KR100875921B1 - Key Distribution Method in Different RDF Systems - Google Patents

Abstract

Disclosed is a method for distributing a master key and an electronic signature verification key required by an RFID reader to implement a secure RFID system with enhanced security. The present invention provides an RFID master key distribution method that enables a RFID reader to quickly and securely obtain a master key used to protect a message transmitted when an RFID tag and an RFID reader communicate, and to verify an electronic signature value included in an RFID tag. It is an RFID digital signature verification key distribution method that enables an RFID reader to obtain a digital signature verification key quickly and safely. The present invention can quickly and securely obtain a master key that can perform secure communication with an RFID tag entered into its communication area, and also can verify an electronic signature value included in the RFID tag. Validation keys can be obtained quickly and securely, protecting the RFID system.

Description

Method for distributing key in different RFID systems

1 is a flowchart illustrating a process of distributing a master key in different RFID systems according to the present invention.

FIG. 2 is a diagram illustrating the RFID master key distribution and utilization process of FIG. 1 in detail.

3 is a diagram illustrating an RFID master key initialization according to the present invention.

4 illustrates an RFID master key delivery in accordance with the present invention.

5 is a diagram showing an RFID master key acquisition according to the present invention.

6 is a diagram illustrating a process of distributing and utilizing an electronic signature verification key according to the present invention.

FIG. 7 is a diagram illustrating a process of distributing and utilizing the digital signature verification key of FIG. 6 in detail.

8 illustrates a digital signature verification key delivery according to the present invention.

9 illustrates a digital signature verification key acquisition according to the present invention.

10 is a diagram illustrating a digital signature verification key distribution and another application process according to the present invention.

FIG. 11 is a diagram illustrating the digital signature verification key distribution and another application process of FIG. 10 in detail.

* Explanation of symbols for the main parts of the drawings

101: producer server 102: first purchaser server

103: destination database server 104: first purchaser RFID reader

105: destination RFID reader 106: RFID tag

401: Master key delivery message format

701: digital signature server 702: digital signature verification server

703: Digital Signature RFID Reader 704: Digital Signature Verification RFID Reader

705: RFID Tag

801: Digital signature verification key delivery message format 802: Digital signature verification key database

The present invention relates to a method for distributing a master key and an electronic signature verification key required by an RFID reader to establish a radio-frequency identification (RFID) security system, and more particularly, when an RFID tag and an RFID reader communicate with each other. RFID reader can obtain the digital signature verification key quickly and securely in order to verify the RFID master key distribution method that the RFID reader can obtain the master key used to protect the incoming message quickly and the digital signature value included in the RFID tag. The present invention relates to an RFID digital signature verification key distribution method.

A typical RFID system consists of an RFID tag, an RFID reader and an RFID server. RFID readers and RFID servers are often fixed at specific locations, but RFID tags can be found at various locations depending on the movement of the attached goods. For example, if an RFID tag is attached to a cargo container, RFID readers in ports in different countries will try to read the RFID tag attached to the cargo container, depending on the shipping container's route. As described above, in order to securely communicate with RFID readers of various organizations with different management domains, it is necessary to confirm that the RFID reader is a reliable RFID reader, and communication between the RFID tag and the RFID reader should be protected by a cryptographic technique. In this environment, the RFID reader can protect the data using the RFID tag and the master key, and can also use the digital signature technique to prevent the nonrepudiation of the stored data. Therefore, securely distributing the master key of the RFID tag and securely distributing the digital signature verification key are the first steps for the management domain to secure other RFID systems.

If the management domains are the same as in most conventional key distribution schemes, the key distribution problem can be easily solved. That is, if the same manager manages the RFID tag, the RFID reader, and the RFID server, the RFID key stores the master key associated with the tag ID of each RFID tag and the verification key associated with the electronic signature stored in the RFID tag. When ID is read, the tag ID is transmitted to the RFID server and the master key and the digital signature verification key related to the corresponding RFID tag are returned.

However, if the management domain is different, the RFID reader reads the RFID tag entering its communication area, finds the tag ID, and first identifies where the RFID server that stores the master key and digital signature verification key associated with that tag ID is located. You must find it. Thereafter, the RFID reader must secure a secure communication channel with the RFID server and then request a master key and an electronic signature verification key associated with the tag ID. However, using the tag ID information of the ISO / IEC 18000 document, which is an international standard of the RFID standard, visiting the RFID server through the above process takes too much time, and even if it is found quickly, This also burdens the RFID reader as additional procedures are required.

