Method of and system for secure management of data stored on electronic tags
AssigneeTelecom Italia S.p.A.
InventorsElisa Alessio, Fabio Ricciato, Maura Santina Turolla
Life of this patent
Estimating the term…
Abstract
A method of secure management of data records stored in an RFID (Radio Frequency Identification) tag includes data fields whose contents are provided by different parties. Some of the data-fields contain public information data accessible to authorized end users. The data records are stored in encrypted form by encrypting data provided by different parties with different keys so as to set different access rights for contents providers and end users. The end users are supplied only with the keys allowing access to information data fields, whereas proprietary data are accessible only to the data owners. The keys are provided to the users in encrypted form.
Claims23
A method of secure management of data records stored in an RFID tag, wherein said data records contain a header portion and a payload portion and comprise data fields whose contents are provided by different parties, the different parties including an RFID-based service operator and at least one information data provider, wherein the data fields comprise service data fields and proprietary fields, wherein the service data fields contain information data relevant to at least one RFID-based service and are accessible to authorized end users, and wherein the proprietary fields contain proprietary data provided by the different parties, the method performed by the RFID-based service operator comprising:
- causing a first set of the service data fields to be stored in the RFID tag, the first set being managed by the RFID-based service operator and being encrypted with a first key personal to the service operator, the first set including the header portion of the data records;
- causing a second set of the service data fields to be stored in the RFID tag, the second set being managed by the at least one information data provider and being encrypted with a second key specific to a service of the at least one information data provider;
- determining a registration by said end users for access to the at least one RFID-based service;
- and
- delivering sets of keys to user equipment of said end users separate from the RFID tag so as to set different access rights to the data fields on the RFID tag for said end users and said different parties, the sets of keys each including the first key personal to the service operator such that said end users are provided access to the information data in the first set of the service data fields on the RFID tag, the sets of keys for end users registered to access the at least one RFID-based service including the second key specific to the service of the at least one information data provider such that said registered end users are provided access to the information data in the second set of the service data fields, each of said different parties having additional keys different from the sets of keys for said end users and allowing an exclusive access right to the proprietary data stored in the proprietary fields on the RFID tag and provided by the party itself.
A system for secure management of data records stored in RFID tags, comprising:
- at least one RFID-based service operator;
- at least one information data provider;
- a plurality of electronic RFID tags arranged to store respective data records, wherein said data records contain a header portion and a payload portion and comprise data fields whose contents are provided by different parties, the different parties including the RFID-based service operator and the at least one information data provider, the data fields comprising service data fields and proprietary fields, wherein the service data fields contain information data relevant to at least one RFID-based service and are accessible to authorized end users, wherein the proprietary fields contain proprietary data provided by the different parties, a first set of the service data fields being managed by the RFID-based service operator and being encrypted with a first key personal to the service operator, the first set including the header portion of the data records, a second set of the service data fields being managed by the at least one information data provider and being encrypted with a second key specific to a service of the at least one information data provider;
- a plurality of authorized end user equipment separate from the RFID tag and arranged at least to read the electronic RFID tags, each of the plurality of end user equipment having a set of keys including the first key personal to the RFID-based service operator such that said end users are provided access to the information data in the first set of the service data fields on the RFID tag, the set of keys for end users registered to access the at least one RFID-based service including the second key specific to the service of the at least one information data provider such that said registered end users are provided access to the information data in the second set of the service data fields;
- and
- wherein the at least one RFID-based service provider and the at least one information data provider respectively have at least one key allowing exclusive access to the proprietary data stored in the proprietary fields on the RFID tag and provided by the party itself.
Dependencies are inferred from the claim text.