WO2012041070A1

WO2012041070A1 - Radio frequency identification tag access method and device

Info

Publication number: WO2012041070A1
Application number: PCT/CN2011/074647
Authority: WO
Inventors: 刘志起; 黄志道; 郭慰; 张恺; 李凯
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-09-30
Filing date: 2011-05-25
Publication date: 2012-04-05
Also published as: CN101976362B; CN101976362A

Abstract

A radio frequency identification tag access method is disclosed, which comprises: receiving a tag access command, wherein the type of an application is designated; obtaining a bitmap which corresponds to the type of the application in the tag access command, and is related with a memory area of the tag; and judging whether the tag access command has access authority to the corresponding memory area according to the obtained bitmap, if so, executing the tag access command, if not, stopping executing the tag access command. A radio frequency identification tag access device is also disclosed. The radio frequency identification tag access method and the device can set the access authority according to different service applications, thereby realizing that the different service applications can only access the memory areas stipulated in the tag, avoiding modifying the memory areas outside the service application range and further ensuring the tag access safety.

Description

Radio frequency identification tag access method and device

The present invention relates to the field of wireless communication technologies, and in particular, to a Bitmap (Position Map)-based RFID (Radio Frequency Identification) tag access method and device. Background technique

RFID technology is a non-contact automatic identification technology. Compared with traditional barcodes, magnetic cards and IC cards (Integrated Circuit Cards), RFID systems do not require manual intervention, and have fast reading speed, non-contact, and no It is widely used due to its characteristics of wear, environmental protection, long life and ease of use.

The most basic RFID system includes a reader (or reader) and a tag (also known as a radio frequency card), which uses wireless radio to perform non-contact two-way data transmission between the reader and the tag to achieve target recognition and data exchange. purpose. The basic working process of the RFID system is: The reader sends an RF signal of a certain frequency through the internal RF antenna. When the passive tag enters the working area of the RF antenna of the reader, the received RF signal is converted by the beam power supply principle. For DC power supply, powering the circuit inside the passive tag, the passive tag gets the energy activated, responds to the RF signal of the reader, and passes the information in the tag, such as EPC (Electronic Product Code), through the passive tag. The built-in antenna is transmitted to the reader using the carrier signal.

In practical applications, the memory of a tag is generally divided into multiple areas that are independent of each other, and different areas correspond to different applications, and each application access is divided into its own tag memory information. There is no limit to the access to each memory area, and it can be modified arbitrarily, which is prone to errors and insufficient security. Therefore, an RFID tag access scheme is urgently needed to overcome the above drawbacks. Summary of the invention

In view of the above, the technical problem to be solved by the present invention is to provide an RFID tag access method and device, which can solve the problem of restricted access of different applications to different memory areas of the same tag, thereby ensuring the security of tag access.

In order to solve the above technical problem, the technical solution of the present invention is implemented as follows:

An RFID tag access method, comprising the steps of: receiving a tag access command, specifying an application type in the tag access command; acquiring a bitmap corresponding to an application type in the tag access command, the bitmap and Correlating the memory area of the label; and determining, according to the obtained bitmap, whether the label access command has the access authority of the corresponding memory area, and if the access right is performed, executing the label access command, if the access right is not, stopping execution The tag access command.

Preferably, in the RFID tag access method, before the step of receiving the tag access command, the method further includes: respectively setting bitmaps corresponding to different application types and respectively storing the bitmaps in the storage medium.

Preferably, in the RFID tag access method, before the step of separately setting a bitmap for the different application types, the method further includes: dividing the memory of the tag into a plurality of memory regions according to an application type; and placing the bit The graph is associated with the memory area of the label.

Further, the step of associating the bitmap with the memory area of the label is specifically: associating the bitmap with a memory area of the label according to a mapping method in which two bits of the bitmap correspond to one bit of the memory area .

Further, the step of determining, according to the acquired bitmap, whether the tag access command has the access authority of the corresponding memory area, specifically includes: according to the start address and the length in the tag access command, each time in units of bits One-bit access rights are compared. If all the bits satisfy the access rights, the tag access command is continued, otherwise the tag access command is stopped. Preferably, in the method for accessing the RFID tag, before the storing the bitmap in the storage medium, the method further includes: encrypting the bitmap, and the step of acquiring the bitmap corresponding to the application specifically includes: A bitmap is read from the storage medium and the bitmap is decrypted.

Preferably, the step of encrypting the bitmap is specifically:: encrypting the bitmap by using a 3DES algorithm.