Therefore, from the point of view of the RFID reader, when a tag ID of an RFID tag that is completely different from its own management domain is read, a master key and an electronic signature verification key related to the tag ID are obtained quickly and securely and securely communicated with the RFID tag. There is a need for an efficient key distribution method that can provide data protection and nonrepudiation of stored data.

An object of the present invention is to provide an RFID master key distribution method in which an RFID reader can quickly and securely obtain a master key used for protecting a message transmitted when an RFID tag and an RFID reader communicate.

Another object of the present invention is to provide an RFID digital signature verification key distribution method in which an RFID reader can quickly and securely obtain an electronic signature verification key to verify an electronic signature value included in an RFID tag.

In order to achieve the above technical problem, a key distribution method in different RFID systems according to the present invention uses a master key based on an ID of an RFID tag that operates first in its own jurisdiction by a first server managing a first RFID reader. Obtaining; Providing the master key at the request of the first RFID reader; Transmitting the master key to a second server that has jurisdiction over the area where the RFID tag is to be moved; And transmitting, by the second server, the master key at the request of a second RFID reader that recognizes the RFID tag entered into its own jurisdiction.

In order to achieve the above technical problem, a key distribution method in a different RFID system according to the present invention generates a signature key and a verification key by a first digital signature server and then uses an RFID tag through a first RFID reader under its jurisdiction. Receiving the data to perform an electronic signature; Transmitting the verification key to a second digital signature server that has jurisdiction over a region to which the RFID tag is to be moved; And transmitting, by the second digital signature server, the verification key at the request of a second RFID reader that recognizes the RFID tag entering its own jurisdiction.

In order to achieve the above technical problem, a key distribution method in a different RFID system according to the present invention generates a signature key and a verification key by a first digital signature server and then uses an RFID tag through a first RFID reader under its jurisdiction. Receiving the data to perform the electronic signature; Transmitting the verification key to a second digital signature server that has jurisdiction over a region to which the RFID tag is to be moved; Transmitting, by the second RFID reader detecting the RFID tag, the digital signature value obtained from the RFID tag to the second digital signature server; And verifying, by the second digital signature server, the digital signature value and transmitting the result to the second RFID reader.

In order to explain the RFID master key distribution method and the RFID digital signature verification key distribution method according to the present invention, the master key and the digital signature verification key are considered to be operated as follows. An RFID tag is an object that exchanges data with an RFID reader through wireless communication. The RFID tag has a unique tag ID, which always responds to requests from all RFID readers. However, since it has important data that needs to be protected internally, all other data except the tag ID is transmitted to the cipher text after the encryption operation. The encryption / decryption key used at this time is the RFID master key. When an RFID reader attempts to store important information in an RFID tag, the RFID reader notifies that the recorded information has been recorded, and later records the electronic signature value of the stored information for non repudiation of the stored information. Therefore, when another RFID reader reads the stored information of the RFID tag and verifies the digital signature value, the integrity and non-repudiation of the stored information can be confirmed. The key used for digital signature verification is the RFID digital signature verification key.

In order to explain the RFID master key distribution method and the RFID digital signature verification key distribution method according to the present invention, the following operating environment of the RFID system is considered. RFID tags travel through several different management domains and communicate with multiple RFID readers. Multiple RFID readers exist in one management domain, and one server manages all of these RFID readers in one management domain. At the initial RFID tag manufacturing plant, the master key is stored inside the RFID tag and stored in the producer server. The original purchaser of the RFID tag can receive the master key from the producer server and store it in his server. Whenever an RFID tag is attached to a thing and moves, consider an environment where the next destination is the management domain. For example, if an RFID tag is attached to a cargo container, the operating environment can be considered because the cargo container is used for import and export between countries.

Now, the key distribution method in consideration of the above-described operating environment will become more apparent through the following detailed description with reference to the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. 1 is a flowchart illustrating a process of distributing a master key in different RFID systems according to the present invention. 2 is a view showing in detail the RFID master key distribution and utilization process of Figure 1, Figure 3 is a view showing the initialization of the RFID master key, Figure 4 is a view showing the RFID master key transfer, Figure 5 is a present invention Is a diagram illustrating RFID master key acquisition according to the present invention. 6 is a diagram illustrating a process of distributing and utilizing an electronic signature verification key according to the present invention, FIG. 7 is a diagram illustrating a process of distributing and using an electronic signature verification key in FIG. 6, and FIG. 8 is an electronic diagram of the electronic signature verification key according to the present invention. 9 is a diagram illustrating signature verification key delivery, and FIG. 9 is a diagram illustrating digital signature verification key acquisition according to the present invention. Finally, FIG. 10 is a diagram illustrating a digital signature verification key distribution and another application process according to the present invention, and FIG. 11 is a diagram illustrating the digital signature verification key distribution and another use process in detail.

