KR100972294B1 - Context based rfid dynamic security control system and the applicable methods for customized service - Google Patents

Abstract

The present invention provides a dynamic security level control system using the situation information that provides a security level service suitable for the user's situation by dynamically controlling the security level according to the RFID attached article and the surrounding situation recognized by the owner. It relates to a security level control method used.

According to the present invention, the RFID security level control server is a context awareness information collecting unit for collecting at least one or more context awareness information for the user, a security level adjuster for adjusting the security level of the RFID tag based on the collected context awareness information And a security controller for determining a security strength associated with the RFID tag according to the adjusted security level.

Context-aware information, security level, security strength, relationship inference, cryptographic algorithm, RFID tag information

Description

RDF dynamic security level control system using context information and security level control method using the system {CONTEXT BASED RFID DYNAMIC SECURITY CONTROL SYSTEM AND THE APPLICABLE METHODS FOR CUSTOMIZED SERVICE}

The present invention is to set the security level in the service using the RFID attached article or sensor network or the ubiquitous service that can identify the user using the RFID and sensor, to provide a service protected by the security level appropriate to the situation A system for dynamically controlling by using the status information and security using the system without fixed security level according to the service object and the surrounding situation recognized by the owner (or service subject). Level control method.

The present invention is derived from the research conducted as part of the IT growth engine technology development project of the Ministry of Information and Communication and the Ministry of Information and Telecommunication Research and Development. [Task No. 2005-S-088-03, Research Title: For the Safe RFID / USN] Development of Security Technology for Secure RFID / USN Service, Research Period: 2007.03.01 ~ 2008.02.28]

In general, RFID (Radio Frequency Identification) recognizes, tracks, and manages a tagged object, animal, or person by contacting or reading information from a tag having unique identification information using radio frequency. It is a technology that can be done. For example, when RFID is introduced into a distribution and logistics system, a manufacturer may instruct a worker on which vehicle to deliver to a store using information on the RFID attached to the product. In this case, the RFID-attached product can be recognized to immediately grasp the stock quantity and the item of the corresponding store, thereby enabling effective product ordering. In addition, when a purchased product is delivered to a customer, timely services such as diagnosis of failure during use and time of failure can be found and advance replacement notices can be provided. In addition, customers can check the authenticity of the goods purchased, manufacturers can check the distribution process of the goods can greatly improve the quality of service.

In addition to manufacturing, logistics, and distribution, RFID tags continue to provide services after goods are sold, and their application fields are expanding even when RFID itself is used for identification of users rather than goods.

As such, when used as an ID for identification or identification of a user, a security problem may occur because personal information of the user through a tag is easily leaked to a third party.

Furthermore, fixed security processing reduces the performance efficiency by processing high-level security when using RFID even in areas where users consider themselves safe, such as offices, homes, and the outside, and retrieves information related to RFID in insecure areas. Even if the security level is weak, it can lead to the invasion of personal privacy such as information leakage and illegal information search.

In order to overcome this problem, conventionally, the security level is standardized so that the owner can select it (see Common Evaluation Criteria for Evaluation of IT Security).

Figure 1 shows the structure of a conventional RFID and sensor service network. In general, when a reader 102 recognizes a tag 101 and transmits a request for information, the tags 101 transmit their own tag IDs, and the reader 102 sends a tag corresponding to the tag ID. Information is received from the RFID information server 104 via the middleware 103.

The RFID information server 104 constructs tag information corresponding to a plurality of tag IDs in a database form, interprets the request information received from the reader 102, and provides the corresponding tag information through the application service 105.

Under the conventional RFID service network as shown in FIG. 1, tag information can usually be easily obtained from an RFID reader, which may cause serious security problems. In other words, the use of RFID tags may cause personal privacy problems (such as location information or purchase history exposure), and the IDs of RFID tags are easily identified so that tags can automatically respond to all readers without the user's knowledge. Can be. However, even though security threats can be serious in an automated and easily obtainable RFID / USN environment, existing information protection techniques cannot be used as they are due to limited resources such as RFID and sensors.

