DE102006049375A1 - Radio frequency identification chip for e.g. automatic recognization of goods, has control unit arranged to produce radio frequency identification control instruction by instruction sequence received via transmission/receiving device - Google Patents

Abstract

The chip (1) has a control unit (4) arranged to produce a control instruction by an instruction sequence received via a transmission/receiving device (2), where the instruction sequence includes a type field with information about a function i.e. broadcast function, of the control instructions to be produced. The control instruction is a radio frequency identification (RFID) control instruction for controlling a slave RFID chip (5). Independent claims are also included for the following: (1) a system comprising a radio frequency identification chip (2) a method for an operation of a system.

Description

The The invention relates to an RFID chip with a transceiver unit for transmitting and receiving radio signals, a system with the RFID chip and a method of operating this system.

Automated Readable radio tags, so-called RFIDs (Radio Frequency Identification), are important Elements of automatic recognition of goods and environmental parameters and elements. A variety of application models are built on this technology including the automated logistics process from production to packaging disposal, a so-called ticketing for Events from booking to finding the place and after sales marketing in a restaurant u.v.m. These application models are based on the automated detection of RFID tags as core contain an RFID chip.

there the network load is the for the RFID chips used radio channels are rising sharply. thats why efficient transmission and preparation of information for the RFID chips essential. Also in the future with increasing penetration of the market through RFID chips increase the importance of data security.

It is therefore the object of the invention, a way to coordinate Bundle up of RFID data streams with the possibility to authorize an RFID manipulation.

These The object is achieved by an RFID chip according to claim 1, a system according to Claim 13 and a method according to claim 14 solved. Preferred embodiments are in particular the dependent claims removable alone or in combination.

To is an RFID chip with a transmitter / receiver device for radio signals discloses a control unit for generating at least one control command for controlling at least one further device, wherein the control command over the transmitting / receiving device is emitted. Such an RFID chip can also be referred to as an active RFID chip or master RFID chip. Through this control unit, the master RFID chip can be more passive Controlled devices or Slawe devices coordinated control, z. B. to write automatically, eg. B. to update. This needs from Outside, z. B. addressed by a central writing instrument, only the master RFID chip to become, and not all Slave devices. All other related transactions with the Slave devices are executed by the master RFID chip. The Control unit of the master RFID chip ensures a distribution of the control commands on the Slav devices. This method can be a data load be significantly reduced and treating large amounts of data be significantly simplified. Furthermore let yourself as described below, can easily achieve authorization.

It is advantageous if the at least one control command is an RFID control command for controlling at least one further (Slawe-) RFID chip.

It is also advantageous if the at least one RFID control command a Control command for writing data into at least one further slave RFID chip is. Read operations as usual not just the master RFID chip.

It is advantageous, especially with multiple control options, if the control unit is adapted to the at least one Control command based on a via the transceiver to generate received instruction sequence.

The Instruction order preferably has a type field with a information about the function / type of control commands to be generated, for. B. with Broadcast function. Optionally, the instruction sequence may be, for example a data field for writing therein containing data in the at least another slave device (the data field conveniently having time information and / or time delay information). thereby can the slave RFID chips be updated with this data.

Advantageous is further an address field with addresses of at least one other Device, so with high probability no unwanted Devices are addressed.

It is to increase the data security further advantageous if the instruction sequence at least one authorization field with an authorization code which is checked in the master RFID chip, where valid the command sequence is generated, if invalid. it is for simple design of the master RFID chip advantageous if the Authorization code is a transaction number, TAN, because so only a comparison circuit between a received TAN and a stored TAN is necessary. All known TAN methods can be used be applied, such. TAN, iTAN, Session TAN, Challenge-Response, and so on.

Particularly suitable is a master RFID chip, which has a memory for storing and reading out at least one TAN, as well as a comparison unit for activating at least one RFID processing step on the basis of a comparison of a TAN stored in the memory with a TAN received via the transmitting / receiving unit. Preferably, initially several TANs ("TAN list") are stored in memory. The comparison unit can thus fulfill the function of an authorization unit.

By Firstly, the use of TANs greatly increases data security, as only the one in possession of a valid TAN is getting access to the master RFID chip. Second, the RFID chip needs to have only simple memory and a simple comparison unit instead of an encryption circuit.

Becomes, in a typical application, transfer a TAN to the RFID chip, so the comparison unit will receive the received TAN with a Compare TAN. Do the TANs agree (which is generally not identity TANs, but the fulfillment of a predetermined relationship to each other, z. A mathematical relationship), The RFID chip enables the generation of the instruction sequence.

Preferably At least one TAN stored in the RFID chip is provided with an expiration date. Is from the RFID chip, for example, with the instruction sequence transfer a date field, so can the comparison unit in addition to the actual TAN identifier also compare the date and make an activation dependent on it, whether the transmitted Date is within a permitted range. This is particularly advantageous if to unlock a transmission of a date field is mandatory, since such an unauthorized handling the RFID chip further difficult, in particular, if a date setting in the proposed RFID read / write device by the end user no longer possible is.