First, the RFID master key distribution and utilization process according to the present invention will be described briefly with reference to FIG. The first server managing the first RFID reader obtains the master key based on the ID of the RFID tag that operates for the first time in its jurisdiction (S110). The obtained master key is provided according to a request of the first RFID reader (S120). Next, as a key delivery step, the master key is sent to a second server that manages an area where the RFID tag is to be moved (S130). Finally, the second server transmits the master key at the request of the second RFID reader that recognizes the RFID tag entered into its jurisdiction, thereby distributing the master key (S140).

Now, the process of FIG. 1 will be described in more detail with reference to FIGS. 2 to 5. Looking at the configuration for this key distribution process, the producer server 101, the original purchaser server 102, the destination database server 103, the original purchaser RFID reader 104, the destination database in the management domain of the original purchaser server A destination RFID reader 105 in the management domain of the server, and an RFID tag 106. And the operating environment, the first RFID tag buyer server securely stores data in the RFID tag using the first purchaser RFID reader in its management domain, the RFID tag is attached to a specific object to a new management domain Moving to the communication area of the RFID reader, the destination RFID reader managed by the destination database server in the newly moved destination can obtain the master key to securely receive data from the RFID tag.

The process is broken down in detail as follows.

First, after the first purchaser server purchases the RFID tag, the first purchaser server requests the first purchaser RFID reader in its management domain what the tag ID of the purchased RFID tag is (S201).

As a second step, the first purchaser RFID reader requests a tag ID from the RFID tag (S202).

As a third step, the RFID tag responds its tag ID to the first purchaser RFID reader (S203).

As a fourth step, the first purchaser RFID reader responds the tag ID to the first purchaser server (S204).

As a fifth step, the first purchaser server sends the tag ID to the producer server and requests the corresponding master key (S205).

As a sixth step, the producer server responds to the original purchaser server a master key associated with the tag ID (S206).

As a seventh step, since the first purchaser server has a master key associated with the tag ID, the first purchaser RFID reader requests the master purchaser from the first purchaser server (S207).

As an eighth step, the first purchaser server responds to the first purchaser RFID reader with a master key associated with the tag ID (S208).

As a ninth step, the original purchaser RFID reader exchanges encrypted data with the RFID tag through the operation using the master key (S209).

As a tenth step, the first purchaser server transmits the master key to the database server of the next destination to which the RFID tag is moved (S210). This process can be seen as a kind of key push.

As an eleventh step, when the RFID tag enters the communication area of the destination RFID reader in the management domain of the destination database server, the destination RFID reader requests a tag ID from the RFID tag (S211).

As a twelfth step, the RFID tag responds its tag ID to the destination RFID reader (S212).

In a thirteenth step, the destination RFID reader sends the tag ID to the destination database server and requests the corresponding master key (S213).

In step 14, the destination database server returns a master key associated with the tag ID to the destination RFID reader (S214).

As a fifteenth step, the destination RFID reader exchanges encrypted data with the RFID tag through the operation using the master key (S215).

3 is a diagram illustrating an RFID master key initialization according to the present invention.

Based on the configuration shown in Figure 3 will be described in more detail the RFID master key initialization according to the present invention.

Initializing the RFID master key according to the present invention means that the first purchaser server of the RFID tag securely secures the master key associated with the RFID tag purchased by the RFID tag.

First, as a first step, the production plant 301, which is a factory producing RFID tags, stores the master key in the RFID tag and the producer server at the same time as the production of the first RFID tag. The message format used at this time has the structure of tag ID, key type, key length, master key 302).

As a second step, the original purchaser server requests the producer server the master key for the RFID tag he purchased. In general, the first purchaser purchases a large number of RFID tags from the producer, so the message format used is tag count, packet length, tag ID, key type, tag ID, key type ..., tag ID, key type structure ( 304). In other words, by specifying tag ID and key type per tag, producer server can respond to the information. This is a message structure in consideration of scalability.

As a third step, the producer server sends a master key associated with the requested tag ID to the original purchaser server. The message format used at this time is tag number, packet length, tag ID, key type, key length, master key, tag ID, key type, key length, master key, ..., tag ID, key type, key length, It has a structure 305 of master keys. In other words, tag ID, key type, key length, and master key structure are allocated per tag, and it is configured to check whether the message is lost by notifying the total number of tags and the total packet length.

4 is a diagram illustrating RFID master key delivery according to the present invention.

Based on the configuration shown in Figure 4 will be described in more detail the RFID master key delivery according to the present invention.