In particular, when an RFID tag is used as an identification ID for a user, the attack target may be all information related to an individual, not just information or communication information stored in a computer in an existing environment. The scope of the attack is not limited to the existing personal computer, but there is a fear that it will be all the private real space of the individual. In other words, it is expected that a wider range and target of exposure than the conventional security problem is exposed.

As an example for protecting the tag information from such security issues, the user can set the security level step by step, predetermine an outsider who can access the RFID tag information in each step, and finally block the access of the outsider located in another step The security problem of RFID tag information can be solved. In this way, the degree of security can vary depending on the user's situation. If a fixed security strength is applied or not recognized depending on the situation, the user can access the system every time and set the security level according to the situation. shall. Therefore, when a user fails to modify the security level in a timely manner, a problem may arise in that it is not possible to flexibly allow others to access information depending on the situation.

Accordingly, the present invention proposes a new RFID security system and method that can securely protect personal information from a security breach threat while solving the above problems. In other words, the present invention proposes a method of more securely providing personal information according to the place and time at which the owner and the goods exist.

An object of the present invention is to provide a product information (or RFID tag information) secured (encrypted) at a corresponding level by flexibly changing the security level according to an environment, a viewpoint, and a movement around the user.

In addition, by increasing the security strength in an unsecure place, it aims to prevent illegal leakage of information on the article with the RFID tag and the owner's information.

In addition, in an unsafe place, an object of the present invention is to secure the reliability of the security information of the user's article information (or RFID tag information) by transmitting the processing result to the user through real time log and audit of the user.

In addition, additional security is not required in an area deemed to be relatively safe (for example, one's own home, etc.), and the processing can be efficiently performed because it causes performance degradation and user inconvenience.

RFID security level control server according to the present invention, a context awareness information collecting unit for collecting at least one or more context awareness information for the user, a security level adjusting unit for adjusting the security level of the RFID tag based on the collected context awareness information And a security control for determining a security strength associated with the RFID tag according to the adjusted security level.

According to another aspect of the present invention, a method for controlling RFID security level through context awareness may include collecting at least one context awareness information for a user, and adjusting the security level of the RFID tag based on the collected context awareness information. And determining a security strength associated with the RFID tag according to the adjusted security level.

According to the present invention, the security level of the RFID tag is dynamically processed according to the situation recognition process, and the situation recognition and defects, thereby eliminating the need to adjust the individual security level according to the situation each time, more detailed It has the advantage that it can reflect the control according to the individual's inclination, so that it can provide the secure service tailored to the individual by guaranteeing the security level of the service in the ubiquitous environment in the future.

According to the present invention, it is possible to prevent illegal leakage of information on the goods owned by the owner and the information of the owner when in an unsafe area or situation according to the situation.

In addition, according to the present invention, by increasing the security strength in an unsafe situation by transmitting the processing result to the subscriber through the log and audit, it is possible to secure the reliability of the privacy security results of the subscriber.

In addition, according to the present invention, the security service authority is dynamically changed and processed according to the subscriber's situation, it is possible to provide a variety of additional services.

In addition, according to the present invention, even if the user does not directly set the security level (level) by accessing the system, the security level (level) is flexibly changed according to the environment, the time point, and the surrounding movement of the user, thereby securing the security at the corresponding level. (Encryption) The processed RFID tag information can be provided.

In addition, according to the present invention, since there is no need for a physical deformation of the tag or a separate active access to prevent information leakage in the RFID tag, there is an effect of increasing the efficiency and security of using a passive tag element. .

Hereinafter, an RFID dynamic security level control system using context information and a security level control method using the system will be described in detail with reference to the accompanying drawings.

2 illustrates a network configuration of a context aware based RFID dynamic security level control system according to the present invention.

As shown in Figure 2, the security level control system 200 according to the present invention is a situation-aware sensor 201, RFID reader 202, integrated middleware 203, RFID information server 204, RFID application application ( 205, sensor network application 206, and RFID security level control server 207.

