Devices, methods, and systems for cryptographic authentication and provenance of physical assets
Authentication and provenance of physical assets may be achieved by attaching a cryptographically strong RFID tag including a physically unclonable function and public-key cryptography logic which implements a digital signature algorithm. The cryptographically strong RFID tag directly participates in a novel implementation of blockchain technology, constructing an indelible and cryptographically provable record of authenticity and provenance with a new level of trustworthiness to protect physical assets.
1. A system for recording the transfer of a physical asset in a series of transactions, in which each of the transactions employs public-key cryptography (PKC) that is performed by a radio frequency identification (RFID) tag that is permanently attached to the physical asset to guarantee the authenticity and integrity of the transaction, and each of the transactions includes a digital signature based on a private key of the RFID tag.
2. The system of claim 1 , wherein a private key of the RFID tag is generated by a physically unclonable function (PUF) of the RFID tag.
3. The system of claim 1 , wherein a public key of the RFID tag is generated by PKC logic based on the input of the private key.
4. The system of claim 1 , wherein a transaction of the series of transactions is uniquely identified by a fixed length hash digest generated by a cryptographic hash function based on the input of the contents of the transaction.
5. The system of claim 1 , wherein the RFID tag includes a random number generator and PKC logic, and the random number generator generates a nonce value that is an input to the PKC logic.
6. The system of claim 5 , wherein a transaction of the series of transactions is uniquely identified by a fixed length hash digest generated by a cryptographic hash function based on the input of the contents of the transaction, and a digital signature is generated by the PKC logic based on inputs including the fixed length hash digest, the private key and the nonce value.
7. The system of claim 6 , wherein the digital signature is inserted into the transaction.
8. The system of claim 7 , wherein the series of transactions is recorded by a blockchain network.
9. The system of claim 8 , wherein each transaction recorded by the blockchain network is verified by a function based on the inputs including the fixed length hash digest of the transaction and the public key of the RFID tag.
10. A method for authentication, the method comprising:
receiving a command to disclose a public key of a radio frequency identification (RFID) tag containing public-key cryptography (PKC) logic and a physically unclonable function (PUF);
generating a tag private key by the PUF, and sending the tag private key from the PUF to the PKC logic;
creating, by the PKC logic, a tag public key from the tag private key; and
transmitting the tag public key from the RFID tag in response to the command.
11. The method of claim 10 , further comprising:
receiving a message and a command to generate a digital signature by the RFID tag;
generating a nonce value by a random number generator, and sending the nonce value to the PKC logic;
calculating, by the PKC logic, the digital signature, based upon inputs including the message, the tag private key and the nonce value;
transmitting the digital signature from the RFID tag in response to the command to generate the digital signature.
12. The method of claim 11 , wherein calculating the digital signature includes performing, by the PKC logic, a digital signature algorithm (DSA).
13. The method of claim 11 , wherein calculating the digital signature includes performing, by the PKC logic, an RSA Digital Signature Algorithm.
14. The method of claim 11 , wherein calculating the digital signature includes performing, by the PKC logic, an Elliptic Curve Digital Signature Algorithm (ECDSA).
15. The method of claim 11 , further comprising:
recording the public key and digital signature in a blockchain.
16. The method of claim 11 , wherein receiving the message by the RFID tag includes receiving a fixed length message.
17. The method of claim 10 , further comprising attaching the RFID tag to a physical asset.
18. The method of claim 10 , further comprising associating a trusted agent private key with the physical asset.
19. A blockchain comprising a sequence of blocks, each block comprising a group of transactions, wherein a series of transactions included in the sequence of blocks involves a physical asset, in which each of the transactions in the series of transactions includes a digital signature generated by a radio frequency identification (RFID) tag that is permanently attached to the physical asset, wherein the RFID tag performed public-key cryptography (PKC) to generate the digital signature that proves that the physical asset was present at the transaction.
20. The blockchain of claim 19 , wherein the RFID tag includes a physically unclonable function (PUF) that generated a RFID private key that was an input to the PKC for generation of the digital signature.
21. The blockchain of claim 20 , wherein the digital signature is inserted in each transaction associated with the physical asset.
22. The blockchain of claim 19 , wherein some of the transactions included in the sequence of blocks involve different physical assets than the physical asset involved in the series of transactions.