KR100862009B1 - System and Method for Authenticating RFID Readeror Terminal, Secure RFID Tag for Authenticating RFID Readeror Terminal - Google Patents

Abstract

The present invention provides a function for receiving an RFID command including predetermined authentication method information, encrypted authentication data and a random number from a predetermined RFID reader (or terminal), and predetermined authentication method information and encrypted authentication from the received RFID command. A function of extracting data and a random number, a function of generating a decryption key for decrypting the encrypted authentication data through the extracted random number and a predetermined secret key provided in the RFID tag, and the generated decryption key Compare the decrypted authentication data with a function of decrypting the encrypted authentication data and predetermined RFID reader (or terminal) authentication information included in the RFID tag according to the authentication scheme information, and / or perform bit operation Performing the function of authenticating the validity of the RFID reader (or terminal) and the validity authentication result, and the RFID reader (or terminal) ) Is verified, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and if the validity of the RFID reader (or terminal) is not authenticated, the operation mode of the RFID tag is changed to the RFID. And a function for switching to a mode for deactivating a function of a tag, thereby authenticating the validity of the RFID reader in the RFID tag and responding its ID data only to the RFID reader in which the reader validity is verified. Thus, there is an advantage of protecting the RFID tag from hacking.

Security, RFID, authentication

Description

Secure RFID Tag and Authenticating RFID Reader (or Terminal), Secure RFID Tag for Authenticating RFID Reader (or Terminal) }

1 is a diagram illustrating a functional configuration of an RFID tag having a function of authenticating an RFID reader (or terminal) according to an embodiment of the present invention.

2 is a diagram illustrating a memory structure of an RFID tag for storing RFID reader (or terminal) authentication information for providing a function of authenticating an RFID reader (or terminal) according to an embodiment of the present invention.

3 is a diagram illustrating a functional configuration of an RFID terminal for authenticating an RFID reader (or terminal) in an RFID tag according to an embodiment of the present invention.

4 is a diagram illustrating an RFID command structure including authentication protocol data according to an embodiment of the present invention.

5 is a diagram illustrating a process of transmitting a command for authenticating an RFID reader (or terminal) to an RFID tag according to an exemplary embodiment of the present invention.

6 is a diagram illustrating a process of authenticating an RFID reader (or terminal) according to an embodiment of the present invention.

7 is a diagram illustrating a functional configuration of an RFID terminal for authenticating an RFID reader (or terminal) in an RFID tag according to another exemplary embodiment of the present invention.

8 is a diagram illustrating an RFID command structure including authentication protocol data according to another embodiment of the present invention.

9 is a diagram illustrating a process of transmitting a command for authenticating an RFID reader (or terminal) to an RFID tag according to another exemplary embodiment of the present invention.

10 is a diagram illustrating a process of authenticating an RFID reader (or terminal) according to another embodiment of the present invention.

<Description of main parts of drawing>

100: RFID tag 110: memory unit

115: receiver 120: transmitter

130: antenna 300: RFID reader (or terminal)

335: Memory unit 340: Information extraction unit

345: random number generation unit 350: encryption unit

355 command generating unit 360 command transmitting unit

The present invention is an antenna unit for transmitting and receiving a predetermined radio frequency signal with a predetermined RFID reader; A memory unit for storing at least one response data to respond to the RFID reader and / or predetermined RFID reader (or terminal) authentication information for authenticating the RFID reader (or terminal) and a predetermined secret key; A receiving unit for receiving an RFID command including predetermined authentication method information, encrypted authentication data, and a random number from the RFID reader through the antenna unit; And receiving an RFID command including the authentication method information, encrypted authentication data, and a random number through the receiver, extracting predetermined authentication method information, encrypted authentication data, and a random number from the received RFID command, and extracting the extracted RFID command. Generate a decryption key for decrypting the encrypted authentication data through a random number and a secret key stored in the memory unit, decrypt the encrypted authentication data through the generated decryption key, and the RFID according to the authentication scheme information Compare the decrypted authentication data with reader (or terminal) authentication information and / or perform bit operation to authenticate the validity of the RFID reader (or terminal), and as a result of the validity authentication, the RFID reader (or terminal) ) Is activated, the mode for activating the function of the RFID tag And a controller for switching the operation mode of the RFID tag to a mode for deactivating the function of the RFID tag when the validity of the RFID reader (or the terminal) is not authenticated. Or it provides a secure RFID tag and an RFID reader (or terminal) authentication method and system for authenticating a terminal) and a recording medium therefor.

RFID is a predetermined RFID including product information (for example, information for identifying or determining a product, or information on the whole process of production, distribution, storage, and consumption) in a tag attached to a predetermined product. Stores information, causes a predetermined RFID reader to read the information through an antenna, and performs an information processing procedure for the RFID information in connection with a predetermined information system and / or wired or wireless network based on information communication technology. General term for an apparatus and / or system for providing at least one additional service.

In the RFID system as described above, every RFID tag that receives a valid radio frequency signal from the RFID reader must respond to its ID data unconditionally to the RFID reader.

In recent RFID systems, such as ISO 18000-6 Type C and / or EPCglobal Gen2, at least one of the RFID readers must react among at least one RFID tag in the radio frequency range via a predetermined Select Command. At least one RFID tag is selected, and the selected RFID tag must reply its ID data unconditionally to the RFID reader.

In the case of the command / response structure of the conventional RFID reader and the RFID tag as described above, since the RFID tag does not have a function of authenticating the validity of the RFID reader, the RFID tag is a random RFID reader for hacking purposes. Contains the problem of responding to ID data.

The present invention is derived to solve the above problems, the function of receiving an RFID command including a predetermined authentication method information, encrypted authentication data and a random number from a predetermined RFID reader (or terminal), and the received A function of extracting predetermined authentication method information, encrypted authentication data, and random number from an RFID command, and a decryption key for decrypting the encrypted authentication data through the extracted random number and a predetermined secret key provided in the RFID tag. A function of generating, a function of decrypting the encrypted authentication data using the generated decryption key, and the decrypted data through predetermined RFID reader (or terminal) authentication information included in the RFID tag according to the authentication method information. Comparing the authentication data and / or performing bit operation to authenticate the validity of the RFID reader (or terminal) Function and the validity authentication result, when the validity of the RFID reader (or terminal) is authenticated, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and the validity of the RFID reader (or terminal) is If not, the security RFID tag and the RFID reader (or terminal) for authenticating the RFID reader (or terminal) characterized in that it has a function to switch the operation mode of the RFID tag to a mode for deactivating the function of the RFID tag. It aims at authentication method and system and recording medium for it.

Security RFID tag in the present invention is an antenna unit for transmitting and receiving a predetermined radio frequency signal with a predetermined RFID reader; A memory unit for storing at least one response data to respond to the RFID reader and / or predetermined RFID reader (or terminal) authentication information for authenticating the RFID reader (or terminal) and a predetermined secret key; A receiving unit for receiving an RFID command including predetermined authentication method information, encrypted authentication data, and a random number from the RFID reader through the antenna unit; And receiving an RFID command including the authentication method information, encrypted authentication data, and a random number through the receiver, extracting predetermined authentication method information, encrypted authentication data, and a random number from the received RFID command, and extracting the extracted RFID command. Generate a decryption key for decrypting the encrypted authentication data through a random number and a secret key stored in the memory unit, decrypt the encrypted authentication data through the generated decryption key, and the RFID according to the authentication scheme information Compare the decrypted authentication data with reader (or terminal) authentication information and / or perform bit operation to authenticate the validity of the RFID reader (or terminal), and as a result of the validity authentication, the RFID reader (or terminal) ) Is activated, the mode for activating the function of the RFID tag in the operation mode of the RFID tag. If the transition to, and the validity of the RFID reader (or terminal) is not authenticated, the control for switching the operation mode of the RFID tag in the mode to the disabling function of the RFID tag; provided with a characterized in that where the lure.

According to a preferred embodiment of the present invention, an RFID command including the authentication method information, encrypted authentication data, and a random number is an RFID command initially transmitted from the RFID reader (or terminal) to the RFID tag, and / or the RFID command. Preferably, the reader (or terminal) includes at least one or more of an RFID command transmitted to at least one RFID tag to select at least one RFID tag.

According to a preferred embodiment of the present invention, the encrypted authentication data is at least one of a serial number of the RFID reader (or terminal) and / or family ID information defined between the RFID reader (or terminal) and the RFID reader. It is preferable to encrypt at least one of the secret key provided in the RFID reader (or terminal) and a predetermined random number.

According to a preferred embodiment of the present invention, the RFID reader (or terminal) authentication information is a serial number of the RFID reader (or terminal), and / or a family defined between the RFID reader (or terminal) and the RFID reader. It is preferable to include at least one or more of the ID information.

According to the present invention, there is provided a function for receiving an RFID command including predetermined authentication scheme information, encrypted authentication data, and a random number from a predetermined RFID reader (or terminal); Extracting predetermined authentication scheme information, encrypted authentication data, and a random number from the received RFID command; Generating a decryption key for decrypting the encrypted authentication data through the extracted random number and a predetermined secret key provided in the RFID tag; Decrypting the encrypted authentication data through the generated decryption key; Validation of the RFID reader (or terminal) by comparing the decrypted authentication data and / or performing bit operation based on predetermined RFID reader (or terminal) authentication information included in the RFID tag according to the authentication method information. The ability to authenticate; As a result of the validity authentication, when the validity of the RFID reader (or terminal) is authenticated, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and the validity of the RFID reader (or terminal) is not authenticated. Otherwise, a function for switching the operation mode of the RFID tag to a mode for deactivating the function of the RFID tag.

In the present invention, the RFID reader (or terminal) authentication method comprises: generating an RFID command including predetermined authentication method information, encrypted authentication data, and a random number in a predetermined RFID reader (or terminal); Transmitting the generated RFID command to at least one RFID tag by the RFID reader (or terminal); Extracting the authentication scheme information, encrypted authentication data, and random number from the received RFID command in the RFID tag receiving the RFID command; Generating a decryption key for decrypting the encrypted authentication data through the random number extracted from the RFID tag and a predetermined secret key provided in the RFID tag; Decrypting the encrypted authentication data through the generated decryption key in the RFID tag; The RFID tag compares the decrypted authentication data with predetermined RFID reader (or terminal) authentication information included in the RFID tag according to the authentication method information, and / or performs bit operation on the RFID reader (or Authenticating the validity of the terminal); And when the validity of the RFID reader (or terminal) is authenticated in the RFID tag, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and the validity of the RFID reader (or terminal) is not authenticated. If not, switching the operation mode of the RFID tag to a mode for deactivating the function of the RFID tag.

According to the exemplary embodiment of the present invention, the authentication method information may be valid when the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit match one-to-one. A method information for authenticating the validity of the RFID reader (or terminal) when the method information for authenticating and the part of the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit match with each other; A result of performing at least one bit operation (eg, AND, OR, XOR, ...) on the authenticated authentication data and the RFID reader (or terminal) authentication information stored in the memory unit. In this case, it is preferable to include at least one or more of the method information for authenticating the validity of the RFID reader (or terminal).

According to an embodiment of the present invention, a mode of activating a function of the RFID tag as an operation mode of the RFID tag is defined in the RFID tag in response to at least one or more other commands received from the RFID reader after the RFID command. It is desirable to perform the specified operating procedure.

According to the embodiment of the present invention, the mode of activating the function of the RFID tag in the operation mode of the RFID tag is such that the RFID tag does not react to all kinds of other commands received from the RFID reader after the RFID command. It is desirable to.