The context aware sensor 201 collects context aware information about a tagged article or a user's environment change. The collected situation awareness information is transmitted to the RFID security level control server 207, and the RFID reader 202 receives the RFID tag information from the RFID information server 204 corresponding to the situation awareness information.

The RFID reader 202 according to the present invention includes a camera module, a code division multiplexing access (CDMA) module, a Bluetooth module, an infrared communication module (Infrared Data Association) for reading specific code information recorded on an RFID tag, And a wireless communication module.

The integrated middleware 203 may refer to EPC middleware that connects the RFID information read from the RFID reader 202 and the RFID application application 205 and is an application level event (ALE) among the EPC network standards. RFID I / F, SE (Sensor Event) may be implemented as RFID I / F. The integrated middleware 203 receives tag information corresponding to the tag ID from the RFID information server 204 and transmits the tag information to the reader 202.

The RFID information server 204 transmits the situation awareness information received from the situation awareness sensor 201 to the RFID security level control server 207, and security level information on tag information corresponding to the situation awareness information. Receive The RFID information server 204 transmits tag information having a security level (level) set corresponding to the received tag ID to the RFID reader 202.

The RFID application application 205 uses the received tag information to provide an application service.

The RFID security level control server 207 automatically sets and adjusts the security level (level) of the tag information through inference on the input tagged product and the user's environment change information.

2 illustrates an embodiment in which the RFID information server 204 and the RFID security level control server 207 are implemented in separate server forms. In another embodiment of the present invention, the RFID information server 204 includes an RFID security level control server 207, that is, an embodiment in which the functions of the RFID security level control server are additionally implemented in the conventional RFID information server. It will be apparent to those skilled in the art that the technical idea of the present invention can be applied as it is.

3 illustrates an RFID security level control server server according to an embodiment of the present invention.

As shown in FIG. 3, the RFID security level control server 300 according to the present invention includes a context aware information collecting unit 301, a security level adjusting unit 302, and a security control unit 303.

The situation awareness information collecting unit 301 collects at least one situation awareness information about the user. In one example, the situation awareness information may be collected from a plurality of situation awareness sensors located around the user. The context aware sensor may include both mechanical and electronic sensors, and may automatically collect context aware information associated with the user's situation through various methods.

The context awareness information may include at least one of location information, time, and context information of the user or the article.

In one example, the location information of the user may be determined using the location information of the mobile communication terminal of the user. That is, context information associated with the user may be extracted according to the movement path and the location of the mobile communication terminal carried by the user.

As another example, the situation information may be extracted by detecting surrounding situation information, that is, image detection, temperature, location, illuminance, infrared rays, humidity, and the like, which may be extracted from the location situation where the user or the article is moved, from various sensors. .

Here, "situation information" refers to information representing a relationship between a thing and a user with respect to an event generated as a context, and is extracted differently according to the time when the user is in a specific situation and surrounding movement.

In other words, when moving some products with RFID tags out of the house, the tags are placed in an environment that can be freely read from an external reader. To this end, when the situation is recognized as being out of the house from the tag ID and sensor, the existing security level is set to an enhanced security level (a level determined by the user for such a situation) to prevent information from being collected from other tags. Therefore, when an outsider requests (scans) the tag information of the article, the reader is authenticated according to the enhanced security level of the tag and the user authentication level. At this time, the authentication of the reader is performed in both the tag and the information system. The tag and information system notifies the goods owner of the authentication result of the leader, and the goods owner confirms and provides the tag information. According to the present invention, when a reader who fails authentication re-requests (scans) tag information, access is essentially blocked.

In addition, when the owner of the article read the tag information, the data transmission level is set high, which increases the end-to-end security level (increasing the security strength through encryption algorithms).

In another embodiment, the situation awareness information may be directly input from the user through an input means other than the situation awareness sensor. The user may directly input his or her situation through the input means without using the sensor, so that the server can accurately grasp the user's situation. As an example of the input means, various types of terminals capable of connecting to a server through a communication network may be used.