Preferably, in the method for accessing the RFID tag, before the step of acquiring the bitmap corresponding to the application type in the tag access command, the method further includes: performing authentication with the storage medium to obtain access to the storage medium. Permissions. Specifically, the step is to load a key and authenticate with the storage medium through the key to obtain access to the storage medium.

An RFID tag access device includes a command receiving module, a bitmap reading module, and an access authority verification module. The command receiving module is configured to receive a tag access command, where the tag access command specifies an application type, and the bitmap reading module is configured to acquire an application type in a tag access command received by the command receiving module. Corresponding bitmap, the bitmap is associated with a memory area of the label; the access authority verification module is configured to determine, according to the acquired bitmap, whether the label access command has access rights of a corresponding memory area, if there is access The permission executes the tag access command, and stops executing the tag access command if there is no access right.

Preferably, the RFID tag access device further includes a bitmap storage module, and the bitmap storage module is configured to store a bitmap corresponding to the application type.

Preferably, the RFID tag access device further includes a bitmap decryption module, and the bitmap decryption module is configured to decrypt the bitmap acquired by the bitmap reading module.

Preferably, the RFID tag access device further includes an authentication module, and the authentication module is configured to perform authentication with the bitmap storage module to obtain permission to access the bitmap storage module.

Preferably, the bitmap storage module is a PSAM card, and the RFID tag access device further includes a key reading module configured to acquire a key of the PSAM card. Preferably, the RFID tag access device further includes a key writing module configured to write the PSAM card key to a designated location of the reader/writer.

The Bitmap-based RFID tag access method and device of the present invention sets a Bitmap according to different business applications, and sets access rights for different memory areas in the tag through Bitmap, that is, different memory in the tag according to different service applications. The locale access permission is used to determine whether the tag access command can be executed according to the access permission specified in the Bitmap, so that different service applications can only access the memory area specified in the tag, thereby avoiding the application. The memory area outside the scope is modified to ensure the security of the tag access. DRAWINGS

Figure 1 is a memory space distribution diagram of the label;

2 is a schematic flowchart of a first embodiment of a Bitmap-based RFID tag access method according to the present invention;

3 is a schematic diagram of memory planning of a tag in a Bitmap-based RFID tag access method according to the present invention;

4 is a schematic diagram of mapping a Bitmap and a user area of a tag in a Bitmap-based RFID tag access method according to the present invention;

5 is a schematic flowchart of a second embodiment of a method for accessing a Bitmap-based RFID tag according to the present invention;

Figure 6 is a schematic diagram of a PSAM card key writing process;

7 is a schematic structural diagram of an embodiment of a Bitmap-based RFID tag access device according to the present invention;

FIG. 8 is a structural diagram of another embodiment of a Bitmap-based RFID tag access device according to the present invention; detailed description

In order to make the technical solutions of the present invention clearer and clearer, the following will be further described in detail with reference to the accompanying drawings.

As described above, the present invention provides a Bitmap-based RFID tag access method and device, which can solve the problem of restricted access of different service applications to different memory areas of the same tag, thereby ensuring the security of tag access.

The UHF tag is taken as an example to illustrate the Bitmap-based RFID tag access method and device of the present invention. In RFID technology, the operating frequency of UHF tags generally ranges from 860 to 960 MHz, and the communication standards used are ISO18000-6B and ISO18000-6C. Embodiments of the present invention are hereinafter described using UHF tags of the ISO 18000-6B communication standard. According to the ISO18000-6B international standard protocol, the available memory of the tag is 224BYTE. As shown in Figure 1, its available memory space is divided into two major blocks: system memory and user memory. The system memory area accounts for 18 BYTE, and is not allowed to be used as the storage of service data, and the processing method of the factory is solidified, and the user memory area accounts for 206 BYTE, which is used for storing business data.

2 is a flow chart of a first embodiment of a Bitmap-based RFID tag access method according to the present invention. As shown in FIG. 2, the Bitmap-based RFID tag access method of this embodiment includes: Step 101: Receive a tag access command, where an application type is specified in the tag access command. Step 102: Obtain a Bitmap corresponding to an application type in the tag access command, where the Bitmap is associated with a memory area of the tag.

Specifically, the Bitmap can be associated with a plurality of memory regions of the tag in the following manner. First, the user memory area is planned according to the application type of the service application, for example, it can be divided into a basic information area, a service application area 1, a service application area 2, a service application area 3, and the like, as shown in FIG. Show. The common information of all business applications is used as basic information, and the information of different business applications is stored in different business application areas. The memory space corresponding to different business applications should not overlap. The basic information area and the service application area may be divided according to BYTE. It can also be divided according to Bit.

