Secure RFID tag identification

1. A method to operate a system for secure one-way RFID tag identification, the system comprising an RFID tag reader, and a tags talk only (TTO) RFID tag including a memory storing a tag identifier of the TTO RFID tag the method comprising:

transmitting power from the RFID tag reader and receiving the power at the TTO RFID tag;

generating, at the TTO RFID tag, an auxiliary identifier;

generating, at the TTO RFID tag, a secure representation based on the auxiliary identifier;

transmitting, from the TTO RFID tag and receiving at the RFID reader, data comprising one or more representations of the auxiliary identifier and the tag identifier including the secure representation; and

verifying an identity of the TTO RFID tag based on the received representations,

wherein the transmission of power from the RFID reader to the TTO RFID tag is the only transmission from the RFID tag reader that is received by the TTO RFID tag, and

when the transmission of the power from the RFID reader, and the reception of the power at the TTO RFID tag is maintained after the transmission of the data,

generating, at the TTO RFID tag, a new auxiliary identifier;

generating, at the TTO RFID tag, a new secure representation based on the new auxiliary identifier; and

transmitting, from the TTO RFID tag, new data comprising one or more representations of the new auxiliary identifier and the tag identifier including the new secure representation.

2. The method of claim 1 , wherein the transmission of the power from the RFID reader is maintained when an error is detected in the data received from the TTO RFID tag.

3. The method of claim 1 , wherein the secure representation is an encrypted value.

4. The method of claim 1 , wherein the TTO RFID tag stores a security key in a secure memory and the secure representation is generated based on the auxiliary identifier and the security key.

5. The method of claim 4 , wherein the secure representation is a hash value, and generating the secure representation includes generating a hash value of the tag identifier, the auxiliary identifier, and the security key.

6. The method of claim 4 , wherein the one or more representations include unsecured representations of the auxiliary identifier and the tag identifier, and the verifying the identity of the TTO RFID tag includes:

retrieving a counterpart security key corresponding to the received tag identifier;

generating a counterpart hash based on the received tag identifier, the received auxiliary identifier and the retrieved security key; and

comparing the received hash and the counterpart hash to verify the identity of the TTO RFID tag.

7. The method of claim 4 , wherein generating the secure representation includes encrypting the auxiliary identifier and the tag identifier using the security key.

8. The method of claim 7 , wherein verifying the identity of the TTO RFID tag includes:

retrieving a counterpart security key; and

decrypting the received secure representation to obtain the auxiliary identifier and the tag identifier.

9. The method to operate a system for secure one-way RFID tag identification, the system comprising an RFID tag reader, and a tags talk only (TTO) RFID tag including a memory storing a tag identifier of the TTO RFID tag, the method comprising:

transmitting power from the RFID tag reader and receiving the power at the TTO RFID tag;

generating, at the TTO RFID tag, an auxiliary identifier;

generating, at the TTO RFID tag, a secure representation based on the auxiliary identifier;

transmitting, from the TTO RFID tag and receiving at the RFID reader, data comprising one or more representations of the auxiliary identifier and the tag identifier including the secure representation; and

verifying an identity of the TTO RFID tag based on the received representations, wherein the transmission of power from the RFID reader to the TTO RFID tag is the only transmission from the RFID tag reader that is received by the TTO RFID tag, and

when the TTO RFID tag has power after the transmission of the data,

generating, at the TTO RFID tag, a new auxiliary identifier;

generating, at the TTO RFID tag, a new secure representation based on the new auxiliary identifier; and

transmitting, from the TTO RFID tag, new data comprising one or more representations of the new auxiliary identifier and the tag identifier including the new secure representation.