The security level adjusting unit 302 adjusts the security level of the RFID tag based on the collected situation awareness information. That is, at least one situation awareness information is classified according to a predetermined criterion, and the security level is adjusted by inferring the relationship between the classified situation awareness information. For example, various relationship inferences about actual user context awareness information (e.g., location information) and other places (e.g. hospital, home) associated with the actual user collected from the context awareness sensor in response to various defined contextual information ( For example, an emergency situation) can be extracted, and the security level can be determined and adjusted according to the situation awareness information according to the extracted relationship inference result.

According to the present invention, in an environment where security enhancement is required, the security level for the service itself is increased, thereby enhancing session security, encryption and decryption levels, and service access control.

The security control unit 303 determines the security strength associated with the RFID tag according to the adjusted security level.

The security control unit 303 differs in the manner of providing the security service, the encryption algorithm difference. Security strength is differentiated according to whether security is applied, difference in scope of access to information to be serviced, security technology difference, key bit difference of security algorithm, operation mode of cryptographic algorithm, and difference in verification procedure when providing information. Can be determined and provided.

As an example, the security controller 303 may determine the security strength of the RFID tag information by selecting a specific algorithm among various encryption algorithms according to the security level adjusted by the security level adjusting unit 302. Specifically, the cipher algorithm can be selected according to the security level among cipher algorithms such as stream cipher, block cipher, and asymmetric key cipher. In general, asymmetric key cipher can be regarded as the most complicated and stable. Can be used when the level is high.

Alternatively, as an embodiment according to the present invention, the security controller 303 may determine the security strength by selecting whether to apply security according to the adjusted security level. That is, when a relatively low or the lowest security level is set, by applying a security algorithm, more flexible security according to the situation can be achieved.

As another embodiment of the present invention, the RFID security level control server 300 may further include a log audit processing unit (not shown).

As another embodiment according to the present invention, the RFID privacy control server 300 may further include a log audit processing unit (not shown).

When the information accessor requests the RFID tag information in a certain situation, it may be set to obtain the user's confirmation through a separate audit procedure.

As an example, the log audit processing unit transmits the situation query request information to the user, and the user can transmit the situation awareness information (second situation awareness information) directly to the RFID privacy control server in response to the query request, thereby enabling more accurate situation awareness. You can do that. The security level adjusting unit 302 adjusts the security level of the RFID tag by further considering the second situation awareness information input from the user in addition to the situation awareness information received from the situation awareness information collecting unit 301.

As another embodiment, the user may transmit second context awareness information to the RFID security level control server, which may directly block, reject, or grant permission to access the RFID tag information, and the security control unit 303 may transmit the user. The security strength may be determined in consideration of the second situation awareness information input from the system.

In order to transmit the situation query request information, the log audit processing unit transmits a query request to the user's mobile communication terminal using a short message service, so that the user can confirm the situation query request in real time and transmit the second situation awareness information. can do.

As another embodiment, when the user's response does not exist for a certain time, the security level adjusting unit 302 may adjust the security level according to a predetermined criterion in consideration of the special situation or the exceptional situation stored in the profile by the user. .

4 is a diagram illustrating an example of security level determination and security strength determination according to the present invention.

Examples of security services available in context-aware situations include personal privacy protection, personal location-based service protection, end-to-end service protection (decryption level), product piracy and intrusion safety protection services, emergency rescue consent and family notification services, and There is a security processing result notification and audit service.

As illustrated in FIG. 4, the security level may be determined individually (different) according to the type of security service. As described above, according to the present invention, the protection level for the tag information is changed according to the situation awareness information, so that differential and effective protection is possible.

As yet another embodiment according to the present invention, the security strength may be individually determined between sensors for collecting context awareness information, between RFID tags and RFID readers, and between security level servers and users.

For example, in the case of an RFID tag, a wireless section providing a security service between a tag and a reader, a wired section connecting a reader and a middleware, and an information server, and a web environment connected between the RFID information server and a user's PC may be used. Different security strengths can be applied.

