ID tag authentication system and method
A method used to authenticate an item using an identification tag is provided. At the time of manufacture, the tags are created with various hardware attributes (HA), including a unique identifier (UID); and encoded with a signature of a message that includes a URL, and optionally a serial number associated with a product to which the tag is to be attached. The URL embeds various data such as one or more of the HAs, a serial number, etc., which can be used to verify the authenticity of the tag when verifying the signature. When a tag is read, the message including the URL is recovered and the signature is verified by the processor of the reader. This can be done to ensure that the URL in the message is one designated by the signer. The data in the signature can then be used to verify the authenticity of the tag and/or to detect tampering. The results of the verification can also be displayed to a user, e.g., using an available display on the electronic device including or otherwise acting as the tag reader.
1. A method of verifying a signature on a tag, the method comprising:
reading, using a tag reader, at least one value identifying an attribute of the tag;
verifying a static signature stored in memory on the tag prior to the reading, the signature having been generated by signing a URL, the URL embedding the at least one value identifying an attribute of the tag; and
comparing the at least one values to verify the tag.
2. The method of claim 1 , wherein the attribute of the tag corresponds to a hardware attribute determined or applied at a time of manufacture.
3. The method of claim 1 , wherein the URL embeds a hash of the at least one value identifying an attribute of the tag.
4. The method of claim 3 , wherein the URL embeds a bit mask indicating the contents of the hash.
5. The method of claim 4 , wherein the URL embeds a plurality of values identifying a plurality of attributes of the tag.
6. The method of claim 1 , wherein the URL embeds a serial number associated with a product to which the tag is affixed or is to be affixed.
7. The method of claim 1 , further comprising sending a query to a web server after detecting selection of the URL.
8. The method of claim 7 , wherein selection of the URL is detected via an interaction with the tag reader, the tag reader displaying the URL.
9. The method of claim 7 , further comprising receiving additional information from the web server.
10. The method of claim 9 , wherein the additional information comprises at least one of: a confirmation of tag validity, product information associated with a product to which the tag is affixed, and an error message.
11. The method of claim 1 , wherein if the signature is verified but the at least one values do not match, an error condition is detected indicative of a cloned tag.
12. The method of claim 11 , further comprising sending a clone detection message to a third party.
13. A method of signing a tag, the method comprising:
embedding at least one value identifying an attribute of the tag into a uniform resource locator (URL);
signing the URL to generate a static signature; and
storing the static signature in memory of the tag prior to the tag being verified by a tag reader.
14. The method of claim 13 , wherein the attribute of the tag corresponds to a hardware attribute determined or applied at a time of manufacture.
15. The method of claim 13 , wherein the URL embeds a hash of the at least one value identifying an attribute of the tag.
16. The method of claim 15 , wherein the URL embeds a bit mask indicating the contents of the hash.
17. The method of claim 16 , wherein the URL embeds a plurality of values identifying a plurality of attributes of the tag.
18. The method of claim 13 , wherein the URL embeds a serial number associated with a product to which the tag is affixed or is to be affixed.
19. A method of remotely verifying a signature on a tag, the method comprising:
receiving a verification query from a tag reader, the verification query comprising at least one of a static signature to be verified, and at least one value identifying an attribute of the tag, the static signature being stored on the tag prior to the verification query and having been generated by signing a URL, the URL embedding the at least one value identifying the attribute of the tag;
using the contents of the verification query and information in a database to verify the tag; and
sending a verification response to the tag reader.
20. The method of claim 19 , wherein verifying the tag comprises verifying the signature and extracting the at least one value for comparison with the database.
21. The method of claim 19 , wherein verifying the tag comprises comparing the at least one value provided in the verification query with the information in the database.