RFID master key delivery according to the present invention means that the master key is safely passed from the original purchaser server to the destination database server. This is not necessarily limited to the destination database server at the original purchaser server, but has the scalability that the RFID master key can be transferred between any source and destination if the source and destination of the RFID tag can be known. Since the original purchaser server according to the present invention knows the next destination of the RFID tag, the RFID master key delivery according to the present invention only has a procedure of transmitting the master key to the destination database server from the original purchaser server which currently has the master key. This can be seen as a kind of key push technique. The message format used at this time is tag number, packet length, tag ID, key type, key length, master key, tag ID, key type, key length, master key, ..., tag ID, key type, key length, It has a structure 401 of a master key. That is, not only can the master key for a plurality of RFID tags be transmitted through the message format, but also keys for other purposes than the master key can be defined and transmitted. The destination database server receives the RFID master key and records it in its database for future use. The database format used at this time has a tag ID, key type, key length, key, key type, key length, key, ..., key type, key length, and key structure 402.

5 is a diagram illustrating an RFID master key acquisition according to the present invention.

The RFID master key acquisition according to the present invention will be described in more detail based on the configuration shown in FIG. 5.

RFID master key acquisition according to the present invention means that the destination RFID reader in the management domain of the destination database server acquires the master key of the RFID tag securely from the destination database server. This can be extended to master key transmissions between servers and RFID readers located in a common administrative domain.

First, as the first step, the destination RFID reader sends the tag ID of the RFID tag entered into its communication area to the destination database server managing the self and requests the corresponding master key. The message format used at this time has a structure 501 of tag number, packet length, tag ID, key type, tag ID, key type ..., tag ID, and key type. This configuration is designed so that the destination RFID reader secures key information for a plurality of RFID tags at once.

As a second step, the destination database server responds with a master key associated with the requested tag ID from the destination RFID reader. The message format used at this time is tag number, packet length, tag ID, key type, key length, master key, tag ID, key type, key length, master key, ..., tag ID, key type, key length, It has a structure 502 of master keys. That is, not only the master keys for the plurality of RFID tags can be responded through the message format, but also keys for other purposes than the master key can be defined and transmitted.

6 is a flowchart schematically illustrating a digital signature verification key distribution and utilization process according to the present invention. First, the first digital signature server generates the signature key and the verification key, and then receives the data of the RFID tag through the first RFID reader under its jurisdiction to perform the electronic signature (S610). Next, the verification key is transmitted to a second electronic signature server that has jurisdiction over the area where the RFID tag is to be moved (S620). Then, the second digital signature server verifies the RFID tag by transmitting the verification key at the request of the second RFID reader that recognizes the RFID tag entered into its jurisdiction (S630).

7 is a diagram illustrating the digital signature verification key distribution and utilization operation according to the present invention. First, the configuration of the electronic signature server 701, the digital signature verification server 702, the digital signature RFID reader 703, the digital signature verification RFID reader 704, and the RFID tag 705. The operating environment of the digital signature RFID reader should store the digital signature value in the RFID tag, and when the RFID tag is moved, the digital signature verification RFID reader reads the digital signature value stored in the RFID tag. Verify. Therefore, in the present invention, the digital signature server generates a key pair of the signature key for the digital signature and the verification key for the digital signature verification, and uses the signature key when it signs it, and delivers the verification key to the digital signature verification server.

The RFID electronic signature verification key distribution method according to the present invention will be described in more detail based on the operation shown in FIG. 7.

First, as a first step, the digital signature RFID reader in the management domain of the digital signature server requests the tag ID of the RFID tag (S701).

In a second step, the RFID tag responds a tag ID to the digital signature RFID reader (S702).

As a third step, the electronic signature RFID reader requests the electronic signature by sending data required for the electronic signature to the electronic signature server (S703).

As a fourth step, the digital signature server generates a key pair of a signature key for digital signature and a verification key for digital signature verification, obtains an electronic signature value for data requested as the signature key, and responds to the digital signature RFID reader ( S704).

As a fifth step, the digital signature RFID reader stores the electronic signature value in the RFID tag (S705).

As a sixth step, the RFID tag responds to the digital signature RFID reader that the digital signature value has been successfully stored (S706).

As a seventh step, the digital signature server delivers the digital signature verification key to the digital signature verification server of the next destination to which the RFID tag is to be moved. This process can be seen as a kind of key push (S707).

As an eighth step, when the RFID tag enters the communication area of the digital signature verification RFID reader in the management domain of the digital signature verification server at the destination, the digital signature verification RFID reader requests a tag ID from the RFID tag (S709).

As a ninth step, the RFID tag responds its tag ID to the digital signature verification RFID reader (S710).