In another example, in the case of a sensor, a situation is recognized in a web environment in which a wireless section communicating between a sensor node and a sensor, a wireless section between a sensor and a sensor gateway, a wired section of a sensor gateway and a sensor server, and a sensor server and a user PC are connected. Security strengths for information can be applied differently.

5 is a diagram illustrating an example of security strength determination according to an encryption algorithm according to an embodiment of the present invention.

As shown in FIG. 5, the number of bits of security of the encryption key may be differently determined as 80 bits, 112 bits, 128 bits, 192 bits, 256 bits, or the like. Even with the same encryption algorithm, the security strength depends on the encryption key size. In general, the greater the number of bits of an encryption key, the higher the security strength. Therefore, the security control unit according to the present invention can determine the security strength differently by determining the number of encryption key bits of the security algorithm, along with the selection of the encryption algorithm according to the security level.

As another example according to the present invention, the security strength can be determined differently by determining the operation mode (operation mode) of the encryption algorithm.

As an example, the mode of operation of the Data Encryption Standard (DES) encryption algorithm is briefly described.

The Electronic Code Book mode of operation is used for confidential transmission of a single value, and each 64-bit plaintext block is encrypted independently using the same key. On the other hand, the Chipper Block Chaining mode of operation is used for universal block-type transmission authentication, and the input of the cryptographic algorithm is the XOR result for the next 64 bits and the preceding 64 bits. The Chip FeedBack mode of operation is used for universal stream-type transmission authentication, where the preceding ciphertext block is used as the input to the cryptographic algorithm to generate a pseudorandom output, which is then XORed with plaintext to generate the cipher block. . Output FeedBack mode of operation is a stream-like transmission on a noisy channel, similar to CFB. Generate the DES output of the preceding step as input to the cryptographic algorithm.

6 is a diagram illustrating a structure of a context-aware security controlled RFID application service according to an embodiment of the present invention.

As illustrated in FIG. 6, the context sensing unit 610 (or the context sensing unit) of the context awareness manager 601 detects event information (or context awareness information) received from the context awareness sensor and the RFID. The context classifier 620 (or the context classifier) may generate context awareness information that can be used in the actual situation where the detected context awareness information is filtered according to a set multi-rule. 630 (or the context inference and recognition engine). The situation inference and recognition engine unit 630 performs the final situation check and the situation processing for the presence of an abnormal state, and performs the security process on the tag information.

The security policy profile storage unit 602 stores security level information set by the user for tag information. The security level can be set by a user or an agent.

The context aware security control processor 603 adjusts and sets the security level of the tag information by inferring the relationship between the sensed context awareness information and the user's profile. The situation-aware security control processing unit 603 transmits the security level to the reader according to the reader's request, and stores the result in the log and audit information storage unit 604.

The log and audit information storage unit 604 stores processing results and processes as to whether the tag information is normally designated and processed within the range allowed by the user or whether the reset is performed in the form of a query received in an abnormal state. Thank you.

The security control process information processing unit 605 receives the final security level (level) information on the tag information and provides it to the application service.

According to the present invention, the context-aware security control processing unit 603 receives the static level information set by the user from the existing privacy profile storage unit, and combines the dynamic privacy information processed through the level information and the situational awareness.

The situation-aware security control processing unit 603 verifies whether the combined result is applied within a range of security levels (levels) allowed by the actual user and whether the correct security control processing has been performed. Finally, the security level information about the tag information is transmitted to the RFID information server.

7 illustrates an RFID security level control method through situational awareness according to an example of the present invention. Hereinafter, referring to FIG. 7, a process performed in each step will be described in detail.

In step S701, at least one or more situation awareness information about the user is collected. The context aware information may be collected from a plurality of context aware sensors located around the user.

In step S702, the security level of the RFID tag is adjusted based on the collected situation awareness information. For example, the situation awareness information is classified according to a predetermined criterion, and the relationship between the classified situation awareness information is inferred to control the security level.