According to the present invention, the recording medium provided on the system in which the RFID reader (or terminal) authentication method is implemented is characterized by recording a program for executing the RFID reader (or terminal) authentication method.

The RFID reader (or terminal) authentication system of the present invention includes predetermined authentication data and a secret key for encrypting the authentication data, generates a predetermined random number to generate an encryption key including the secret key, and An RFID reader (or terminal) for encrypting the authentication data through an encryption key, generating an RFID command including predetermined authentication scheme information, the encrypted authentication data, and the random number, and transmitting the RFID command to at least one RFID tag; And receiving the RFID command transmitted from the RFID reader (or terminal), extracting the authentication method information, the encrypted authentication data, and the random number included in the RFID command, and extracting the random number and the RFID tag. An RFID reader generates a decryption key for decrypting the encrypted authentication data through a predetermined secret key, decrypts the encrypted authentication data using the generated decryption key, and is stored in the memory unit according to the authentication scheme information. (Or terminal) compares the decrypted authentication data with authentication information, and / or performs a bit operation to authenticate the validity of the RFID reader (or terminal), and the RFID tag of the RFID reader (or terminal) If the validity is verified, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and the RFID reader ( Or, if the validity of the terminal) is not verified, an RFID tag for switching the operation mode of the RFID tag to a mode for deactivating the function of the RFID tag.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a functional configuration of an RFID tag 100 having a function of authenticating an RFID reader (or terminal) 300 according to an embodiment of the present invention.

In more detail, FIG. 1 is a functional configuration of an RFID tag 100 having a function of authenticating an RFID reader (or terminal) 300 according to the present invention in an RFID tag 100 conforming to at least one RFID standard. As a method of implementing the present invention, an RFID tag having a function of authenticating the RFID reader (or terminal) 300 by referring to and / or modifying the drawing 1 may be known to those skilled in the art. 100 may be inferred, but the present invention includes all the inferred implementation method, and is not limited to the implementation method shown in FIG.

Referring to FIG. 1 according to an embodiment of the present invention, an RFID tag 100 having a function of authenticating the RFID reader (or terminal) 300 transmits and receives radio frequency signals of a predetermined frequency band with an RFID reader ( Or an antenna unit 130 serving as an energy source (power source), at least one response data to respond to the RFID reader, and / or a predetermined certificate for authenticating the RFID reader (or terminal) 300. A memory unit 110 for storing RFID information including RFID reader (or terminal) authentication information of the RFID reader; and a radio frequency signal received through the antenna unit 130 is converted into a digital signal corresponding to a predetermined RFID communication protocol. And a response unit 115 provided to the control unit 105, a response signal corresponding to a digital signal received through the reception unit 115, and / or a response signal dynamically generated by the control unit 105, and / or Prescribed A transmitter 120 for converting a response signal corresponding to the response data extracted from the memory unit 110 into a radio frequency signal corresponding to a predetermined RFID communication protocol and transmitting it through the antenna unit 130, and at least one RFID To control the overall function of the RFID tag 100 in accordance with the standard, to read the digital signal received through the receiver 115 and to generate a response signal corresponding thereto, and / or to generate the response signal And a control unit 105 for extracting predetermined response data from the predetermined memory unit 110 and controlling a unique function of the corresponding RFID tag 100. The memory unit 110 includes the RFID reader. (Or terminal) 300 is encrypted via a predetermined secret key (and / or random number) to recover the received RFID reader (or terminal) authentication information included in the predetermined command Characterized by storing a private key for Tuesday.

In addition, when the RFID tag 100 is a passive type, the RFID tag 100 generates a predetermined power from the radio frequency signal received by the antenna unit 130 to supply to the RFID tag 100 ( 125, the RFID tag 100 is active, the RFID tag 100 includes a battery unit (not shown) accumulating power to be supplied to the RFID tag 100. It is characterized in that the further provided.

The antenna unit 130, when the RFID tag 100 enters into (or is close to) a radio frequency field of a predetermined RFID reader, receives the radio frequency signal transmitted from the RFID reader. Receives a signal containing a predetermined active signal and / or information (or data) through the (115) or provide (or apply) to the receiving unit 115, or a predetermined response signal and / to the RFID reader via the radio frequency signal Or transmitting a signal including information (or data).

According to the exemplary embodiment of the present invention, when the RFID tag 100 is a passive type, the antenna unit 130 receives energy (eg, an analog signal of radio frequency) included in the radio frequency signal transmitted from the RFID reader. By providing (or applying) to the power supply unit 125, it is characterized in that to supply a predetermined energy source (or power) required for the RFID tag 100 to operate.

In the case of the passive RFID tag 100, the power supply 125 is a predetermined power source corresponding to the energy field around the RFID reader using an analog signal of radio frequency provided (or applied) through the antenna unit 130. Is generated and supplied to the receiver 115, the transmitter 120, and the controller 105 provided in the RFID tag 100, and the power source 125 generates the power in the RFID reader. At least one or more of magnetic coupling using magnetic field of the alternating current flowing through the coil of the coil and / or electrostatic coupling using electrostatic energy and / or inductive coupling using inductive energy. It is done by

Those skilled in the art to which the present invention pertains, the power supply unit 125 provided in the passive RFID tag 100 generates a predetermined power from the radio frequency signal to supply to the RFID tag 100 Technical features, and / or the battery unit provided in the active RFID tag 100 will be familiar with the technical features for supplying a predetermined power to the RFID tag 100, detailed description thereof will be omitted for convenience.

The receiver 115 is a demodulator for converting a radio frequency signal provided (or applied) through the antenna unit 130 into a predetermined digital signal, and provided (or applied) through the antenna unit 130. Demodulating the radio frequency signal to receive a digital signal from the RFID reader, the command and / or data corresponding to at least one RFID communication protocol, and provide the digital signal to the controller 105.

The transmitter 120 may transmit a response signal of the digital signal received through the receiver 115 and / or a digital signal generated or extracted (eg, extracted from the memory unit 110) in the RFID tag 100. Modulator for converting into a predetermined radio frequency signal for transmission to the RFID reader through the antenna unit 130, when a predetermined digital signal is received through the receiver 115, at least one predefined A predetermined response signal corresponding to the response data corresponding to the above RFID communication protocol is generated as a radio frequency signal to be transmitted to the RFID reader through the antenna unit 130, and / or the control unit 105 is at least one. The response data (and / or the controller 105) dynamically generated in response to the above-described RFID communication protocol may correspond to at least one RFID communication protocol predefined. Response data extracted from the memory unit 110 is generated as a radio frequency signal for transmission to the RFID reader through the antenna unit 130, and the generated radio frequency signal is generated by the antenna unit ( 130 to the RFID reader, wherein the memory map comprises at least one RFID code area (eg, TID and / or EPC, etc.), and / or at least one user data area, and / or It is preferable to include a reserved area (Reserved).

Those skilled in the art to which the present invention pertains include preferred technical features of the receiver 115 having a radio frequency demodulation function and preferred technical features of the transmitter 120 having a radio frequency modulation function. Since it is familiar with and / or can be easily inferred, the detailed description thereof will be omitted for convenience.

The memory unit 110 is a generic term for a nonvolatile memory device included in the RFID tag 100, and provides a read function by the controller 105 and / or a read / write function by the controller 105. When the memory provides only a read function by the controller 105, the memory includes a ROM (Read Only Memory) memory element, and the memory is read / write by the controller 105. In the case of providing the function, the write once read many (WORM) and / or write many (WM) memory devices are included.

In addition, the memory unit 110 may respond to at least one response from the RFID tag 100 to a predetermined RFID reader according to the RFID operation procedure on a memory map corresponding to at least one RFID standard. And store the RFID information including the data.

According to an embodiment of the present invention, the response data includes an RFID code including at least one code system of an electronic product code (EPC) system and / or an ISO / IEC 15963 code system, and / or a UID system. It is preferable to make.

According to another exemplary embodiment of the present invention, the response data may include an RFID code including a user defined code system corresponding to an application field of the RFID tag 100, in addition to the RFID code including the code system. It is preferable to comprise.

When the controller 105 is provided with a program execution function, the memory unit 110 stores at least one or more program codes (and / or program data) executed through the controller 105.

According to an embodiment of the present invention, the program code is preferably provided with a function of reading a digital signal received corresponding to at least one or more RFID communication protocols through the receiving unit 115, and also corresponds to the program code. Preferably, the program data includes at least one or more of the referenced data for reading the digital signal.

In addition, the program code is preferably provided with a function for verifying the validity of a digital signal received in response to at least one or more RFID communication protocols through the receiving unit 115 (for example, a function of checking a checksum). Do.

In addition, the program code is a state of the RFID tag 100 based on a power supply state of the RFID tag 100 and / or a digital signal received corresponding to at least one or more RFID communication protocols through the receiving unit 115. (E.g., READY, ARBITRATE, REPLY, ACKNOWLEDGED, OPEN, SECURED, KILLED, etc.) is preferably provided.

The program code may be configured to extract an RFID code corresponding to at least one response data to be responded to the RFID reader among the RFID information on the memory map, and / or at least one record data received from the RFID reader. It is preferable to have a function of recording in a specific data area on the memory map.

According to the present invention, a function for authenticating the RFID reader (or terminal) 300 to at least one or more storage areas of a user data area and / or a spare area on a memory map defined in the memory unit 110 is provided. The RFID reader (or terminal) authentication information and a predetermined secret key are stored.

According to the embodiment of the present invention, the RFID reader (or terminal) authentication information is information shared between the RFID reader (or terminal) 300 and the RFID tag 100, and the RFID reader (or terminal) ( And at least one or more of a serial number of 300 and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader.

An RFID reader (or terminal) including at least one of a serial number of the RFID reader (or terminal) 300 and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader ) Authentication data received from the RFID reader (or terminal) 300 to the RFID tag 100 in accordance with the authentication information is a predetermined secret key (and / or) provided in the RFID reader (or terminal) 300 Random number), and the memory unit 110 stores a predetermined secret key for decrypting the encrypted authentication data.

The controller 105 controls a function defined in the RFID tag 100 according to an operation procedure of the RFID tag 100 corresponding to at least one or more RFID standards, and specifically controls the receiver 115. Thereby converting a radio frequency signal received from a predetermined RFID reader to the antenna unit 130 into a predetermined digital signal corresponding to at least one or more RFID communication protocols in the receiving unit 115, and reading the digital signal to read the digital signal. A function for performing a control function corresponding to the signal, and / or generating a predetermined response signal corresponding to the received digital signal, and / or generating a predetermined response signal from the memory unit 110 Extracting data, and / or controlling the transmitter 120 to convert the generated response signal into a predetermined radio frequency signal. It characterized by providing a ring, such as the ability to transmit to the RFID reader through the antenna 130.

According to one embodiment of the invention, the control unit 105 is preferably provided with a predetermined control logic (Control Logic) for performing the above control function.

According to another exemplary embodiment of the present invention, the control unit 105 preferably includes a predetermined program execution function for performing the control function as described above, and the control unit 105 includes at least one processor. And / or have at least one or more processors and execution memory (eg, random access memory (RAM), etc.).

