering Contradiction:

Improvepurchased item tracking capabilityVSAvoidprivacy infringement

Core Design Contradiction:

Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The patent changes the state of the EPC parameter by encrypting it with an authentication value after purchase. This transformation allows the system to maintain tracking capability for authorized parties while preventing unauthorized privacy infringement and illegal tracking by ordinary mobile readers

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS9213971B2Method and system for providing information on pre-purchase and post-purchase items using RFID and computer-readable storage media storing programs for executing the method

Publication Date: 2015.12.15 KOREA UNIV IND & ACADEMIC CALLABORATION FOUND

AI summary

Pre-purchase and post-purchase item information provision methods and systems using an RFID technology and computer readable storage media storing programs for executing the methods are provided. A pre-purchase item information provision method for a radio frequency identification system according to the present invention includes transmitting, if a mobile reader is detected by a local server installed in a salesroom, a certificate containing information on a location of an object information service server and an authentication value to the mobile reader; transmitting, at the mobile reader, a query requesting an item ID to a tag attached to a target item; transmitting, at the tag, a item ID information generated by encrypting the item ID using the authentication value to the mobile reader; transmitting, at the mobile reader, the item ID information and the authentication value to the object information service server; and transmitting, at the object information service server, data retrieved in a database in correspondence to the item ID, the data being retrieved when the authentication value exists in the database. The item information provision method and system of the present invention can guarantee reliability of information on an item in the pre-purchase state and prevent the information from being eavesdropped in both the pre-purchase and post-purchase states. Also, the item information provision method and system can prevent the tag ID from being tracked, thereby protecting purchaser's privacy, preventing the tag from being forged, and improving computation efficiency.