RFID Tag Encryption via Server Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

RFID systems face security concerns due to the potential for unauthorized reading and tracking of RFID tags, which increases as their ubiquity grows, and adding security features raises costs, creating a need for low-cost security measures.

Innovation Solution

Implementing encryption and authentication methods within RFID tags and servers, where RFID tags encrypt identification data, and servers decrypt it using corresponding keys, with authentication data ensuring only authorized access and transactions are processed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security features are added to RFID tags, then security of RFID tag information is improved, but cost increases

Engineering Contradiction:

ImprovesecurityVSAvoidcost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The patent introduces an authentication server as an intermediary component that mediates between RFID tags and readers. The server stores authentication data and verifies credentials, allowing security functionality to be distributed rather than embedded entirely in expensive tag hardware. This intermediary approach enables strong security through centralized authentication infrastructure while keeping individual tag costs low.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces physical security mechanisms (such as secure hardware elements embedded in tags) with cryptographic and software-based authentication mechanisms. Instead of relying on tamper-proof physical containers, the system uses encryption, authentication protocols, and server-side verification to provide security, thereby reducing manufacturing costs while maintaining or improving security levels.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If RFID tags are deployed ubiquitously, then productivity is improved, but security risks increase

Engineering Contradiction:

Improvetracking efficiencyVSAvoidunauthorized access

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary authentication actions before allowing RFID tag data to be accessed or processed. The authentication server verifies credentials and establishes authorized access rights in advance, so that even when tags are ubiquitously deployed and constantly readable, only authenticated readers can access or process the information. This preliminary security check prevents unauthorized access while maintaining high tracking efficiency.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent applies different security qualities to different parts of the RFID system. Ubiquitously deployed tags use simple, low-cost identification functionality for high-speed tracking, while security-critical operations (authentication, data access, transaction processing) are handled by more sophisticated readers and servers with appropriate security measures. This local differentiation allows widespread deployment without compromising security.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS10623392B2Systems and methods for RFID security

Publication Date: 2020.04.14 PRIVATETAG INNOVATIONS LLC

AI summary

An RFID system includes an RFID tag, an RFID reader, and a server. The RFID tag communicates to the server via encrypted information. The information may be encrypted with synchronized encryption keys. In this manner, the reader need not decrypt the information from the RFID tag. The effectiveness of malicious readers is thereby reduced, resulting in improved RFID tag security.