According to the present invention, the controller 105 provides a function for authenticating the RFID reader (or terminal) 300 from the RFID reader through the receiver 115 in correspondence with at least one RFID communication protocol. Any authentication protocol comprising at least one or more authentication scheme information and encrypted authentication data (and a predetermined random number used to encrypt the authentication data) to authenticate the RFID reader (or terminal) 300 from a command received. Extracting data, generating a decryption key for decrypting the encrypted authentication data through the extracted random number and the secret key stored in the memory unit 110, and generating the decryption key through the generated decryption key; A function of decrypting encrypted authentication data and the RFID reader (or terminal) authentication information according to the authentication method information. Comparing the decrypted authentication data and / or performing a bit operation to authenticate the validity of the RFID reader (or terminal) 300, and as a result of the validity authentication, of the RFID reader (or terminal) 300 If the validity is verified, the operation mode of the RFID tag 100 is switched to a mode for activating the function of the RFID tag 100, and if the validity of the RFID reader (or terminal) 300 is not authenticated, the RFID And a function of switching the operation mode of the tag 100 to a mode for deactivating the function of the RFID tag 100.

Here, the receiver 115 receives at least one or more authentication scheme information and predetermined authentication protocol data including encrypted authentication data (and a predetermined random number used to encrypt the authentication data) from the RFID reader. The command may be a command that is initially transmitted from the RFID reader (or terminal) 300 to the RFID tag 100, and / or the at least one RFID tag 100 is transmitted from the RFID reader (or terminal) 300. Characterized in that it comprises at least one or more of the commands to transmit to the at least one RFID tag 100 to select.

According to another embodiment of the present invention, the encrypted authentication data included in the authentication protocol data may be encrypted through a predetermined secret key provided in the RFID reader (or terminal) 300, in this case the authentication In the command including protocol data, a predetermined random number used to encrypt the authentication data may be omitted, and the present invention is not limited thereto.

According to the exemplary embodiment of the present invention, when the encrypted authentication data included in the authentication protocol data included in the authentication protocol data included in the command received from the RFID reader is decrypted, the decrypted authentication data. And information defining a method of authenticating the validity of the RFID reader (or terminal) 300 in comparison with the RFID reader (or terminal) authentication information stored in the memory unit 110 included in the RFID tag 100. The authentication method is a method of authenticating the validity of the RFID reader (or terminal) 300 when the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit 110 match one-to-one, and / Or the RFID reader (or terminal) 300 when the decrypted authentication data and a part of the RFID reader (or terminal) authentication information stored in the memory unit 110 match. And / or at least one bit operation (eg, AND, OR, XOR, ...) in the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit 110. Etc.), when the calculation result converges to a specific value, it is preferable to include at least one or more of a method for authenticating the validity of the RFID reader (or terminal) 300.

In the above authentication method, when the RFID tag 100 is provided with an RFID code corresponding to at least two or more response data, the RFID tag 100 corresponds to different response data according to each authentication method. It is preferable to further comprise a function for responding the RFID code to the RFID reader (or terminal) 300, whereby the present invention is not limited.

Those skilled in the art to which the present invention pertains, various implementation methods for comparing and authenticating the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit 110 in addition to the authentication method described above. And / or an RFID code corresponding to at least two response data is provided in the RFID tag 100, the RFID reader corresponding to different response data according to each authentication scheme is provided with the RFID reader (or terminal) ( 300 may be inferred, and the present invention includes all the inferred implementation methods.

According to the exemplary embodiment of the present invention, the decrypted authentication data and / or the RFID reader (or terminal) authentication information stored in the memory unit 110 may include the RFID reader (or terminal) 300 and the RFID tag ( At least one of the serial number of the RFID reader (or terminal) 300 and / or the family ID information defined between the RFID reader (or terminal) 300 and the RFID reader as information shared by 100. It is preferable to include the above.

According to an embodiment of the present invention, when the decrypted authentication data includes the serial number of the RFID reader (or terminal) 300, the serial number of the RFID reader (or terminal) 300 is a specific RFID reader ( Or terminal) 300 includes information corresponding to a specific RFID reader model manufactured by the manufacturer and information uniquely defined in the RFID reader model manufactured by the RFID reader (or terminal) 300 manufacturer.

Here, when the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit 110 match one-to-one, the method of authenticating the validity of the RFID reader (or terminal) 300, the The RFID reader may include authenticating to operate normally in only one RFID reader (or terminal) 300 corresponding to a specific RFID reader model manufactured by a specific RFID reader (or terminal) 300 manufacturer. The authentication method is applied when a high level of security is required by a specific RFID reader (or terminal) 300 such as an access control system.

In addition, when the decrypted authentication data and a part of the RFID reader (or terminal) authentication information stored in the memory unit 110 match, the method of authenticating the validity of the RFID reader (or terminal) 300, the The RFID reader is authenticated to operate normally only in at least one RFID reader (or terminal) 300 corresponding to a specific RFID reader model manufactured by a specific RFID reader (or terminal) 300 manufacturer. The authentication method is applied when a high degree of security is required by the plurality of RFID readers (or terminals) 300 such as product distribution management.

In addition, when the decrypted authentication data and a part of the RFID reader (or terminal) authentication information stored in the memory unit 110 match, the method of authenticating the validity of the RFID reader (or terminal) 300, at least Bit values common to serial numbers of at least one RFID reader defined (or approved) to operate normally with the RFID tag 100 among at least one RFID reader manufactured by one or more RFID readers (or terminals) 300 manufacturers After inserting, by checking the bit value included in the serial number through at least one or more bit operations in the RFID tag 100, the RFID tag 100 corresponding to the serial number containing the bit value It is made to include the authentication to operate normally only in the reader (or terminal) 300, this authentication method is a plurality of RFID readers (and It is applied to the case that requires a high security by the terminal) 300.

According to another embodiment of the present invention, when the decrypted authentication data includes predetermined family ID information, the family ID information is provided in at least one RFID reader and the RFID tag 100 that are mutually approved, respectively. The above ID information is included, wherein the family ID information is user-defined ID information defined for authenticating the RFID reader (or terminal) 300 according to the present invention, and / or the RFID tag 100 It is possible to include ID information corresponding to some of the RFID codes (eg, EPC, and / or ISO / IEC 15963 codes, and / or U-codes) included in the C-code.

Here, when the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit 110 match one-to-one, the method of authenticating the validity of the RFID reader (or terminal) 300, the When the family ID information provided in the RFID reader (or terminal) 300 and the family ID defined in the RFID tag 100 match, the RFID tag 100 is authenticated to operate normally. For this authentication method, the RFID reader (or terminal) 300 and the RFID tag 100 preferably have predetermined user-defined ID information mutually approved.

In addition, when the decrypted authentication data and a part of the RFID reader (or terminal) authentication information stored in the memory unit 110 match, the method of authenticating the validity of the RFID reader (or terminal) 300, the If the family ID information included in the RFID reader (or terminal) 300 and the family ID information defined in the RFID tag 100 partially match, including authenticating the RFID tag 100 to operate normally. For this authentication method, the RFID reader (or terminal) 300 preferably knows a part of the family ID information provided in the RFID tag 100.

For example, in the authentication scheme as described above, when the RFID tag 100 includes family ID information corresponding to predetermined user-defined ID information, the RFID reader (or terminal) 300 includes at least one RFID tag. It is preferable to know common ID information among the family ID information provided in the 100 in advance.

In addition, in the above authentication method, some code information of an RFID code (eg, EPC, and / or ISO / IEC 15963 code, and / or U-code) provided in the RFID tag 100 may be read. When used as family ID information, the RFID reader (or terminal) 300 is code information used as the family ID information among the RFID codes included in the RFID tag 100 (for example, the RFID code is EPC, In the case where the company code (EPC Manager) and product code (Object Class) of the EPC are defined to be used as a family ID, code information including the company code and the product code) may be known in advance.

In addition, at least one bit operation (eg, AND, OR, XOR, ...) is performed on the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit 110. If the result converges to a specific value, the method of authenticating the validity of the RFID reader (or terminal) 300,

A predetermined family ID provided in the RFID tag 100 in at least one or more RFID readers (or terminals) 300 that are defined (or approved) to operate normally with the RFID tag 100 among at least one RFID reader. Inserting family ID information including information and a common bit value converging to a specific value as a result of at least one bit operation, and then checking the family ID information through at least one bit operation in the RFID tag 100, thereby The RFID tag 100 is authenticated to operate normally only in the RFID reader (or terminal) 300 having the identified family ID information, and for the authentication scheme, the RFID reader (or terminal) ( 300 and the RFID tag 100 have predetermined user-defined ID information that is mutually approved, and / or the RFID tag at the RFID reader (or terminal) 300 It is preferable to know a part of family ID information which is provided in 100 already.

At least one authentication method information for the controller 105 to authenticate the RFID reader (or terminal) 300 from a command received from the RFID reader through the receiver 115 in response to at least one RFID communication protocol. And extracting predetermined authentication protocol data including encrypted authentication data (and a predetermined random number used to encrypt the authentication data) from the RFID reader through the receiving unit 115 in the control unit 105. Reads a command structure defined to include the authentication protocol data among at least one command received, so that the received command includes at least one or more authentication scheme information and encrypted authentication data (and any predetermined data used to encrypt the authentication data). Contains certain authentication protocol data (including random numbers) It is preferable to further comprise a function for performing, and as a result of the verification, a predetermined authentication including at least one or more authentication method information and encrypted authentication data (and a predetermined random number used to encrypt the authentication data) in the received command When protocol data is included, it is preferable to extract predetermined authentication protocol data including at least one or more authentication scheme information and encrypted authentication data (and a predetermined random number used to encrypt the authentication data) from the command structure. .

The control unit 105 compares the encrypted authentication data with the RFID reader (or terminal) authentication information stored in the memory unit 110 according to the authentication method information included in the authentication protocol data. The function of authenticating the validity of 300 includes at least one or more authentication scheme information, encrypted authentication data, and a predetermined random number used to encrypt the authentication data from the received command according to another embodiment of the present invention. When the predetermined authentication protocol data is extracted, the control unit 105 extracts the secret key from the memory unit 110, decrypts the encrypted authentication data through the extracted secret key and a random number, and then Compare the decrypted authentication data with the RFID reader (or terminal) authentication information stored in the memory unit 110 according to an authentication method. Or, and / or it comprises performing a predetermined number of bits calculated for the RFID reader (or terminal) authentication information stored in the encrypted authentication data and the memory unit 110 included in the authentication protocol data.

In addition, the control unit 105 compares the encrypted authentication data with the RFID reader (or terminal) authentication information stored in the memory unit 110 according to the authentication method information included in the authentication protocol data. The function of authenticating the validity of the terminal 300 is, if predetermined authentication protocol data including at least one authentication method information and encrypted authentication data is extracted from the received command according to another embodiment of the present invention, The controller 105 extracts the secret key from the memory unit 110, decrypts the encrypted authentication data through the secret key, and then decrypts the decrypted authentication data and the memory unit according to the authentication scheme. Compare the RFID reader (or terminal) authentication information stored in 110 and / or the encryption included in the authentication protocol data. Stored in the authentication data and the memory unit 110 is caused by the RFID reader (or terminal) it includes performing the predetermined bitwise operation on the authentication information.

As a result of the validity authentication, when the validity of the RFID reader (or terminal) 300 is authenticated, the operation mode of the RFID tag 100 is set to a mode for activating the function of the RFID tag 100. The switching function may be performed such that the control unit 105 performs an operation procedure defined in the RFID tag 100 in response to at least one or more other commands received from the RFID reader after the command including the authentication protocol data. It includes the transition of the state of the RFID tag 100.

Alternatively, when the validity authentication result indicates that the validity of the RFID reader (or terminal) 300 is not authenticated, the operation mode of the RFID tag 100 is deactivated. The function of switching to the mode to cause the control unit 105 to change the state of the RFID tag 100 so that the controller 105 does not respond to all kinds of other commands received from the RFID reader after the command including the authentication protocol data. It involves transitioning.

