Method for RFID tag authentication

1. A method for authenticating a device, the method comprising:

executing a one-side authentication of the device by a reader;

submitting results of the one-side authentication to a blockchain, by the reader, at a first blockchain node of a plurality of blockchain nodes; and

verifying the one-side authentication, by another entity different from the reader, at a second blockchain node of the plurality of blockchain nodes.

2. The method of claim 1 , further comprising assigning a unique identification (UID) to the device by a manufacturer of the device.

3. The method of claim 1 , wherein the device is a RFID tag.

4. The method of claim 1 , wherein the method is performed in a supply chain and the device is a RFID tag coupled to a product in the supply chain.

5. The method of claim 1 , wherein verifying the one-side authentication is performed online with a database.

6. The method of claim 1 , wherein the device is a tag and each of the plurality of blockchain nodes includes a tag reader for reading the tag.

7. The method of claim 6 , wherein a tag reader comprises a secure element for storing trust provisioned information used for executing the one-side authentication.

8. The method of claim 7 , wherein the trust provisioned information comprises a unique identification (UID) corresponding to each of the tag readers, a public key, and a shared secret.

9. The method of claim 7 , wherein verifying the one-sided authentication further comprises attesting the one-side authentication.

10. In a system having a blockchain and a plurality of parties, wherein each party of the plurality of parties is assigned a blockchain node of the blockchain, a method for authenticating a device comprising:

provisioning a database with trust provisioning information;

registering each party of the plurality of parties with the blockchain;

registering a plurality of tags for distribution in the system, wherein a tag of the plurality of tags is assigned to the device;

enabling a reader of a first party of the plurality of parties to perform a one-side authentication of the tag and submit results of the authentication to the blockchain at a first blockchain node; and

enabling a reader of a second party of the plurality of parties to verify the one-side authentication of the tag from the first party, wherein the verification of the one-side authentication is submitted to the blockchain from a second blockchain node different from the first blockchain node.

11. The method of claim 10 , wherein the blockchain is characterized as being a private blockchain.

12. The method of claim 10 , wherein the system is a supply chain system and the first party is characterized as being a manufacturer of a product, the second party is downstream the first party in the supply chain system, each of the plurality of parties having a tag reader for reading the plurality of tags, and the device is one of the plurality of tags.

13. The method of claim 12 , wherein the trust provisioned information comprises a unique identification (UID) corresponding to each of the plurality of tags and a shared secret.

14. The method of claim 12 , wherein a tag reader includes a secure element for storing the trust provisioned information.

15. The method of claim 12 , further comprising verifying integrity of a final product comprising the device by a third party at a third blockchain node.

16. The method of claim 12 , wherein the plurality of tags is characterized as being a plurality of radio frequency identification (RFID) tags.

17. In a supply chain system having a plurality of parties and a database, wherein each of the plurality of parties is assigned a blockchain node of a blockchain, a method for authenticating a device comprising:

provisioning the database with trust provisioning information for a plurality of tags and tag readers;

registering each of the plurality of readers in the blockchain;

registering the plurality of tags for distribution in the system, wherein a tag of the plurality of tags is assigned to the device;

enabling a reader of a first party of the plurality of parties to perform a one-side authentication of the tag and submit results of the authentication to the blockchain at a first blockchain node; and

enabling a reader of a second party of the plurality of parties to verify the one-side authentication of the tag from the first party, wherein the verification of the one-side authentication is submitted to the blockchain and to the database from a second blockchain node different from the first blockchain node.

18. The method of claim 17 , wherein the first party is characterized as being a manufacturer of a product, the second party is downstream the first party in the supply chain system, each of the plurality of parties having a tag reader for reading the plurality of tags, and the device is one of the plurality of tags.

19. The method of claim 17 , wherein the trust provisioned information comprises a unique identification (UID) corresponding to each of the plurality of tags and a shared secret.

20. The method of claim 17 , wherein a tag reader includes a secure element for storing the trust provisioned information.