Then, map the Bitmap to the user memory area. As shown in FIG. 4, in this embodiment, mapping is performed according to a Bit mapping method of Bitmap corresponding to a Bit of the user memory area. Bitmap's Bitl and Bit2 limit the user's memory area to Bitl #zhang, Bitmap's Bit3295 and Bit3296 to the user's memory area's last Bit #zhang access limit.

The definition of Bit in Bitmap is shown in Table 1. It can represent four meanings, which are defined as unrestricted, read limit, write limit, and read/write limit. Among them, there is no limit to indicate that the label can be

The write limit means that the memory area of the tag cannot be written. The read/write limit means that the memory area of the tag cannot be read or written.

Table 1

Step 103: Determine, according to the obtained Bitmap, whether the label access command has the access authority of the corresponding memory area, execute the label access command if the access right is available, and stop executing the label access command if there is no access right.

Specifically, according to the starting address and length in the tag access command, the access rights of each bit are compared according to Bit-time. If all the bits satisfy the access right, the execution is continued, otherwise the execution is stopped. Further, for the read command: the access permission of the Bitmap is unrestricted, the write limit can be continued, and the access permission of the Bitmap is stopped when the read limit and the read/write limit are stopped; for the write command: the access permission of the Bitmap is unlimited, You can continue execution when the limit is read, and stop execution when the access permissions of Bitmap are write limit and read/write limit.

The Bitmap-based RFID tag access method of this embodiment is designed according to different business applications. When the tag access command of the service application is used, it is determined whether the tag access command can be executed according to the access permission specified in the Bitmap, so that different service applications can only access the memory area specified in the tag, and the memory area outside the service application range is avoided. Modifications are made to ensure the security of tag access.

FIG. 5 is a flow chart of a method for accessing a Bitmap-based RFID tag according to a second embodiment of the present invention. The PSAM (Terminal Security Control Module) card is taken as an example to illustrate a Bitmap-based RFID tag access method of the present invention. As shown in FIG. 5, the Bitmap-based RFID tag access method of the second embodiment includes:

Step 201: Plan the user memory area according to the type of the service application. Specifically, it can be divided into a basic information area, a service application area 1, a service application area 2, a service application area 3, and the like, as shown in FIG. The common information of all business applications is used as basic information, and the information of different business applications is stored in different business application areas. The memory space corresponding to different business applications should not overlap. The basic information area and the service application area may be divided according to BYTE, or may be divided according to Bit.

Step 202: Set the Bitmap for each application type and save it in the PSAM card. You can store multiple Bitmaps in one PSAM card, select the application type by command, or store a Bitmap corresponding to a PSAM card.

In this embodiment, the Bitmap is set as follows. As shown in Figure 4, the two Bits of the Bitmap map to a Bit mapping method of the user memory area. That is, the Bitl and Bit2 of the Bitmap restrict access to the Bitl of the user memory area, and the Bitmap's Bit3295 and Bit3296 are used by the user. The last bit in the memory area is used to make access restrictions. The definition of the Bit in the Bitmap is the same as that of the first embodiment (Table 1), and a detailed description is omitted here.

The Bitmap is encrypted before it is saved on the PSAM card. Specifically, the Bitmap can be encrypted using a 3DES algorithm.

Table 2

Table 2 is a file attribute table of the Bitmap of the embodiment. The Bitmap file identifier is 0001-000X, which is determined according to the number of service applications; the file type is binary file; the file size is 412 bytes, which is twice the size of the label user memory area; external authentication is required for access control; For the cipher text, different encryption keys can be used for the Bitmap of different service applications. In this embodiment, the encryption algorithm is unified into 3DES.

Step 203: Perform authentication with the PS AM card to obtain the right to access the PS AM card. Usually, the PSAM card key is stored in the EEPROM of the reader. After the reader is powered on, the PSAM card key is read first, that is, the key stored in the EEPROM of the reader/writer is read, and the key is used. The PSAM card is authenticated, and the access to the PSAM card is obtained after the authentication is passed, and the file information in the PSAM card can be accessed.

Obviously, before this step, the PSAM card key needs to be written. The writing process is shown in Figure 6, which includes the following steps:

Step 203a: The upper computer and the reader establish a connection, and the connection can be established through the network port or the serial port. Step 203b: Enter the PSAM card key. The PSAM card key is used to access the PSAM card. This key is usually 16 bytes and is stored inside the reader.