2 illustrates a memory structure of an RFID tag 100 for storing RFID reader (or terminal) authentication information for providing a function of authenticating an RFID reader (or terminal) 300 according to an embodiment of the present invention. Drawing.

More specifically, FIG. 2 stores RFID reader (or terminal) authentication information to provide a function of authenticating the RFID reader (or terminal) 300 on the RFID tag 100 function configuration shown in FIG. As an implementation method for a memory map that conforms to the ISO / IEC 18000-6c standard, a person of ordinary skill in the art to which the present invention pertains refers to the RFID reader (or terminal) by referring to and / or modifying the present invention. Although various memory structures for storing RFID reader (or terminal) authentication information for providing a function of authenticating 300 may be inferred, the present invention includes all the inferred implementation methods, and is shown in FIG. It is not limited to the implemented method.

For example, those skilled in the art to which the present invention pertains may refer to the RFID reader on a memory conforming to another RFID standard in addition to the memory conforming to the ISO / IEC 18000-6c standard by referring to and / or modifying the drawing 2. Alternatively, various memory structures for storing RFID reader (or terminal) authentication information may be inferred in order to provide a function of authenticating the terminal 300, and the present invention includes all of the inferred memory structures. The present invention is not limited to a memory structure conforming to the ISO / IEC 18000-6c standard shown in FIG.

Referring to FIG. 2, in order to provide a function of authenticating the RFID reader (or terminal) 300, a memory for storing RFID reader (or terminal) authentication information includes a user data area Bank 11 and a TID area ( Bank 10), an EPC area Bank 01, and a spare area Bank 00, each of which is assigned a predetermined memory bank.

Here, the user data area corresponds to a storage area in which at least one user data corresponding to the application field of the RFID tag 100 is stored.

In addition, the TID area is an area for storing an 8-bit ISO / IEC 15963 allocation class ID (eg, “11100010” for EPCglobal, etc.), and the EPC area is an area for storing an RFID code conforming to the EPC code system. The CRC-16 checksum is stored in the memory addresses 0x00 to 0x0F, the protocol control bits are stored in the memory addresses 0x10 to 0x1F, and the EPC corresponding to at least one EPC standard is stored after the memory address 0x20.

In addition, the spare area is a memory area in which read / write is locked, and referring to the ISO / IEC 18000-6c standard, memory addresses 0x00 to 0x0F kill password are stored and memory addresses 0x20 to 0x3F are accessed. Although the password is defined as being stored, the password may be omitted or replaced with other data, and the spare area itself may be omitted according to the intention of a person skilled in the art, and the present invention is not limited thereto.

According to an embodiment of the present invention, the RFID reader (or terminal) authentication information for providing a function of authenticating the RFID reader (or terminal) 300 is preferably stored in a user data area on the memory map. The RFID reader (or terminal) authentication information for providing a function of authenticating the RFID reader (or terminal) 300 according to the intention of a person skilled in the art (or when predetermined user data is previously stored in the user data area). May be stored in the spare area on the memory map, and the present invention is not limited thereto.

Here, the RFID reader (or terminal) authentication information is the RFID reader (or terminal) authentication information is information shared between the RFID reader (or terminal) 300 and the RFID tag 100, the RFID reader ( Or terminal) 300 and / or at least one of family ID information defined between the RFID reader (or terminal) 300 and the RFID reader.

According to an embodiment of the present invention, the RFID tag 100 is received from the RFID reader through the receiving unit 115 corresponding to at least one RFID communication protocol based on the RFID reader (or terminal) authentication information. Extract predetermined authentication protocol data including at least one or more authentication scheme information and encrypted authentication data (and a predetermined random number used to encrypt the authentication data) from the terminal to authenticate the RFID reader (or terminal) 300 from the And a decryption key for decrypting the encrypted authentication data through the extracted random number and the secret key stored in the memory unit 110, and the encrypted authentication data through the generated decryption key. Decoding through the RFID reader (or terminal) authentication information according to the authentication method and the authentication scheme information. Comparing the encrypted authentication data and / or performing bit operation to authenticate the validity of the RFID reader (or terminal) 300, and the result of the validity authentication of the RFID reader (or terminal) 300 If the validity is authenticated, the operation mode of the RFID tag 100 is switched to a mode for activating the function of the RFID tag 100, and if the validity of the RFID reader (or terminal) 300 is not authenticated, It is preferable to provide a function of authenticating the RFID reader (or terminal) 300 including at least one function of switching the operation mode of the RFID tag 100 to a mode for deactivating the function of the RFID tag 100. Do.

3 is a diagram illustrating a functional configuration of an RFID terminal 300 for authenticating an RFID reader (or terminal) 300 in an RFID tag 100 according to an exemplary embodiment of the present invention.

In more detail, FIG. 3 illustrates a function configuration for authenticating an RFID reader (or terminal) 300 in the RFID tag 100 for convenience in an RFID terminal 300 having a predetermined RFID reader externally. As shown in the drawings, those skilled in the art to which the present invention pertains, various RFID terminals for authenticating the RFID reader (or terminal) 300 in the RFID tag 100 with reference to this figure 3 (300) (for example, an RFID terminal 300 having a built-in RFID reader) facilitates an implementation method provided with a functional configuration for authenticating the RFID reader (or terminal) 300 in the RFID tag 100. It may be inferred, and the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

For example, a function configuration for authenticating the RFID reader (or terminal) 300 in the RFID tag 100 may include a predetermined memory and information processing function in the RFID reader (eg, the RFID reader) in addition to the RFID terminal 300. It may be provided in the case), the present invention comprises all of these various implementation methods.

Referring to FIG. 3, the RFID terminal 300 basically includes a control unit 305, a memory unit 335, an RFID interface 310 unit, a screen output unit 315, a key input unit 320, and a communication unit 325. It is made, including, and comprises a power supply unit 330 for supplying a predetermined power to the RFID terminal 300.

The control unit 305 controls the overall operation of the RFID terminal 300 in the functional configuration, manages the flow of information or data between each component, and the RFID tag (100) in the RFID reader (or terminal) 300 In order to authenticate, it is characterized in that the function of the components provided in the RFID terminal 300 is controlled.

The controller 305 may include at least one or more processors including a central processing unit (CPU) / micro processing unit (MPU), an execution memory (for example, a register and / or a random access memory (RAM)) and predetermined data in hardware. It is characterized in that it comprises a bus (BUS) for inputting and outputting, and the predetermined recording to perform a characteristic function for authenticating the RFID reader (or terminal) 300 in the RFID tag 100 by software. A predetermined program routine and / or program data loaded from the medium into the execution memory and computed by the processor (hence, an RFID reader (or terminal) in the RFID tag 100) An RFID reader (or terminal) 300 from a predetermined program and / or the RFID tag 100 recorded on a recording medium provided in the RFID terminal 300 to authenticate 300. In order to authenticate also shown as being provided in the component is the controller 305 for processing the functional configuration included in the RFID terminal 300 in software.) And is characterized in that formed.

The memory unit 335 is input and output when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the RFID terminal 300 is performed. General term of non-volatile memory for storing information or data), at least one of which includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and / or Flash Memory (FM) and / or Hard Disk Drive (HDD) in hardware. It includes the above storage means, the predetermined program routine and the program data (for example, data input or output for the program routine to perform a predetermined function) is required for the control unit 305 to perform a predetermined control function ) Is stored.

According to an embodiment of the present invention, the memory unit 335 stores authentication data defined to be shared with at least one RFID tag 100 having a function of authenticating the RFID reader (or terminal) 300. Wherein the authentication data is at least one of a serial number of the RFID reader (or terminal) 300 and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader. It is preferable to include the above.

In addition, the memory unit 335 stores a predetermined secret key for encrypting the authentication data.

The screen output unit 315 is performed by the controller 305 in the process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. Output at least one information or data that is predefined or defined in real time through a predefined screen interface to be output to a predetermined screen output device including a liquid crystal display (LCD) and / or a cathode ray tube (CRT). Characterized in that, the screen output unit 315 performs the function of the screen output means provided in the RFID terminal 300 in conjunction with the screen output device.

The screen output unit 315 uses the key input unit 320 in a process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. At least one key data input through the at least one and / or at least one extracted from the memory unit 335 to allow the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. The above information (or data) and / or at least one or more information transmitted and received through the communication unit 325 in order for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100 ( Or data) and / or information (or data) corresponding to a result of a predetermined operation performed by the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. Output to the output device Shall be.

The key input unit 320 may include at least one number key in a process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. And / or at least one information or data that is predefined or is defined in real time to be input from a predetermined key input device including a character key and / or a function key. The key input unit 320 performs the function of the key input means provided in the RFID terminal 300 in conjunction with the key input device.

The communication unit 325 may perform at least one server (or device) on the network in the process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. And a communication channel, wherein the communication channel is a network communication channel connecting the RFID terminal 300 and a server (or device) on the network through at least one wired or wireless network, and / or the RFID terminal 300. ) And a cable communication channel for connecting a predetermined cable communication terminal (or server) through a predetermined cable, and / or short-range communication for connecting the RFID terminal 300 and a predetermined local area device through at least one or more short-range communication means. It characterized in that it comprises at least one channel.

According to an embodiment of the present invention, the network communication channel may be configured according to TCP / IP according to a network type connecting the RFID terminal 300 and the server (or device) and / or a communication protocol defined in the network. Based on Transmission Control Protocol / Internet Protocol (Internet Protocol) -based Internet network, No.7 network, wired network communication channel including at least one private network (eg, value-added communication network or financial common network), and / or code division multiple access (CDMA) based And a wireless network communication channel including at least one of a mobile communication network, a wireless data communication network, and a portable internet network.

In addition, the cable communication channel is RS (Recommended Standard) -232c, RS-485, USB (Universal Serial Bus) according to the cable type and communication protocol connecting the RFID terminal 300 and the cable communication terminal (or server) And a wireless network communication channel including at least one serial communication channel including at least one, and / or a parallel communication channel such as LPT.

In addition, the short-range communication channel according to the type and communication protocol of the short-range communication means connecting the RFID terminal 300 and the cable communication terminal (or server) Infrared (Infrared Ray) communication, RF (Radio Frequency) communication, Bluetooth It includes a short-range wireless communication channel including at least one of (BlueTooth), Wireless LAN (Wireless LAN), Wi-Fi (Wi-Fi), UWB (Ultra Wide Band system).

The RFID interface 310 interfaces with a predetermined RFID reader, and receives the RFID information received by the RFID reader from at least one RFID tag 100 to the RFID terminal 300, and / or the The RFID terminal 300 provides at least one or more RFID related commands and / or information to be provided to the RFID tag 100 to the RFID reader.

According to an embodiment of the present invention, when the RFID reader is externally provided as shown in FIG. 3, the RFID interface 310 may include at least one or more of the network communication channel and / or the cable communication channel and / or the short range communication channel. It is preferable to interface with the RFID reader through a communication channel.

According to another embodiment of the present invention, when the RFID reader is embedded in the RFID terminal 300, the RFID interface 310 may include a predetermined data bus and / or a printed circuit board (PCB) circuit. It is preferable to interface with the RFID reader through.

The RFID reader emits and / or accepts radio waves of a specific frequency to the RFID tag 100 in association with the electronic circuit, and an electronic circuit that emits or receives a predetermined radio wave toward at least one RFID tag 100. An antenna and a microcontroller for extracting and checking predetermined data by reading a signal received from the RFID tag 100, and the functional configuration of the RFID reader shown in FIG. Regarding an RFID reader which interacts with at least one RFID tag 100 through a predetermined air interface defined in ISO / IEC 18000 series and interworks with the RFID terminal 300 through the RFID interface 310, It will be apparent that the functional configuration of the RFID reader for achieving the present invention is not limited to the case of FIG.

