Transponder, RFID system, and method for RFID system with key management
View Patent ↗A transponder is provided, in particular a passive and/or backscatter-based transponder, for an RFID system, wherein at least one first piece of information can be stored in a first memory area on the transponder that is accessible in clear text only by a read access internal to the transponder, and a second piece of information can be stored in a second memory area that is accessible in clear text through an air interface for read access, and the second piece of information is generated from the first piece of information using an asymmetric encryption method. The invention further relates to an RFID system for wireless data exchange comprising a transponder and a base station, and a method for requesting write and/or read access to a transponder, in particular a passive and/or backscatter-based transponder.
1. A transponder comprising:
a first memory area operable to store first information that is accessible only by read access internal to the transponder;
a second memory area operable to store second information that is accessible by read access external to the transponder through an air interface, the second information having been generated from the first information using a key calculated from a public key of an asymmetric encryption method; and
logic circuitry operable to:
access a transmission from a base station, the transmission comprising an encrypted version of the first information generated by the base station using the second information in the second memory area as accessed by the base station;
decrypt the encrypted version of the first information in the transmission to extract a decrypted version of the first information;
compare the decrypted version of the first information extracted from the transmission to the first information stored in the first memory area;
based on the comparing, provide the base station read or write access to the first, the second, or another memory area of the transponder.
2. The transponder of claim 1 , wherein the first information is a symmetric password that is accessible by the logic circuitry of the transponder for a password comparison.
3. The transponder of claim 1 , wherein third information is stored in the first memory area of the transponder, the third information being used with the first information to generate the second information.
4. The transponder of claim 3 , wherein a security measure protects the second or third information from read access external to the transponder through the air interface.
5. The transponder of claim 1 , wherein the asymmetric encryption method is an elliptic curve cryptosystem method.
6. A method comprising:
accessing a transmission from a base station, a first memory area of a transponder storing first information that is accessible only by read access internal to the transponder, a second memory area of the transponder storing second information that is accessible by read access external to the transponder through an air interface, the second information having been generated from the first information using a key calculated from a public key of an asymmetric encryption method, the transmission from the base station comprising an encrypted version of the first information generated by the base station using the second information in the second memory area as accessed by the base station;
decrypting the encrypted version of the first information in the transmission to extract a decrypted version of the first information;
comparing the decrypted version of the first information extracted from the transmission to the first information stored in the first memory area; and
based on the comparing, providing the base station read or write access to the first, the second, or another memory area of the transponder.
7. The method of claim 6 , wherein the first information is a symmetric password that is accessible by logic circuitry of the transponder for a password comparison.
8. The method of claim 6 , wherein third information is stored in the first memory area of the transponder, the third information being used with the first information to generate the second information.
9. The method of claim 8 , wherein a security measure protects the second or third information from read access external to the transponder through the air interface.
10. The method of claim 6 , wherein the asymmetric encryption method is an elliptic curve cryptosystem method.
11. A computer-readable non-transitory medium embodying logic that is operable when executed to:
access a transmission from a base station, a first memory area of a transponder storing first information that is accessible only by read access internal to the transponder, a second memory area of the transponder storing second information that is accessible by read access external to the transponder through an air interface, the second information having been generated from the first information using a key calculated from a public key of an asymmetric encryption method, the transmission from the base station comprising an encrypted version of the first information generated by the base station using the second information in the second memory area as accessed by the base station;
decrypt the encrypted version of the first information in the transmission to extract a decrypted version of the first information;
compare the decrypted version of the first information extracted from the transmission to the first information stored in the first memory area; and
based on the comparing, provide the base station read or write access to the first, the second, or another memory area of the transponder.
12. The computer-readable non-transitory medium of claim 11 , wherein the first information is a symmetric password that is accessible by logic circuitry of the transponder for a password comparison.
13. The computer-readable non-transitory medium of claim 11 , wherein third information is stored in the first memory area of the transponder, the third information being used with the first information to generate the second information.
14. The computer-readable non-transitory medium of claim 13 , wherein a security measure protects the second or third information from read access external to the transponder through the air interface.
15. The computer-readable non-transitory medium of claim 11 , wherein the asymmetric encryption method is an elliptic curve cryptosystem method.