Step 203c: The host computer sends a message to the reader to perform a key write operation.

Step 203d: The reader authenticates the PSAM card according to the input PSAM card key to ensure that the written key is a key corresponding to the PSAM card.

Step 203e: After passing the authentication, the PSAM card key is saved in a specific area of the reader/writer, and is usually written into the EEPROM of the reader/writer. After the PSAM card key is written, to access the file information in the PSAM card, the key must be loaded to authenticate the PSAM card.

Step 204: Receive a label access command, where an application type is specified in the label access command. Specifically, the parameter of the application type can be input in the tag access command, and the corresponding Bitmap is determined according to the parameter.

Step 205: Obtain a Bitmap corresponding to the application type. Specifically, in this embodiment, after the PSAM card is authenticated, all the Bitmaps in the PSAM card are read out and stored in the memory in a two-dimensional array. And all the keys are read out and saved to the memory in a two-dimensional array. The read Bitmap file is then decrypted with the corresponding key, and the decryption algorithm can also use 3DES. Finally, select the corresponding Bitmap according to the application type specified in the tag access command.

Optionally, the Bitmap associated with the application type and the corresponding key file can also be directly read and then decrypted to obtain a Bitmap corresponding to the application type.

Step 206: Determine, according to the obtained Bitmap, whether the label access command has the access authority of the corresponding memory area, execute the label access command if the access right is available, and stop executing the label access command if there is no access right.

The Bitmap-based RFID tag access method of this embodiment sets a Bitmap according to different service applications, and sets access rights for different memory areas in the tag through Bitmap. When receiving tag access commands of different service applications, according to the access specified in the Bitmap Permission to determine the label Whether the access command can be executed, so that different service applications can only access the memory area specified in the label, and the modification of the memory area outside the service application range is avoided, thereby ensuring the security of the label access.

Figure 7 is a block diagram showing the construction of an embodiment of a Bitmap-based RFID tag access device of the present invention. As shown in FIG. 7, the Bitmap-based RFID tag access device of this embodiment includes a command receiving module 71, a bitmap reading module 72, and an access authority verifying module 73. The command receiving module 71 is configured to receive a tag access command, and the tag access command specifies an application type; the bitmap reading module 72 is configured to acquire a tag access command received by the command receiving module 71. a bit map corresponding to the application type, the bitmap being associated with a memory area of the tag; the access authority verification module 73 is configured to determine the tag access command according to the bitmap acquired by the bitmap reading module 72 Whether there is access permission of the corresponding memory area, if the access right is executed, the label access command is executed, and if there is no access right, the label access command is stopped.

Optionally, the Bitmap-based RFID tag access device may further include a bitmap storage module 74, the bitmap storage module 74 is configured to store a bitmap corresponding to the application type, and the bitmap reading module 72 A bitmap is obtained in the bitmap storage module 74. The bitmap storage module 74 can be an encrypted file. Obviously, the bitmap storage module 74 can also be a separate storage device, such as a PSAM card.

When the Bitmap-based RFID tag access device of the present embodiment sets the tag access command of the service application according to different service applications, it is determined whether the tag access command can be executed according to the access permission specified in the Bitmap, so that different service applications can only access. The memory area specified in the label avoids modification of the memory area outside the scope of the service application, thereby ensuring the security of the label access.

FIG. 8 is a structural diagram of another embodiment of a Bitmap-based RFID tag access device according to the present invention; Schematic. The Bitmap-based RFID tag access device of this embodiment is a reader/writer. As shown in FIG. 8, it includes a key write module 81, a key read module 82, a PSAM authentication module 83, a Bitmap read module 84, and a Bitmap. The decryption module 85, the access authority verification module 86, and the command receiving module 87. The key writing module 81 is configured to write the PSAM card key to a specified position of the reader/writer, and is generally written into the EEPROM of the reader/writer. The key reading module 82 is configured to acquire a key of the PSAM card. The PSAM authentication module 83 is configured to perform authentication according to the key acquired by the key reading module 82 and the PSAM card to obtain the right to access the PSAM card. The command receiving module 87 is configured to receive a tag access command, and an application type is specified in the tag access command. The Bitmap reading module 84 is configured to acquire, after the authentication is passed, a bitmap corresponding to an application type in the tag access command received by the command receiving module 87 from the PSAM card, where the bitmap and the label are The memory area is associated. The Bitmap decryption module 85 is arranged to decrypt the Bitmap read by the Bitmap read module 84. The access authority verification module 86 is configured to determine, according to the acquired bitmap, whether the label access command has the access authority of the corresponding memory area, and if the access authority has the access authority, execute the label access command, and stop executing if there is no access right. The tag access command.