Referring to FIG. 3, the RFID reader transmits and receives radio frequency signals of a predetermined frequency band (or supplies an energy source (power) to the RFID tag 100), and An interface unit 385 for interfacing the predetermined information or data with the RFID terminal 300, and converts the predetermined information or data provided from the RIFD terminal through the interface unit 385 into a radio frequency signal to convert the antenna unit 300 into a radio frequency signal. A transmitter 380 transmitting through 370 and a radio frequency signal received through the antenna unit 370 are converted into a predetermined digital signal and provided to the RFID terminal 300 through the interface unit 385. It comprises a receiving unit 375 and a power supply unit 395 for supplying a predetermined power required to operate the RFID reader.

According to an exemplary embodiment of the present invention, the power supply unit 395 may receive a predetermined power from the power supply unit 330 of the RFID terminal 300 or may receive a separate power from the RFID terminal 300. It is possible.

When the predetermined RFID tag 100 enters the radio frequency area around the RFID reader (or close to the radio frequency area), the antenna unit 370 uses the predetermined air interface defined in the ISO / IEC 18000 series. Transmitting a signal including a predetermined activation signal and / or information (or data) through the radio frequency signal transmitted from the RFID reader, and / or is transmitted to the RFID tag 100 by the transmitter 380 And transmits a predetermined radio frequency signal and / or receives a radio frequency signal from the RFID tag 100.

The interface unit 385 receives predetermined information or data to be included in the radio frequency signal transmitted from the RFID terminal 300 to the RFID tag 100 through the antenna unit 370, and / or the antenna It performs an interface function for providing the RFID terminal 300 with information or data corresponding to a predetermined digital signal included in the radio frequency signal received from the RFID tag 100 through the unit 370 do.

According to an exemplary embodiment of the present invention, when the RFID reader interfaces with the RFID terminal 300 as an external type as shown in FIG. 3, the interface unit 385 may include the network communication channel and / or the cable communication channel. Or interfacing with the RFID interface 310 of the RFID terminal 300 through at least one communication channel among short-range communication channels. As another embodiment, the RFID reader may be internally interfaced with the RFID terminal 300. In this case, the interface unit 385 preferably includes a data bus and / or a printed circuit board (PCB) circuit.

The transmitting unit 380 is a modulator for converting a predetermined radio frequency signal for transmitting a predetermined digital signal to the RFID tag 100 through the antenna unit 370, and the interface unit 385. When predetermined information or data to be provided from the RFID terminal 300 to the RFID tag 100 is provided through the RFID terminal 300, or determined to transmit a predetermined signal to the RFID tag 100 by an internal logic circuit, The digital signal corresponding to the information or data and / or the digital signal corresponding to the determination result may be converted into a predetermined radio frequency signal and transmitted through the antenna unit 370.

The receiver 375 is a demodulator for converting a radio frequency signal received through the antenna unit 370 into a predetermined digital signal, and demodulates a radio frequency signal received through the antenna unit 370. Generates a digital signal, and provides predetermined information or data corresponding to the digital signal to the RFID terminal 300 through the interface unit 385.

Referring to FIG. 3, the RFID terminal 300 includes a serial number of the RFID reader (or terminal) 300 from the memory unit 335, and / or the RFID reader (or terminal) 300 and the RFID. An information extraction unit 340 for extracting authentication data including at least one or more of family ID information defined between readers and a predetermined secret key, and a random number generation unit for generating a predetermined random number to be used to encrypt the authentication data. An encryption unit 350 generating a predetermined encryption key for encrypting the authentication data using the generated random number and the extracted secret key, and encrypting the authentication data using the encryption key; A command generation unit 355 for generating a command including authentication protocol data including the encrypted authentication data and a random number and predetermined authentication method information; It is characterized in that it comprises a command transmission unit 360 for transmitting to at least one RFID tag 100 by using the RFID reader through e.

When the information extracting unit 340 transmits a command including the authentication protocol data among the commands transmitted from the RFID reader (or terminal) 300 to at least one RFID tag 100, the memory, the memory At least one or more of the serial number of the RFID reader (or terminal) 300 from the unit 335, and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader. Characterized in that extracting the authentication data, and provides the extracted authentication data to the encryption unit 350.

In addition, the information extraction unit 340 extracts a predetermined secret key from the memory unit 335, and provides the extracted secret key to the encryption unit 350.

The random number generator 345 generates a predetermined random number for encrypting the extracted authentication data, and provides the generated random number to the encryption unit 350 and the command generator 355.

Those skilled in the art to which the present invention pertains, since the random number generating unit 345 will be familiar with the technical features for generating the random number, a detailed description thereof will be omitted for convenience.

Thereafter, the encryption unit 350 generates a predetermined encryption key including the secret key extracted from the memory unit 335 and the random number generated from the random number generation unit 345 and through the encryption key. And encrypting the authentication data, and providing the encrypted authentication data to the command generator 355.

Those of ordinary skill in the art to which the present invention pertains can provide the authentication data according to the technical characteristics of generating a predetermined encryption key through the secret key and the random number and at least one encryption algorithm through the encryption key. Since you will be familiar with the technical features of encryption, a detailed description thereof will be omitted for convenience.

The command generation unit 355 is a serial number of the RFID reader (or terminal) 300 from the memory unit 335 by the information extraction unit 340, and / or the RFID reader (or terminal) 300 ) And when the authentication data including at least one of the family ID information defined between the RFID reader is encrypted, predetermined random number and predetermined authentication method information used to encrypt the encrypted authentication data and the authentication data. And generating a command including the authentication protocol data, wherein the command including the authentication protocol data is generated from the RFID reader (or terminal) 300 to the RFID tag 100. Command to initially transmit, and / or the at least one RFID tag 100 to select at least one RFID tag 100 from the RFID reader (or terminal) 300. It is preferable to include at least one or more of the commands to transmit.

When the command transmitter 360 generates a command including the authentication protocol data by the command generator 355, the command transmitter 360 provides the generated command to the RFID reader through the RFID interface. In the above, it is characterized in that to transmit a command including the authentication protocol data to at least one RFID tag (100).

4 is a diagram illustrating an RFID command structure including authentication protocol data according to an embodiment of the present invention.

In more detail, FIG. 4 shows the RFID reader corresponding to the ISO / IEC 18000-6c standard among RFID commands transmitted from the RFID reader (or terminal) 300 illustrated in FIG. 3 to at least one RFID tag 100. The present invention relates to an RFID command structure including authentication protocol data including predetermined authentication method information and authentication data in a SELECT command initially transmitted from (or a terminal) to at least one RFID tag 100. Those skilled in the art may refer to and / or modify this drawing to modify the RFID wireless communication in addition to various RFID command structures including the authentication protocol data corresponding to the ISO / IEC 18000-6c standard. It is possible to infer various RFID command structures including the authentication protocol data corresponding to the RFID command structure corresponding to the standard. It includes all the implementation methods previously inferred, and the present invention is not limited to the implementation method shown in FIG.

However, the command including the authentication protocol data is the first command among the RFID commands transmitted from the RFID reader (or terminal) 300 to at least one RFID tag 100, and / or at least one or more RFID commands. Preferably, the tag 100 includes at least one or more commands for selecting the tag 100.

Referring to FIG. 4 according to an embodiment of the present invention, a SELECT command initially transmitted from the RFID reader (or terminal) 300 to at least one RFID tag 100 corresponding to the ISO / IEC 18000-6c standard may be used. , Command item, Target item, Action item, Action item, Memory bank item, Pointer item corresponding to mask start address, Length item corresponding to mask length, It includes a Mask item, a Truncate item, and a 16-bit checksum (CRC-16) item corresponding to a mask value provided with the mask length at a mask start address, which is generally known in the art. Those skilled in the art will be able to easily infer technical features corresponding to the above-mentioned items with reference to the ISO / IEC 18000-6c standard, and thus a detailed description thereof will be omitted for convenience.

Referring to FIG. 4, a 3-bit authentication scheme item, a 64-bit encrypted authentication data item, and a 64-bit random number item are provided between the action item and the memory bank item of the SELECT command.

The 3-bit authentication scheme item included in the SELECT command may include the RFID tag (1) using any one of eight authentication schemes for the decrypted authentication data when the encrypted authentication data is decrypted. And information defining a method of authenticating through the RFID reader (or terminal) authentication information provided at 100).

According to an embodiment of the present invention, when the encrypted authentication data included in the SELECT command is decrypted, the authentication method information includes an RFID reader (or terminal) provided in the decrypted authentication data and the RFID tag 100. Information defining a method of authenticating the validity of the RFID reader (or terminal) 300 in comparison with the authentication information, wherein the authentication method includes the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit. In case of one-to-one correspondence, a method of authenticating the validity of the RFID reader (or terminal) 300 and / or a part of the decrypted authentication data and RFID reader (or terminal) authentication information stored in the memory unit (eg, The upper 8 bits, the lower 8 bits, etc.), the method of authenticating the validity of the RFID reader (or terminal) 300, and / or the decrypted authentication data When at least one bit operation (eg, AND, OR, XOR, ..., etc.) is performed on the RFID reader (or terminal) authentication information stored in the memory unit, the RFID result converges to a specific value. It is preferable to include at least one or more of the method for authenticating the validity of the reader (or terminal) 300.

In addition, the 64-bit encrypted authentication data item is a serial number of the RFID reader (or terminal) 300 shown in Figure 3 and / or between the RFID reader (or terminal) 300 and the RFID reader. Any one of the defined family ID information is encrypted through a predetermined encryption key including a secret key provided in the RFID reader (or terminal) 300 and a random number dynamically generated in the RFID reader (or terminal) 300. The encrypted authentication data may be decrypted through a predetermined decryption key including a random number corresponding to the random number item and a predetermined secret key provided in the RFID tag 100.

According to the exemplary embodiment of the present invention, when the decrypted authentication data is authenticated through the RFID reader (or terminal) authentication information included in the RFID tag 100, the RFID tag 100 is the RFID tag 100. Is characterized in that switching to the operation mode for activating the function of the RFID tag 100, wherein the operation mode for activating the function of the RFID tag 100 from the RFID reader after the command shown in FIG. Transitioning the state of the RFID tag 100 to perform an operation procedure defined in the RFID tag 100 in response to at least one or more other commands received by the RFID tag 100.

Alternatively, when the decrypted authentication data is not authenticated through the RFID reader (or terminal) authentication information included in the RFID tag 100, the RFID tag 100 deactivates the function of the RFID tag 100. The operation mode for deactivating the function of the RFID tag 100 does not respond to all kinds of other commands received from the RFID reader after the command shown in FIG. And transitioning the state of the RFID tag 100 so as not to.

5 is a diagram illustrating a process of transmitting a command for authenticating the RFID reader (or terminal) 300 to the RFID tag 100 according to an exemplary embodiment of the present invention.

In more detail, FIG. 5 encrypts predetermined authentication method information, encrypted authentication data, and the authentication data in the RFID reader (or terminal) 300 shown in FIG. 3, like the RFID command shown in FIG. The present invention relates to a process of generating a SELECT command including authentication protocol data including a predetermined random number used and transmitting the same to at least one RFID tag 100. Referring to FIG. 5 and / or modified to generate a SELECT command including authentication protocol data in the RFID reader (or terminal) 300 in response to each RFID command, and transmit the same to at least one RFID tag 100. It will be possible to infer various implementation methods, but the present invention includes all of the inferred implementation methods, whereby the present invention is limited. Not.