A Unauthorized handling of the RFID chip is alternatively or additionally similar This is complicated by the fact that at least one stored in memory TAN is preferably provided with a location identifier, the z. B. automatically from an intended RFID read / write device via a GPS receiver and transferred.

On similar Way, at least one stored in memory TAN preferably be provided with a time tag containing a content of a received time field is compared. Is the received time window outside the time slot assigned to the TAN in RFID, there is no activation. In this case, preferably a time setting in the proposed RFID read / write device the end user is no longer possible is.

Especially to prevent handling of the RFID chip by an unintentional RFID read / write device, the at least one TAN stored in memory is preferably provided with an RFID reader / writer identifier, the additional for transmission a correct TAN is required for activation.

Preferably the activation for a predetermined time, z. B. seconds, and / or a predetermined Number of process steps or actions valid (analogous to the so-called "session TAN"). After that is the transmission another session TAN needed.

It can be cheap be if the RFID chip is a means of deleting a TAN after a successful activation by comparison with this TAN. This will increase the number of maximum possible, including unauthorized, Limited actions. This is especially important for writing data to the RFID. A possible application scenario is writing or overwriting of data on the RFID chip, for. B. an RFID identifier or a password, by a writer-authorized administrator, and TAN-loose, d. h., any number of times, Reading the identifier by an associated read / write device.

It may also be advantageous if the RFID chip is a means of locking and / or deleting all TANs after a predetermined number of failed comparisons as this is a malicious one RFID query further inhibited. As a result, the RFID chip is at least first for such Process steps inoperative, which TANs need.

It is advantageous if at least one TAN activation at least associated with a predetermined RFID process step. In other Words can certain TANs assigned to certain unlocked process steps be while other types or sequences of process steps are assigned to other TANs become. This ensures that even if a TAN cracked is, this does not necessarily allow all possible steps. It can also process steps possible be allowed without TANs, z. B. a transmission of an RFID identifier.

It is particularly advantageous if the RFID chip has an iTAN request circuit for transmitting a request radio signal after a TAN after receiving a command radio signal. Typically, such an RFID chip will be used in the so-called iTAN method, which is encompassed by the present invention as a special type of TAN method. there A particular TAN (eg, "TAN No. 5") is requested by the RFID chip, typically upon receipt of an instruction sequence or an instruction advertisement sequence, from the RFID read / write device to which a TAN stored in the RFID chip attaches compare is. iTANs have the advantage of avoiding that when parts of a TAN list become known, all RFIDs populated with that TAN list will automatically be considered hacked. Depending on the size of the list and the degree of compromise, a satisfactory level of security may still be present, particularly using one or more of the above-mentioned other enabling conditions, such as time, date, location, reader recognition, and so forth.

In an embodiment are all possible TANs (TAN, iTAN, etc.) stored in the RFID read / write device, so this autonomously a proper TAN (in the simple TAN procedure) or the requested Select TAN (in the iTAN procedure) and transfer it to the RFID chip can.

A higher Tampering security is achieved through the use of a challenge-response procedure achieved, e.g. in that a TAN (TAN, iTAN, etc.) by the RFID read / write device from one external TAN database must be requested. This is preferably done established a secure connection to a computer unit, which Has access to the external TAN database. conveniently, the RFID read / write device has to be installed at the Authenticate computer unit, z. B. by sending an identifier of Read / write device. additionally can an RFID identifier, an intended transaction, and / or others Transfer data will be used to select a valid TAN needed become. The use of a centrally managed database, eg. In one Trustcenter, can uncontrolled trial and denial of service Prevent (DOS) attacks most effectively.

to Securing communication between master RFID chip and the Slawe devices can also use the TAN method. Alternatively, the control command includes an authorization code in Form an identifier of the master RFID chip, with the Slawe RFID chips only in one or more specific identifiers control commands, in particular Write commands, execute.

The Task is also through a system of at least one master RFID chip and solved a plurality of slaves devices driven by the RFID chip, in particular another, passive RFID chips, the more of the master RFID chip controlled further devices are adapted to receive a control command of the master RFID chip containing therein ent instructions perform, in particular to write data contained in the control command, and upon receipt of a read signal, the data associated with the read signal send out.

The Task is also by a method of operating such Solved system, where, z. B. from a central writing instrument, to the master RFID chip an instruction sequence is sent, which contains the therein Control unit causes at least one control command for Control the at least one further slave device to produce.

Preferably become the instruction sequence and / or the at least one control instruction securely transmitted.

In the following embodiment An aspect of the invention is schematically illustrated in more detail.

1 shows a sketch of a system with master RFID chip, slave RFID chips and central writing instrument.

In 1 is a master RFID chip 1 with one with a transceiver unit 2 for sending and receiving radio signals 3 shown. The RFID chip 1 also has a control unit 4 for generating at least one control command for controlling at least one further slave device 5 on, wherein the control command via the transceiver 2 is sent out.

The control unit 4 is adapted to the at least one control command by means of a via the transmitting / receiving device 2 from a central writing unit 6 to generate received instruction sequence.

