Proxy-based reader authentication by trusted authority
AssigneeImpinj, Inc.
InventorsChristopher J. Diorio, Scott A. Cooper, Matthew Robshaw
Life of this patent
Estimating the term…
Abstract
A Radio Frequency Identification (RFID) system including an RFID reader and a reader proxy authenticates itself to a verification authority. The proxy receives a proxy challenge from a verification authority and determines a proxy response based on the proxy challenge and a proxy key known to the proxy. The proxy response is then sent to the verification authority along with an identifier for the reader. The reader then authenticates an RFID tag by sending a tag response to the verification authority, which determines whether the reader is authentic based on the authenticity of the proxy response.
Claims20
A proxy configured to verify, using a verification authority, a tag response from a Radio Frequency Identification (RFID) tag, the proxy comprising:
- at least one interface configured to communicate with the verification authority and with a plurality of RFID readers;
- a memory configured to store a proxy key;
- and
- a processor block coupled to the memory and the at least one interface and configured to:
- receive the tag response from at least one RFID reader of the plurality of RFID readers;
- transmit, to the verification authority, a request to verify an authenticity of the tag response;
- receive a proxy challenge;
- determine a proxy response based on the proxy challenge and the proxy key;
- transmit the proxy response to the verification authority;
- and
- receive, from the verification authority, verification of the authenticity of the tag response, wherein the verification authority determines the verification based on at least a challenge sent to the tag, a key associated with the tag, and the tag response.
A proxy configured to authenticate a Radio Frequency Identification (RFID) reader to a verification authority, the proxy comprising:
- at least one interface configured to communicate with the verification authority and with a plurality of RFID readers;
- a memory storing a proxy key;
- and
- a processor block coupled to the memory and the interface and configured to:
- transmit, to the verification authority, a request to consider as authentic a first reader in the plurality of RFID readers;
- receive a proxy challenge from the verification authority;
- determine a proxy response based on the proxy challenge and the proxy key;
- transmit the proxy response to the verification authority to enable the first reader to authenticate tag responses directly with the verification authority such that tag responses are sent from the first reader directly to the verification authority for authentication.
A proxy configured to transmit a tag response from a Radio Frequency Identification (RFID) tag to a verification authority for verification, the proxy comprising:
- at least one interface configured to communicate with the verification authority and with a plurality of RFID readers;
- a memory configured to store a proxy key;
- and
- a processor block coupled to the memory and the at least one interface and configured to:
- receive the tag response from at least one reader of the plurality of RFID readers;
- transmit, to the verification authority, a request to verify an authenticity of the tag response;
- receive a proxy challenge;
- determine a proxy response based on the proxy challenge and the proxy key;
- and
- transmit the proxy response to the verification authority, thereby enabling the verification authority to verify the authenticity of the tag response based on at least a challenge sent to the tag, a key associated with the tag, and the tag response.
Dependencies are inferred from the claim text.