Hereinafter, FIG. 5 illustrates a preferred embodiment of the present invention by considering that the RFID tag 100 shown in FIG. 1 is an active tag for convenience.

Referring to FIG. 5, at least one RFID tag 100 including the functional configuration shown in FIG. 1 is located within the radio frequency range of the RFID reader (or terminal) 300 shown in FIG. 3. When receiving a predetermined radio frequency signal transmitted from the 500 (500), the RFID tag 100 is the radio frequency signal by applying a predetermined battery power to each component provided in the RFID tag 100 by the RFID tag An initialization procedure for 100 is performed (505).

When the RFID tag 100 is initialized (510), the RFID reader (or terminal) 300 is a series of the RFID reader (or terminal) 300 from the predetermined memory unit 335 shown in FIG. Extract (515) authentication data including at least one or more of a number and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader and a predetermined secret key; A predetermined random number for the encryption processing of the authenticated data is generated (520).

Thereafter, the RFID reader (or terminal) 300 extracts a predetermined encryption key based on the generated random number and the extracted secret key (525), if the encryption key is extracted (530), the RFID The reader encrypts the authentication data through the generated encryption key (535).

If the authentication data is encrypted (540), the RFID reader dynamically generates random numbers to encrypt the authentication data and the authentication method information corresponding to the authentication data and the authentication data as shown in FIG. Generate a predetermined SELECT command including a (545), and the SELECT command via the radio frequency signal defined between the RFID reader (or terminal) 300 and the RFID tag 100, the RFID tag 100 It sends to (550).

Thereafter, the RFID receives a radio frequency signal including the SELECT command from the RFID reader (or terminal) 300 (520), and reads the SELECT command included in the radio frequency signal, thereby receiving the SELECT command. As shown in FIG. 4, it is checked whether authentication protocol data including the authentication method information and authentication data is included (525).

If the SELECT command does not include authentication protocol data including the authentication method information and authentication data (530), the RFID tag 100 switches the operation mode to the non-selected state (535).

If the RFID tag 100 needs to respond to the error information to the RFID reader (or terminal) 300 while the operation mode of the RFID tag 100 is switched to the non-selected state (540), the RFID tag 100 is Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (545).

On the other hand, if the SELECT command includes authentication protocol data including the authentication method information and authentication data as shown in FIG. 4 (530), the RFID tag 100 receives the authentication method information from the SELECT command. And extracting authentication protocol data including the authentication data (550), and comparing the authentication data with RFID reader (or terminal) authentication information provided in the RFID tag 100 according to the extracted authentication method information, And / or verifying the validity of the RFID reader (or terminal) 300 corresponding to the authentication data by performing a predetermined bit operation (555).

If validity of the RFID reader (or terminal) 300 is not authenticated as a result of the validation check corresponding to the authentication scheme (560), the RFID tag 100 switches the operation mode to a non-selected state (535). .

If the RFID tag 100 needs to respond to the error information to the RFID reader (or terminal) 300 while the operation mode of the RFID tag 100 is switched to the non-selected state (540), the RFID tag 100 is Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (545).

If the validity of the RFID reader (or terminal) 300 is verified as a result of the validation check corresponding to the authentication method (560), the RFID tag 100 switches the operation mode to a selected state (565), and then The RFID reader (or terminal) 300 provides an RFID service based on at least one or more operation procedures defined in the RFID tag 100.

6 is a diagram illustrating an authentication process of an RFID reader (or terminal) 300 according to an exemplary embodiment of the present invention.

In more detail, FIG. 6 illustrates that the RFID reader (or terminal) 300 shown in FIG. 3 generates a SELECT command such as the RFID command shown in FIG. 4 through the process shown in FIG. When transmitting to the RFID tag 100, the process of authenticating the validity of the RFID reader (or terminal) 300 through the authentication protocol data included in the SELECT command in the RFID tag 100 shown in FIG. For those of ordinary skill in the art to which the present invention pertains, the RFID reader (or terminal) in the RFID tag 100 corresponds to each RFID command by referring to and / or modifying the present invention. Various implementation methods for authenticating 300 may be inferred, but the present invention includes all the inferred implementation methods, whereby the present invention is not limited thereto.

Referring to FIG. 6, at least one RFID is generated by generating a SELECT command such as the RFID command illustrated in FIG. 4 through the process illustrated in FIG. 5 in the RFID reader (or terminal) 300 illustrated in FIG. 3. When transmitting to the tag 100, the RFID receives a radio frequency signal including the SELECT command from the RFID reader (or terminal) 300 (600) and reads the SELECT command included in the radio frequency signal. By doing so, it is checked whether the SELECT command includes authentication protocol data including the authentication method information, encrypted authentication data, and a predetermined random number used to encrypt the authentication data as shown in FIG. 4 (605). ).

If the SELECT command does not include authentication protocol data including the authentication method information, encrypted authentication data, and a predetermined random number used to encrypt the authentication data (610), the RFID tag 100 operates. The mode is switched to the non-select state (615).

If the RFID tag 100 needs to respond to the predetermined error information to the RFID reader (or terminal) 300 when the operation mode is switched to the non-selected state (620), the RFID tag 100 is the Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (625).

On the other hand, if the SELECT command includes authentication protocol data including the authentication method information, encrypted authentication data, and a predetermined random number used to encrypt the authentication data as shown in FIG. 4 (610), The RFID tag 100 extracts authentication protocol data including the authentication method information, the encrypted authentication data, and a predetermined random number used to encrypt the authentication data from the SELECT command (630), and the memory unit 110. Extract a predetermined secret key (635), and generate a predetermined decryption key for decrypting the encrypted authentication data through the extracted secret key and the random number (640).

Thereafter, the RFID tag 100 performs a decryption processing procedure on the encrypted authentication data through the generated decryption key (645). If the encrypted authentication data is decrypted (650), the RFID tag ( 100) compares the decrypted authentication data with RFID reader (or terminal) authentication information included in the RFID tag 100 according to the extracted authentication method information, and / or performs a predetermined bit operation. The validity of the RFID reader (or terminal) 300 corresponding to the encrypted authentication data is checked (655).

If validity of the RFID reader (or terminal) 300 is not authenticated (660), the RFID tag 100 switches the operation mode to an unselected state (615).

If the RFID tag 100 needs to respond to the predetermined error information to the RFID reader (or terminal) 300 when the operation mode is switched to the non-selected state (620), the RFID tag 100 is the Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (625).

If the validity of the RFID reader (or terminal) 300 is verified as a result of the verification corresponding to the authentication method (660), the RFID tag 100 switches the operation mode to a selected state (665), and then the The RFID reader (or terminal) 300 provides an RFID service based on at least one or more operation procedures defined in the RFID tag 100.

7 is a diagram illustrating a functional configuration of an RFID terminal 300 for authenticating an RFID reader (or terminal) 300 in an RFID tag 100 according to another exemplary embodiment of the present invention.

In more detail, FIG. 7 illustrates a function configuration for authenticating an RFID reader (or terminal) 300 in the RFID tag 100 for convenience in an RFID terminal 300 having a predetermined RFID reader externally. As shown in the drawings, those skilled in the art to which the present invention pertains, various RFID terminals for authenticating the RFID reader (or terminal) 300 in the RFID tag 100 with reference to this figure 7 (300) (for example, an RFID terminal 300 having a built-in RFID reader) facilitates an implementation method provided with a functional configuration for authenticating the RFID reader (or terminal) 300 in the RFID tag 100. It may be inferred, and the present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

For example, a function configuration for authenticating the RFID reader (or terminal) 300 in the RFID tag 100 may include a predetermined memory and information processing function in the RFID reader (eg, the RFID reader) in addition to the RFID terminal 300. It may be provided in the case), the present invention comprises all of these various implementation methods.

Referring to FIG. 7, the RFID terminal 300 basically includes a control unit 705, a memory unit 735, an RFID interface 710 unit, a screen output unit 715, a key input unit 720, and a communication unit 725. It is made, including, and comprises a power supply unit 730 for supplying a predetermined power to the RFID terminal 300.

The control unit 705 controls the overall operation of the RFID terminal 300 in terms of function configuration, manages the flow of information or data between components, and controls the RFID reader (or terminal) 300 in the RFID tag 100. In order to authenticate, it is characterized in that the function of the components provided in the RFID terminal 300 is controlled.

The controller 705 may include at least one or more processors including a central processing unit (CPU) / micro processing unit (MPU), an execution memory (for example, a register and / or a random access memory (RAM)) and predetermined data in hardware. It is characterized in that it comprises a bus (BUS) for inputting and outputting, and the predetermined recording to perform a characteristic function for authenticating the RFID reader (or terminal) 300 in the RFID tag 100 by software. A predetermined program routine and / or program data loaded from the medium into the execution memory and computed by the processor (and thus, the RFID reader (or terminal) 300 in the RFID tag 100. The RFID reader (or terminal) 300 from a predetermined program and / or the RFID tag 100 to be recorded on a recording medium provided in the RFID terminal 300 to In order to be authenticated, a component for processing the functional configuration provided in the RFID terminal 300 by software is illustrated as being provided in the controller 705.).

The memory unit 735 is input and output when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the RFID terminal 300 is performed. General term of non-volatile memory for storing information or data), at least one of which includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and / or Flash Memory (FM) and / or Hard Disk Drive (HDD) in hardware. It includes the above storage means, the predetermined program routine and the program data (for example, data input or output for the program routine to perform a predetermined function) is required for the control unit 705 to perform a predetermined control function ) Is stored.

According to an embodiment of the present invention, the memory unit 735 stores authentication data defined to be shared with at least one RFID tag 100 having a function of authenticating the RFID reader (or terminal) 300. Wherein the authentication data is at least one of a serial number of the RFID reader (or terminal) 300 and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader. It is preferable to include the above.

In addition, the memory unit 735 stores a predetermined secret key for encrypting the authentication data.

The screen output unit 715 is performed by the controller 705 in a process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. Output at least one information or data that is predefined or defined in real time through a predefined screen interface to be output to a predetermined screen output device including a liquid crystal display (LCD) and / or a cathode ray tube (CRT). The screen output unit 715 performs the function of the screen output means provided in the RFID terminal 300 in conjunction with the screen output device.

The screen output unit 715 uses the key input unit 720 in a process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. At least one or more key data to be input through and / or at least one or more extracted from the memory unit 735 to allow the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. Information (or data) and / or at least one or more information (or data) transmitted and received via the communication unit 725 to allow the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. Data) and / or information (or data) corresponding to a result of a predetermined operation performed by the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. Output to the device Shall be.

The key input unit 720 may perform at least one number key in the process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. And / or at least one information or data that is predefined or is defined in real time to be input from a predetermined key input device including a character key and / or a function key. The key input unit 720 performs the function of the key input means provided in the RFID terminal 300 in conjunction with the key input device.

The communication unit 725 may perform at least one server (or device) on the network in the process of performing a predetermined function for the RFID terminal 300 to authenticate the RFID reader (or terminal) 300 in the RFID tag 100. And a communication channel, wherein the communication channel is a network communication channel connecting the RFID terminal 300 and a server (or device) on the network through at least one wired or wireless network, and / or the RFID terminal 300. ) And a cable communication channel for connecting a predetermined cable communication terminal (or server) through a predetermined cable, and / or a short distance for connecting the RFID terminal 300 and a predetermined local area device through at least one or more short-range communication means. At least one communication channel is characterized by comprising.

