RFID Tag Authorization via Ownership Codes and Digital Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
RFID systems for loss prevention in retail environments face challenges in efficiently managing item authorization and foreign tags, with existing methods being costly, complex, or susceptible to unauthorized access and theft.
Innovation Solution
An RFID system that stores an ownership code associated with a facility in tags, using an authorization reader to write a digital signature or temporal parameter to indicate authorized items, verified by a Point-of-Exit reader to ensure legitimate exit, employing cryptographic algorithms and ticket-based verification to prevent unauthorized removal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a store database maintains information about all items and checks approval at Point-of-Exit readers, then item authorization can be verified, but the system becomes costly and complex especially for large stores with multiple entrances, exits, and checkout registers
Solution Approach 1:
The authorization data is extracted from the centralized database and stored directly in the RFID tags. Each tag contains an ownership code and authorization bits that indicate whether the item is approved to leave. This eliminates the need for a complex centralized database system while maintaining reliable authorization verification at Point-of-Exit readers.
Solution Approach 2:
The RFID tags serve multiple functions: they store item identification, ownership code, and authorization status. The same tag structure and RFID infrastructure are used throughout the entire store system, providing a universal solution that works across multiple entrances, exits, and checkout registers without requiring separate systems for each location.
2Device complexity
If tags retain authorization information and authorization readers write bits to tags at Point-of-Sale, then the system is simpler, but it becomes susceptible to thieves using unauthorized readers to illegitimately set authorization bits
Solution Approach 1:
The system uses asymmetric authorization where authorization readers possess secret keys that enable them to write authorization bits to tags, while Point-of-Exit readers only have verification capability. This asymmetric design ensures that only authorized readers can modify tag data, preventing thieves from using unauthorized readers to illegitimately set authorization bits.
Solution Approach 2:
Authorization bits are set in advance at the Point-of-Sale using authorized readers with secret keys before items leave the store. This preliminary authorization action ensures security is established beforehand, and the Point-of-Exit readers only need to verify the pre-established authorization without having the capability to modify it.
3Reliability
If the system must determine whether departing items are foreign or stolen, then loss prevention is improved, but foreign tags entering the store complicate the verification process
Solution Approach 1:
The system uses ownership codes stored in RFID tags to identify the legitimate owner or facility associated with each item. Foreign tags lacking the correct ownership code are automatically identified as such. This local quality approach allows the system to distinguish between authorized and foreign items at each Point-of-Exit location without requiring complex centralized verification, enabling reliable theft prevention while simplifying foreign tag handling.
Data Source
AI summary
In RFID systems employed for loss prevention, an item supplier or an ingress reader writes an ownership code associated with an organization or facility into a tag, indicating that an item to which the tag is attached is associated with the facility and not foreign. At checkout or point-of-sale an authorization reader or mobile device writes a computed code and/or a ticket into the tag indicating that the tagged item is allowed to leave the facility. At point-of-exit an exit reader determines if the tagged item is allowed to leave the facility by verifying the ownership code and the code or ticket. The loss-prevention system may issue an alert or sound an alarm if a facility-associated item is leaving the facility without a proper code or ticket indicating that the item is approved to leave.