In step S703, the security strength associated with the RFID tag is determined according to the adjusted security level.

The method for controlling the RFID security level according to the present invention has been described so far, and since the technical contents of the RFID security level control server described above with reference to FIGS. 2 to 5 can be applied to the present control method as it is, the following detailed description is omitted. Let's do it.

The RFID security level control method through context awareness according to an embodiment of the present invention may be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

In the present invention as described above has been described by the specific embodiments, such as specific components and limited embodiments and drawings, but this is provided to help a more general understanding of the present invention, the present invention is not limited to the above embodiments. For those skilled in the art, various modifications and variations are possible from such description.

Therefore, the spirit of the present invention should not be limited to the described embodiments, and all of the equivalents or equivalents of the claims as well as the claims to be described later will belong to the scope of the present invention. .

Figure 1 shows the structure of a conventional RFID and sensor service network.

2 illustrates a network configuration of a context aware based RFID dynamic security level control system according to the present invention.

3 illustrates an RFID security level control server server according to an embodiment of the present invention.

4 is a diagram illustrating an example of security level determination and security strength determination according to the present invention.

5 is a diagram illustrating an example of security strength determination according to an encryption algorithm according to an embodiment of the present invention.

6 is a diagram illustrating a structure of a context-aware security controlled RFID application service according to an embodiment of the present invention.

7 illustrates an RFID security level control method through situational awareness according to an example of the present invention.

<Explanation of symbols for the main parts of the drawings>

201: Situational Awareness Sensor 301: Situational Awareness Information Collector

202: RFID reader 302: security level adjustment unit

203: Integrated middleware 303: Security control unit

204: RFID Information Server

205: RFID Application Application

206: Sensor network application

207: RFID Security Level Control Server

Claims (15)

A server for controlling the security level of an RFID tag, A context awareness information collecting unit for collecting at least one context awareness information about the user; A log audit processor which transmits context query request information to the user and receives second context awareness information from the user in response to the query request; A security level adjusting unit for adjusting a security level of the RFID tag based on the collected situation awareness information and the second situation awareness information; And A security control unit for determining a security strength associated with the RFID tag according to the adjusted security level RFID security level control server comprising a. The method of claim 1, And the security control unit determines the security strength by selecting an encryption algorithm according to the adjusted security level. The method of claim 2, And the security controller determines the number of encryption key bits associated with the selected encryption algorithm according to the adjusted security level. The method of claim 2, And the security control unit determines an operation mode of the selected encryption algorithm according to the adjusted security level. The method of claim 1, And the security controller determines the security strength by selecting whether to apply security according to the adjusted security level. The method of claim 1, The security level is RFID security level control server, characterized in that individually determined according to the type of security service. The method of claim 1, The security strength of the RFID security level control server, characterized in that individually determined in the interval between the sensor, the RFID tag and the RFID reader, the security level server and the user to collect the situation awareness information. The method of claim 1, The context awareness information includes at least one of the location information, time, and context information of the user or the article attached to the RFID tag. The method of claim 8, And the location information of the user is determined using location information of the mobile communication terminal of the user. delete The method of claim 1, And the security controller determines the security strength by further considering the second situation awareness information. The method of claim 1, And the log audit processing unit transmits the situation query request information to the mobile communication terminal of the user by using a short message service. The method of claim 1, And the security controller adjusts the security level according to a predetermined criterion when there is no response from the user to the query request for a predetermined time. The method of claim 1, And the context awareness information is collected from a plurality of context awareness sensors located around the user or from an input of the user. In the RFID security level control method through the situation recognition implemented by the RFID security level control server, Collecting, by the RFID security level control server, at least one context awareness information about a user; Transmitting, at the RFID security level control server, situation query request information to the user; Receiving second context awareness information from the user in response to the query request; Adjusting, at the RFID security level control server, a security level of the RFID tag based on the collected situation awareness information and the second situation awareness information; And Determining, at the RFID security level control server, a security strength associated with the RFID tag according to the adjusted security level RFID security level control method through context recognition comprising a.

Images