According to an embodiment of the present invention, the network communication channel may be configured according to TCP / IP according to a network type connecting the RFID terminal 300 and the server (or device) and / or a communication protocol defined in the network. Based on Transmission Control Protocol / Internet Protocol (Internet Protocol) -based Internet network, No.7 network, wired network communication channel including at least one private network (eg, value-added communication network or financial common network), and / or code division multiple access (CDMA) based And a wireless network communication channel including at least one of a mobile communication network, a wireless data communication network, and a portable internet network.

In addition, the cable communication channel is RS (Recommended Standard) -232c, RS-485, USB (Universal Serial Bus) according to the cable type and communication protocol connecting the RFID terminal 300 and the cable communication terminal (or server) And a wireless network communication channel including at least one serial communication channel including at least one, and / or a parallel communication channel such as LPT.

In addition, the short range communication channel may include infrared ray communication, RF (Radio Frequency) communication, according to a type and a communication protocol of a short range communication means connecting the RFID terminal 300 and the cable communication terminal (or server). It includes a short-range wireless communication channel including at least one of Bluetooth (BlueTooth), Wireless LAN (Wireless LAN), Wi-Fi (Wi-Fi), UWB (Ultra Wide Band system).

The RFID interface 710 interfaces with a predetermined RFID reader, and receives the RFID information received from the at least one RFID tag 100 by the RFID reader to the RFID terminal 300, and / or the The RFID terminal 300 provides at least one or more RFID related commands and / or information to be provided to the RFID tag 100 to the RFID reader.

According to an embodiment of the present invention, when the RFID reader is externally provided as shown in FIG. 7, the RFID interface 710 may include at least one or more of the network communication channel and / or the cable communication channel and / or the short range communication channel. It is preferable to interface with the RFID reader through a communication channel.

According to another embodiment of the present invention, when the RFID reader is embedded in the RFID terminal 300, the RFID interface 710 may include a predetermined data bus and / or a printed circuit board (PCB) circuit. It is preferable to interface with the RFID reader through.

The RFID reader emits and / or accepts radio waves of a specific frequency to the RFID tag 100 in association with the electronic circuit, and an electronic circuit that emits or receives a predetermined radio wave toward at least one RFID tag 100. The antenna and a microcontroller for extracting and checking predetermined data by reading a signal received from the RFID tag 100, and the functional configuration of the RFID reader shown in FIG. Regarding an RFID reader that interacts with at least one RFID tag 100 through a predetermined air interface defined in ISO / IEC 18000 series and interworks with the RFID terminal 300 through the RFID interface 710, It is to be understood that the functional configuration of the RFID reader for achieving the present invention is not limited to the case of FIG.

Referring to FIG. 7, the RFID reader includes an antenna unit 770 which transmits and receives a radio frequency signal of a predetermined frequency band (or supplies an energy source (power) to the RFID tag 100), and An interface unit 785 for interfacing predetermined information or data with the RFID terminal 300, and the antenna unit converts predetermined information or data provided from the RIFD terminal through the interface unit 785 into a radio frequency signal. A transmitter 780 transmitting through 770 and a radio frequency signal received through the antenna unit 770 are converted into a predetermined digital signal and provided to the RFID terminal 300 through the interface unit 785. It comprises a receiving unit 775 and a power supply unit 795 for supplying a predetermined power required to operate the RFID reader.

According to the exemplary embodiment of the present invention, the power supply unit 795 may receive a predetermined power from the power supply unit 730 of the RFID terminal 300 or may receive a separate power from the RFID terminal 300. It is possible.

When the predetermined RFID tag 100 enters the radio frequency area around the RFID reader (or close to the radio frequency area), the antenna unit 770 uses the predetermined air interface defined in the ISO / IEC 18000 series. A signal including a predetermined activation signal and / or information (or data) is transmitted through a radio frequency signal transmitted from the RFID reader, and / or transmitted to the RFID tag 100 by a transmitter 780. And transmits a predetermined radio frequency signal and / or receives a radio frequency signal from the RFID tag 100.

The interface unit 785 receives the predetermined information or data to be included in the radio frequency signal transmitted from the RFID terminal 300 to the RFID tag 100 through the antenna unit 770, and / or the antenna It is characterized in that to perform the interface function for providing the RFID terminal 300 with information or data corresponding to a predetermined digital signal included in the radio frequency signal received from the RFID tag 100 via the unit 770. .

According to an exemplary embodiment of the present invention, when the RFID reader interfaces with the RFID terminal 300 as an external type as shown in FIG. 7, the interface unit 785 may include the network communication channel and / or the cable communication channel. Or interfacing with the RFID interface 710 of the RFID terminal 300 through at least one communication channel among short-range communication channels. In another embodiment, the RFID reader is interfacing with the RFID terminal 300 in a built-in manner. In this case, the interface unit 785 preferably includes a data bus and / or a printed circuit board (PCB) circuit.

The transmitter 780 is a modulator for converting a predetermined radio frequency signal for transmitting a predetermined digital signal to the RFID tag 100 through the antenna unit 770, and the interface unit 785. When predetermined information or data to be provided from the RFID terminal 300 to the RFID tag 100 is provided through the RFID terminal 300, or determined to transmit a predetermined signal to the RFID tag 100 by an internal logic circuit, The digital signal corresponding to the information or data and / or the digital signal corresponding to the determination result may be converted into a predetermined radio frequency signal and transmitted through the antenna unit 770.

The receiver 775 is a demodulator for converting a radio frequency signal received through the antenna unit 770 into a predetermined digital signal. The receiver 775 demodulates a radio frequency signal received through the antenna unit 770. Generates a digital signal and provides predetermined information or data corresponding to the digital signal to the RFID terminal 300 through the interface unit 785.

Referring to FIG. 7, the RFID terminal 300 includes a serial number of the RFID reader (or terminal) 300 from the memory unit 735, and / or the RFID reader (or terminal) 300 and the RFID. An information extraction unit 740 for extracting authentication data including at least one or more of family ID information defined between readers and a predetermined secret key, and an encryption unit 745 for encrypting the authentication data through the extracted secret key. Command generation unit 750 for generating a command including authentication protocol data including the encrypted authentication data and predetermined authentication method information, and generating the command through the RFID interface. It is characterized by comprising a command transmission unit 755 for transmitting to at least one RFID tag 100 by using.

When the information extracting unit 740 transmits a command including the authentication protocol data among the commands transmitted from the RFID reader (or terminal) 300 to at least one RFID tag 100, the memory, the memory At least one or more of the serial number of the RFID reader (or terminal) 300 from the unit 735, and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader. Characterized in that the authentication data is extracted, and provides the extracted authentication data to the encryption unit 745.

In addition, the information extraction unit 740 extracts a predetermined secret key from the memory unit 735, and provides the extracted secret key to the encryption unit 745.

The encryption unit 745 encrypts the authentication data through the secret key extracted from the memory unit 735, and provides the encrypted authentication data to the command generation unit 750.

Those skilled in the art will be familiar with the technical features of encrypting the authentication data according to at least one encryption algorithm through the secret key, and thus the detailed description thereof is omitted for convenience. do.

The command generation unit 750 is a serial number of the RFID reader (or terminal) 300 from the memory unit 735 by the information extraction unit 740, and / or the RFID reader (or terminal) 300 And authentication data including at least one of family ID information defined between the RFID reader and the RFID reader, the command including the authentication protocol data including the encrypted authentication data and predetermined authentication method information. Wherein the command generated by including the authentication protocol data is first transmitted from the RFID reader (or terminal) to the RFID tag 100, and / or the RFID reader ( Or at least one of a command transmitted from the terminal 300 to the at least one RFID tag 100 to select the at least one RFID tag 100. It is desirable.

When the command transmitter 755 generates a command including the authentication protocol data by the command generator 750, the command transmitter 755 provides the generated command to the RFID reader through the RFID interface. In the above, it is characterized in that to transmit a command including the authentication protocol data to at least one RFID tag (100).

8 is a diagram illustrating an RFID command structure including authentication protocol data according to another embodiment of the present invention.

In more detail, FIG. 8 corresponds to an ISO / IEC 18000-6c standard among RFID commands transmitted from the RFID reader (or terminal) 300 illustrated in FIG. 7 to at least one RFID tag 100. (Or terminal) An RFID command structure including authentication protocol data including predetermined authentication method information and authentication data in a SELECT command initially transmitted to at least one RFID tag 100 from the terminal. Those skilled in the art to which the present invention pertains can refer to and / or modify this figure 8 to provide an alternative RFID radio in addition to various RFID command structures including the authentication protocol data corresponding to the ISO / IEC 18000-6c standard. Various RFID command structures including the authentication protocol data may be inferred in correspondence with the RFID command structure corresponding to the communication standard. The present invention includes all implementation methods inferred, and the present invention is not limited to the implementation method shown in FIG.

However, the command including the authentication protocol data is the first command among the RFID commands transmitted from the RFID reader (or terminal) 300 to at least one RFID tag 100, and / or at least one or more RFID commands. Preferably, the tag 100 includes at least one or more commands for selecting the tag 100.

Referring to FIG. 8 according to an embodiment of the present invention, a SELECT command initially transmitted from the RFID reader (or terminal) 300 to at least one RFID tag 100 in accordance with the ISO / IEC 18000-6c standard may be used. , Command item, Target item, Action item, Action item, Memory bank item, Pointer item corresponding to mask start address, Length item corresponding to mask length, It includes a Mask item, a Truncate item, and a 16-bit checksum (CRC-16) item corresponding to a mask value provided with the mask length at a mask start address, which is generally known in the art. Those skilled in the art will be able to easily deduce the technical features corresponding to the above items with reference to the ISO / IEC 18000-6c standard, and thus the detailed description thereof is omitted for convenience.

Referring to FIG. 8, a 3-bit authentication scheme item and a 64-bit encrypted authentication data item are provided between the action item and the memory bank item of the SELECT command.

The 3-bit authentication scheme item included in the SELECT command may include the RFID tag (1) using any one of eight authentication schemes for the decrypted authentication data when the encrypted authentication data is decrypted. And information defining a method of authenticating through the RFID reader (or terminal) authentication information provided at 100).

According to an embodiment of the present invention, when the encrypted authentication data included in the SELECT command is decrypted, the authentication method information includes an RFID reader (or terminal) provided in the decrypted authentication data and the RFID tag 100. Information defining a method of authenticating the validity of the RFID reader (or terminal) 300 in comparison with the authentication information, wherein the authentication method includes the decrypted authentication data and the RFID reader (or terminal) authentication information stored in the memory unit. In case of one-to-one correspondence, a method of authenticating the validity of the RFID reader (or terminal) 300, and / or a part of the decrypted authentication data and RFID reader (or terminal) authentication information stored in the memory unit (eg, , Upper 8 bits, lower 8 bits, etc.), the method of authenticating the validity of the RFID reader (or terminal) 300, and / or the decrypted authentication data When at least one bit operation (eg, AND, OR, XOR, ..., etc.) is performed on the RFID reader (or terminal) authentication information stored in the memory unit, the RFID result converges to a specific value. It is preferable to include at least one or more of the method for authenticating the validity of the reader (or terminal) 300.

In addition, the 64-bit encrypted authentication data item is a serial number of the RFID reader (or terminal) 300 shown in FIG. 7 and / or between the RFID reader (or terminal) 300 and the RFID reader. Any one of the defined family ID information is encrypted using a secret key provided in the RFID reader (or terminal) 300, wherein the encrypted authentication data is a predetermined secret provided in the RFID tag (100) Characterized in that it is decrypted through a predetermined decryption key including a key.