The invention can be applied to various fields such as mobile vehicle identification, electronic identification card, warehousing and logistics application, electronic lock-up anti-theft (electronic remote control door lock controller), and the like, and can also be applied to the transportation field, using the label recording the vehicle information as an electronic License plate, complete the vehicle's non-stop charging, vehicle management, public security traffic police enforcement, etc., record the basic information of the vehicle in the traffic field. The basic information area of the memory area of the user, the service applications such as non-stop charging, vehicle management, and public security traffic police enforcement are distributed in different memory areas in the tag, and then the readers of the PSAM with different Bitmaps are allocated to different parts, that is, Restricted access to different memory areas of the tag can be done.

The above is only the preferred embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the invention and the drawings are directly or indirectly applied to other related The technical field is equally included in the scope of patent protection of the present invention.

Claims

Claim

A method for accessing a radio frequency identification tag, comprising:

Receiving a tag access command, where the application type is specified in the tag access command;

Obtaining a bitmap corresponding to an application type in the tag access command, the bitmap being associated with a memory area of the tag;

Determining, according to the obtained bitmap, whether the tag access command has the access authority of the corresponding memory area, if the access right is performed, executing the tag access command, and stopping the execution of the tag access command if there is no access right.

The radio frequency identification tag access method according to claim 1, wherein before the step of receiving the tag access command, the method further includes:

The bitmap is set separately for different application types and saved in the storage medium.

The radio frequency identification tag access method according to claim 2, wherein before the step of respectively setting a bitmap for the different application types, the method further comprises: dividing the memory of the tag into a plurality of memories according to an application type a region; and associating the bitmap with a memory region of the tag.

The method for accessing a radio frequency identification tag according to claim 3, wherein the step of associating the bitmap with the memory area of the tag is specifically: corresponding to one bit of the memory area according to two bits of the bitmap The mapping method associates the bitmap with the memory area of the tag.

The method for accessing a radio frequency identification tag according to claim 1, wherein the step of determining, according to the acquired bitmap, whether the tag access command has the access authority of the corresponding memory area, specifically includes: according to the tag access command The starting address and length of the bit are compared in terms of bits. The access rights of each bit are compared once. If all the bits satisfy the access rights, the tag access command is continued, otherwise the tag access command is stopped.

6. The radio frequency identification tag access method according to claim 2, wherein

Before the storing the bitmap in the storage medium, the method further includes: performing the bitmap Encryption

And the step of obtaining the bitmap corresponding to the application type in the tag access command comprises: reading the bitmap from the storage medium and decrypting the bitmap.

The method for accessing a radio frequency identification tag according to claim 6, wherein the step of encrypting the bitmap is specifically:

The bitmap is encrypted using the 3DES algorithm.

The radio frequency identification tag access method according to any one of claims 2 to 3, wherein before the step of acquiring the bitmap corresponding to the application type in the tag access command, the method further includes:

Authenticating with the storage medium to gain access to the storage medium.

The radio frequency identification tag access method according to claim 8, wherein the step of performing authentication with the storage medium to obtain permission to access the storage medium is specifically:

A key is loaded and authenticated with the storage medium by the key to gain access to the storage medium.

10. A radio frequency identification tag access device, comprising:

The command receiving module is configured to receive a label access command, where the application type is specified in the label access command;

a bitmap reading module configured to acquire a bitmap corresponding to an application type in a tag access command received by the command receiving module, the bitmap being associated with a memory area of the tag;

The access authority verification module is configured to determine, according to the acquired bitmap, whether the label access command has the access authority of the corresponding memory area, execute the label access command if the access right is available, and stop executing if the access right is not available. Tag access command.

11. The RFID tag access device of claim 10, further comprising: a bitmap storage module configured to store a bitmap corresponding to the application type.

The radio frequency identification tag access device according to claim 10 or 11, wherein Includes:

The bitmap decryption module is configured to decrypt the bitmap acquired by the bitmap reading module.

13. The RFID tag access device of claim 12, further comprising: an authentication module configured to authenticate with the bitmap storage module to obtain access to the bitmap storage module.

The radio frequency identification tag access device according to claim 13, wherein the bitmap storage module is a PSAM card, and the radio frequency identification tag access device further includes a key reading module configured to acquire the PSAM card. Key.

15. The RFID tag access device of claim 14, further comprising: a key writing module configured to write the PSAM card key to a designated location of the reader/writer.