Secure RFID tag identification

Patent metadata

Field	Value
Publication number	US-11477177-B2
Application number	US-201816646008-A
Country	US
Kind code	B2
Filing date	Sep 11, 2018
Priority date	Sep 11, 2017
Publication date	Oct 18, 2022
Grant date	Oct 18, 2022

Abstract

A method, apparatus and system for secure one-way RFID tag identifications provided. The method comprising generating, at an RFID tag, an auxiliary identifier; generating, at an RFID tag, a secure representation based on the auxiliary identifier; transmitting, from the RFID tag and receiving at an RFID reader, one or more representations of the auxiliary identifier and the tag identifier including the secure representation; and verifying the identity of the RFID tag based on the received representations.

First claim

The invention claimed is:

1. A method for operating a system for secure one-way RFID tag identification, the system comprising an RFID tag reader, and a Tags Talk Only (TITO) RFID tag including a memory storing a tag identifier of the TTO RFID tag, the method comprising:
generating, at the TTO RFID tag, an auxiliary identifier;
generating, at the TTO RFID tag, a secure representation based on the auxiliary identifier;
transmitting, from the TTO RFID tag and receiving at the RFID reader, one or more representations of the auxiliary identifier and the tag identifier including the secure representation; and
verifying an identity of the TTO RFID tag based on the received representations,
wherein the method includes only one-way data communication from the TTO RFID tag to the RFID tag reader,
wherein the TTO RFID tag stores a security key in a secure memory and the secure representation is generated based on the auxillary identifier and the security key, and
wherein the one or more representations includes an unsecured representation of the auxiliary identifier, and generating the secure representation includes;
generating a value based on the security key and the auxiliary identifier, and
encrypting the tag identifier using the generated value.

2. The method of claim 1 , wherein the auxiliary identifier is one of a random number and a number in a predetermined sequence.

3. The method of claim 1 , wherein verifying the identity of the TTO RFD tag includes
determining if the auxiliary identifier has previously been used in verification of the identity of the TTO RFID tag, and
returning an unverified result if the auxiliary identifier has previously been used.

4. The method of claim 1 , wherein the value is generated using a one time password algorithm.

5. The method of claim 4 , wherein verifying the identity of the TTO RFID tag includes:
retrieving a counterpart security key;
generating counterpart value based on the counterpart security key and the unsecured representation of the auxiliary identifier; and
decrypting the received secure representation using the counterpart value to obtain the tag identifier.

6. The method of claim 1 , wherein the one or more representations include an unsecured representation of the tag identifier.

7. The method of claim 1 , wherein the verification of the TTO RFID tag is performed at the RFID tag reader or by an external provider and a result of the verification returned to the RFID tag reader.

8. A method for operating a Tags Talk Only (TTO) RFID tag for secure one-way TTO RFID tag identification, the TTO RFID tag including a memory storing a tag identifier of the TTO RFID tag, the method comprising:
generating an auxiliary identifier;
generating a secure representation based on the auxiliary identifier;
transmitting one or more representations of the auxiliary identifier and the tag identifier including the secure representation,
wherein the method includes only one-way data communication from the TTO RFID tag,
wherein the TTO RFID tag stores a security key in a secure memory and the secure representation is generated based on the auxiliary identifier and the security key, and
wherein the one or more representations includes an unsecured representation of the auxiliary identifier, and generating the secure representation includes;
generating a value based on the security key and the auxiliary identifier, and
encrypting the tag identifier using the generated value.

9. A Tags Talk Only (TTO) RFID tag for secure one-way TTO RFID tag identification, the TTO RFID tag comprising
a memory configured to store a tag identifier of the TTO RFID tag;
an auxiliary identifier generator configured to generate an auxiliary identifier;
a cryptographic unit configured to generate a secure representation based on the auxiliary identifier; and
a transmitter configured to transmit one or more representations of the auxiliary identifier and the tag identifier including the secure representation,
wherein the ITO RFD tag is configured to perform only one-way data communication from the TTO RFID tag,
wherein the TTO RFID tag further comprises a secure memory configured to store a security key, and wherein the cryptographic unit is configured to generate the secure representation based on the auxiliary identifier and the security key, and
wherein the one or more representations includes an unsecured representation of the auxiliary identifier, and the cryptographic unit is configured to generate the secure representation by
generating a value based on the security key and the auxiliary identifier, and
encrypting the tag identifier using the generated value.

10. The TTO RFID tag of claim 9 , wherein the auxiliary identifier is one of a random number and a number in a predetermined sequence.

11. An RFID system for secure one-way RFD tag identification, the system comprising an RFID tag reader and a Tags Talk Only (TTO) RFID tag, wherein the system is configured such that:
the TTO RFID tag generates an auxiliary identifier;
the TTO RFID tag generates a secure representation based on the auxiliary identifier;
the TTO RFID tag transmits to the RFID reader, one or more representations of the auxiliary identifier and a tag identifier of the TTO RFID tag including the secure representation; and
the RFID tag reader verifies an identity of the TTO RFID tag based on the received representations,
wherein only one-way data communication from the TTO RFID tag to the RFID tag reader are utilized,
wherein the TTO RFID tag stores a security key in a secure memory and the secure representation is generated based on the auxiliary identifier and the security key, and
wherein the one or more representations includes an unsecured representation of the auxiliary identifier, and generating the secure representation incudes;
generating a value based on the security key and the auxiliary identifier, and
encrypting the tag identifier using the generated value.

Assignees

• Pragmatic Printing Ltd

Inventors

• Cobb Brian
• White Scott

Classifications

• H04W12/47

  using near field communication [NFC] or radio frequency identification [RFID] modules · CPC title

• G06K7/10009

  sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L9/0869

  involving random numbers or seeds · CPC title

• H04L63/0492 Primary

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title