According to the exemplary embodiment of the present invention, when the decrypted authentication data is authenticated through the RFID reader (or terminal) authentication information included in the RFID tag 100, the RFID tag 100 is the RFID tag 100. Is switched to the operation mode for activating the function of the RFID tag 100, wherein the operation mode for activating the function of the RFID tag 100 is transferred to the RFID reader after the command shown in FIG. And transitioning the state of the RFID tag 100 to perform an operation procedure defined in the RFID tag 100 in response to at least one other command received from the RFID tag 100.

Alternatively, when the decrypted authentication data is not authenticated through the RFID reader (or terminal) authentication information included in the RFID tag 100, the RFID tag 100 deactivates the function of the RFID tag 100. The operation mode for deactivating the function of the RFID tag 100 does not respond to all kinds of other commands received from the RFID reader after the command shown in FIG. 8. And transitioning the state of the RFID tag 100 so as not to.

9 is a diagram illustrating a process of transmitting a command for authenticating the RFID reader (or terminal) 300 to the RFID tag 100 according to another exemplary embodiment of the present invention.

In more detail, FIG. 9 illustrates authentication protocol data including predetermined authentication method information and encrypted authentication data in the RFID reader (or terminal) 300 shown in FIG. 7 as in the RFID command shown in FIG. As a process for generating a SELECT command including a and transmitting to at least one RFID tag 100, if one of ordinary skill in the art to which the present invention pertains, refer to and / or modified with reference to FIG. In response to the RFID command of the RFID reader (or terminal) 300 can be inferred from the various implementation methods for generating a SELECT command including the authentication protocol data to transmit to at least one or more RFID tag 100, The invention includes all the inferred methods of implementation, and the invention is not limited thereby.

Hereinafter, FIG. 9 illustrates a preferred embodiment of the present invention by considering that the RFID tag 100 shown in FIG. 1 is an active tag for convenience.

Referring to FIG. 9, at least one RFID tag 100 including the functional configuration shown in FIG. 1 is located within the radio frequency range of the RFID reader (or terminal) 300 shown in FIG. When receiving a predetermined radio frequency signal transmitted from the 900 (900), the RFID tag 100 is the radio frequency signal by applying a predetermined battery power to each component provided in the RFID tag 100 by the RFID tag An initialization procedure for 100 is performed (905).

When the RFID tag 100 is initialized (910), the RFID reader (or terminal) 300 is a series of the RFID reader (or terminal) 300 from the predetermined memory unit 735 shown in FIG. Authentication data including at least one or more of a number and / or family ID information defined between the RFID reader (or terminal) 300 and the RFID reader and a predetermined secret key are extracted (915), and the extraction is performed. The authentication data extracted from the memory unit 735 is encrypted through the secret key (920).

If the authentication data is encrypted (925), the RFID reader generates a predetermined SELECT command including the encrypted authentication data and authentication method information corresponding to the authentication data as shown in FIG. 8 (930). In operation 935, the SELECT command is transmitted to the RFID tag 100 through a radio frequency signal defined between the RFID reader (or terminal) 300 and the RFID tag 100.

Thereafter, the RFID receives a radio frequency signal including the SELECT command from the RFID reader (or terminal) 300 (920), and reads the SELECT command included in the radio frequency signal, thereby receiving the SELECT command. As shown in FIG. 8, it is checked whether authentication protocol data including the authentication method information and authentication data is included (925).

If the SELECT command does not include authentication protocol data including the authentication method information and authentication data (930), the RFID tag 100 switches the operation mode to the non-selected state (935).

If the RFID tag 100 needs to respond to the predetermined error information to the RFID reader (or terminal) 300 while the operation mode is switched to the non-selected state (940), the RFID tag 100 Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (945).

On the other hand, if the SELECT command includes authentication protocol data including the authentication method information and authentication data as shown in FIG. 8 (930), the RFID tag 100 receives the authentication method information from the SELECT command. And extracting authentication protocol data including the authentication data (950), and comparing the authentication data with RFID reader (or terminal) authentication information provided in the RFID tag 100 according to the extracted authentication method information, And / or perform a predetermined bit operation to check the validity of the RFID reader (or terminal) 300 corresponding to the authentication data (955).

If the validity check result corresponding to the authentication method is not validity of the RFID reader (or terminal) 300 (960), the RFID tag 100 switches the operation mode to a non-selected state (935).

If the RFID tag 100 needs to respond to the predetermined error information to the RFID reader (or terminal) 300 while the operation mode is switched to the non-selected state (940), the RFID tag 100 is Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (945).

If the validity of the RFID reader (or terminal) 300 is verified as a result of the verification corresponding to the authentication method (960), the RFID tag 100 switches the operation mode to a selection state (965), and then The RFID reader (or terminal) 300 provides an RFID service based on at least one or more operation procedures defined in the RFID tag 100.

10 is a diagram illustrating a process of authenticating an RFID reader (or terminal) 300 according to another exemplary embodiment of the present invention.

In more detail, in FIG. 10, the RFID reader (or terminal) 300 illustrated in FIG. 7 generates a SELECT command such as the RFID command illustrated in FIG. 8 through the process illustrated in FIG. When transmitting to the RFID tag 100, in the process of authenticating the validity of the RFID reader (or terminal) 300 through the authentication protocol data included in the SELECT command in the RFID tag 100 shown in FIG. As such, those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 10 to correspond to each RFID command in order that the RFID reader (or terminal) in the RFID tag 100 ( Various implementation methods for authenticating 300 may be inferred, but the present invention includes all the inferred implementation methods, whereby the present invention is not limited thereto.

Referring to FIG. 10, the RFID reader (or terminal) 300 shown in FIG. 7 generates a SELECT command such as the RFID command shown in FIG. 8 through the process shown in FIG. 9 and generates at least one RFID. When transmitting to the tag 100, the RFID receives a radio frequency signal including the SELECT command from the RFID reader (or terminal) 300 (1000) and reads the SELECT command included in the radio frequency signal. As a result, it is checked whether the SELECT command includes authentication protocol data including the authentication method information and encrypted authentication data as shown in FIG. 8 (1005).

If the SELECT command does not include authentication protocol data including the authentication method information and encrypted authentication data (1010), the RFID tag 100 switches the operation mode to a non-selection state (1015).

If the RFID tag 100 needs to respond to the predetermined error information to the RFID reader (or terminal) 300 while the operation mode is switched to the non-selected state (1020), the RFID tag 100 is Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (1025).

On the other hand, if the SELECT command includes authentication protocol data including the authentication method information and encrypted authentication data as shown in FIG. 8 (1010), the RFID tag 100 performs the authentication from the SELECT command. Extracting authentication protocol data including a scheme information and the encrypted authentication data (1030), extracting a predetermined secret key from the memory unit (1035), and the encrypted authentication through the extracted secret key In operation 1040, if the encrypted authentication data is decrypted (1045), the RFID tag 100 converts the decrypted authentication data according to the extracted authentication method information into the RFID tag. The encrypted authentication is performed by comparing with the RFID reader (or terminal) authentication information included in 100 and / or performing a predetermined bit operation. The validity of the RFID reader (or terminal) 300 corresponding to the data is checked (1050).

If the validity check result corresponding to the authentication method is not validity of the RFID reader (or terminal) 300 (1055), the RFID tag 100 switches the operation mode to a non-selected state (1015).

If the RFID tag 100 needs to respond to the predetermined error information to the RFID reader (or terminal) 300 while the operation mode is switched to the non-selected state (1020), the RFID tag 100 is Generates predetermined error data corresponding to the non-selected state, and transmits a predetermined response signal including the generated error data to the RFID reader (or terminal) 300 (1025).

If the validity of the RFID reader (or terminal) 300 is verified (1055), the RFID tag 100 switches the operation mode to a selected state (1060). The RFID reader (or terminal) 300 provides an RFID service based on at least one or more operation procedures defined in the RFID tag 100.

According to the present invention, there is an advantage of protecting the RFID tag from hacking by authenticating the validity of the RFID reader in the RFID tag and responding its own ID data only to the RFID reader whose reader validity is authenticated.

Claims (3)

RFID tag, An antenna unit for transmitting and receiving radio frequency signals with the RFID reader; A memory unit for storing at least one response data to respond to the RFID reader, or RFID reader (or terminal) authentication information and a secret key for authenticating the RFID reader (or terminal); Authentication scheme information and encrypted authentication data from the RFID reader through the antenna unit-the serial number of the RFID reader (or terminal) matching the RFID reader (or terminal) authentication information, or the RFID reader (or terminal) and the A receiving unit for receiving an RFID command including family ID information defined between the RFID readers and a random number; When the RFID command including the authentication method information, the encrypted authentication data and the random number is received through the receiver, the authentication method information, the encrypted authentication data and the random number are extracted from the received RFID command, and the extracted random number and the Generate a decryption key for decrypting the encrypted authentication data through a secret key stored in a memory unit, decrypt the encrypted authentication data using the generated decryption key, and the RFID reader (or Terminal) compare the decrypted authentication data with authentication information or perform bit operation to authenticate the validity of the RFID reader (or terminal), and as a result of the validity authentication, the validity of the RFID reader (or terminal) is authenticated. If so, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and the RFID And a controller for switching the operation mode of the RFID tag to a mode for deactivating the function of the RFID tag when the validity of the reader (or the terminal) is not authenticated. Generating an RFID command including authentication scheme information, encrypted authentication data, and a random number in an RFID reader (or terminal); Transmitting the generated RFID command to at least one RFID tag by the RFID reader (or terminal); Extracting the authentication scheme information, encrypted authentication data, and random number from the received RFID command in the RFID tag receiving the RFID command; Generating a decryption key for decrypting the encrypted authentication data through the random number extracted from the RFID tag and a secret key provided in the RFID tag; Decrypting the encrypted authentication data through the generated decryption key in the RFID tag; Validation of the RFID reader (or terminal) by comparing the decrypted authentication data through the RFID reader (or terminal) authentication information included in the RFID tag or performing bit operation according to the authentication method information in the RFID tag Authenticating; And When the validity of the RFID reader (or terminal) is authenticated in the RFID tag, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag, and when the validity of the RFID reader (or terminal) is not authenticated. And switching the operation mode of the RFID tag to a mode in which the function of the RFID tag is deactivated. And a secret key for encrypting the authentication data and the authentication data, generating a random number to generate an encryption key including the secret key, encrypting the authentication data with the encryption key, and authentication method information. An RFID reader (or terminal) generating an RFID command including authentication data and the random number and transmitting the RFID command to at least one RFID tag; And Receiving the RFID command transmitted from the RFID reader (or terminal), extracting the authentication method information, the encrypted authentication data and the random number included in the RFID command, Generates a decryption key for decrypting the encrypted authentication data through the extracted random number and the secret key provided in the RFID tag, decrypts the encrypted authentication data through the generated decryption key, and the authentication scheme information. Compare the decrypted authentication data with the RFID reader (or terminal) authentication information stored in the memory unit or perform bit operation to authenticate the validity of the RFID reader (or terminal), and in the RFID tag, If the validity of the RFID reader (or terminal) is authenticated, the operation mode of the RFID tag is switched to a mode for activating the function of the RFID tag. If the validity of the RFID reader (or terminal) is not authenticated, And an RFID tag for switching an operation mode to a mode for deactivating the function of the RFID tag. RFID reader (or terminal) authentication system according to.

Images