• – ein Typenfeld mit einer Information über die Funktion der zu erzeugenden Steuerbefehle aufweist, wobei die Funktion eine Broadcast-Funktion ist und als solche gekennzeichnet ist;
• – ein Autorisierungsfeld mit einem Autorisierungscode in Form einer TAN, die, falls korrekt, die Erzeugung von Steuerbefehlen durch die Steuereinheit freischaltet bzw. autorisiert;
• – ein Adressfeld mit Adressen der anzusprechenden Slave-RFID-Chips; diese Adressfelder können z. B. während der Herstellung fest eingearbeitet oder später auf den Master-RFID-Chip 1 geschrieben werden, z. B. mittel einer bestimmten Instruktionsfolge.
• – ein Datenfeld mit einer Zeitinformation.

The instruction sequence has in this embodiment:

• - Has a type field with information about the function of the control commands to be generated, the function is a broadcast function and is characterized as such;
• An authorization field with an authorization code in the form of a TAN, which, if correct, enables or authorizes the generation of control commands by the control unit;
• An address field with addresses of the slave RFID chips to be addressed; These address fields can, for. B. incorporated during manufacture or later on the master RFID chip 1 be written, z. B. means of a particular instruction sequence.
• A data field with a time information.

The to the slave RFID chips 5 Sent control command (not shown) includes a Autori sierungscode, in particular an identifier of the master RFID chip 1 , The slave RFID chips 5 are set up to execute the received command sequence only if the identifier is correct.

One possible scenario is an incoming goods pallet inspection, which involves all RFID tags 5 are to be provided with an input time stamp. It is time consuming and error prone, this from a central writing unit 6 out for each RFID tag individually. Is an active or master RFID chip per pallet 1 which is capable of broadcasting for the RFID tags 5 only the latter has to be done by the central writing unit 6 be addressed to provide all RFID tags with a time stamp.

The function of the type field in this case comprises the information that a broadcast is to be performed for writing a memory area, and the time information then corresponds to the input time or date. The one from the central writing unit 6 can be sent with the instruction sequence TAN z. B. delivered with a delivery note or an order confirmation. The information on the date of receipt can be read by each reader, but can not be changed.

Of course it is the invention is not limited to the embodiments shown in more detail limited.

1

Master RFID chip

2

Transmit / receive unit

3

radio signal

4

control unit

5

Slave device

6

central write unit

Claims (17)

RFID chip ( 1 ) with a transceiver device ( 2 ) for radio signals ( 3 ), characterized in that it comprises a control unit ( 4 ) for generating at least one control command for controlling at least one further device ( 5 ), wherein the control command via the transmitting / receiving device ( 2 ) is sent out. RFID chip ( 1 ) according to claim 1, characterized in that the at least one control command an RFID control command for controlling a further RFID chip ( 5 ). RFID chip ( 1 ) according to claim 2, characterized in that the at least one RFID control command is a control command for writing data in at least one further RFID chip. RFID chip ( 1 ) according to one of claims 1 to 3, characterized in that the control unit ( 4 ) is adapted to the at least one control command by means of a via the transmitting / receiving device ( 2 ) to generate received instruction sequence. RFID chip ( 1 ) according to claim 4, characterized in that the instruction sequence comprises a type field with information about the function of the control commands to be generated. RFID chip ( 1 ) according to claim 5, characterized in that a function of the control commands to be generated is a broadcast function. RFID chip ( 1 ) according to one of claims 4 to 6, characterized in that the instruction sequence further comprises at least one data field for writing therein data contained in the at least one further device. RFID chip ( 1 ) according to one of claims 4 to 7, characterized in that the data field has time information and / or time delay information. RFID chip ( 1 ) according to one of claims 4 to 8, characterized in that the instruction sequence further comprises at least one address field with addresses of the at least one further device. RFID chip ( 1 ) according to one of claims 4 to 9, characterized in that the instruction sequence further comprises at least one authorization field with an authorization code. RFID chip ( 1 ) according to claim 10, characterized in that the authorization code is a transaction number, TAN. RFID chip ( 1 ) according to one of the preceding claims, characterized in that the control command comprises an authorization code, in particular an identifier of the RFID chip ( 1 ). System consisting of at least one RFID chip ( 1 ) according to one of the preceding claims and several of the RFID chip ( 1 ) controlled further devices, in particular further, passive RFID chips, wherein the plurality of RFID chip ( 1 ) are adapted thereto, upon receipt of a control command of the RFID chip ( 1 ) to execute the instructions contained therein, in particular to write data contained in the control command, and to transmit the data associated with the read signal upon receipt of a read signal. Method for operating a system according to claim 13, characterized in that the RFID chip ( 1 ) an instruction sequence is sent, which causes the control unit to generate at least one control command for controlling the at least one further device. Method according to claim 14, characterized in that that the instruction sequence is transferred securely. Method according to claim 14 or 15, characterized that at least one control command is transmitted securely. Method according to one of claims 14 to 16, characterized that at least one control command transmitted by broadcasting becomes.