In step 10, the digital signature verification RFID reader sends the tag ID to the digital signature verification server and requests the verification key (S710).

As an eleventh step, the digital signature verification server responds to the digital signature verification RFID reader with the verification key associated with the tag ID (S711).

As a twelfth step, the digital signature verification RFID reader verifies the digital signature value stored in the RFID tag through the calculation using the verification key (S712).

8 is a diagram illustrating an electronic signature verification key delivery according to the present invention.

Based on the configuration shown in Figure 8 will be described in more detail the RFID digital signature verification key transfer process according to the present invention.

The RFID digital signature verification key transmission according to the present invention means that the verification key is safely passed from the digital signature server to the digital signature verification server at the destination. Since the digital signature server according to the present invention knows the next destination of the RFID tag, the RFID digital signature verification key delivery according to the present invention is performed from the digital signature server having the current digital signature verification key to the digital signature verification server of the next destination. It only has a procedure for transmitting it. This can be seen as a kind of key push technique. The message format used at this time is the number of tags, packet length, tag ID, key type, key length, digital signature verification key, tag ID, key type, key length, digital signature verification key, ..., tag ID, key type. , Key length, and digital signature verification key structure 801. That is, not only can the electronic signature verification keys for a plurality of RFID tags be transmitted through the message format, but also keys for other purposes than the digital signature verification key can be defined and transmitted. In addition, the digital signature verification server of the destination receiving the digital signature verification key is recorded in its database for future use. The database format used at this time has a tag ID, key type, key length, key, key type, key length, key, ..., key type, key length, and key structure 802. For example, if the key type of the master key is defined as 0x01 and the key type of the digital signature verification key is 0x02 to transfer the RFID master key of FIG. 4, the master key and the digital signature are simultaneously used using the above message format. The verification key can be delivered, and the master key and the digital signature key can be stored separately in the database format.

9 is a diagram illustrating the digital signature verification key acquisition according to the present invention.

Referring to the digital signature verification key acquisition according to the present invention in more detail based on the configuration shown in Figure 9 as follows.

The digital signature verification key acquisition according to the present invention means that the digital signature verification RFID reader in the management domain of the digital signature verification server acquires the digital signature verification key of the RFID tag securely from the digital signature verification server. This can be extended to the digital signature verification key transmission between the server and the RFID reader located in a common management domain.

First, as a first step, the digital signature verification RFID reader requests the corresponding digital signature verification key by sending the tag ID of the RFID tag entered into its communication area to the digital signature verification server managing the self. The message format used at this time has a structure 901 of the number of tags, packet length, tag ID, key type, tag ID, key type ..., tag ID, and key type. This is a configuration in which the digital signature verification RFID reader requests key information for a plurality of RFID tags at once. For example, if the key type of the master key is defined as 0x01 and the key type of the digital signature verification key is set to 0x02 to obtain the RFID master key of FIG. 5, the master key and the electronic key are simultaneously used using the above message format. You can request a signature verification key.

In a second step, the digital signature verification server responds with a digital signature verification key associated with the requested tag ID from the digital signature verification RFID reader. The message format used at this time is the number of tags, packet length, tag ID, key type, key length, digital signature verification key, tag ID, key type, key length, digital signature verification key, ..., tag ID, key type. , Key length, digital signature verification key structure 902. That is, not only can the electronic signature verification keys for a plurality of RFID tags be responded to through the message format, but also keys for other purposes than the digital signature verification key can be defined and transmitted. For example, if the key type of the master key is defined as 0x01 and the key type of the digital signature verification key is set to 0x02 to obtain the RFID master key of FIG. 5, the master key and the digital signature are simultaneously used using the above message format. Answer the verification key.

10 is a flowchart briefly illustrating an electronic signature verification key distribution and another application process according to the present invention. After the first digital signature server generates the signature key and the verification key, receives the data of the RFID tag through the first RFID reader under its jurisdiction and performs the digital signature (S1010), the RFID tag is stored in the RFID tag. The control unit transmits to the second electronic signature server that has jurisdiction over the area to be moved (S1020). Next, the second RFID reader detecting the RFID tag transmits the digital signature value obtained from the RFID tag to the second digital signature server (S1030), and finally, the second digital signature server sends the digital signature value. The process of transmitting the result to the second RFID reader (S1040) is terminated.

11 is a diagram illustrating the digital signature verification key distribution and another use according to the present invention.

The configuration is the same as that in FIG. The difference of the operating environment is that FIG. 7 shows that the digital signature verification RFID reader acquires the digital signature verification key and directly performs the digital signature verification operation, while FIG. 11 shows that the digital signature verification RFID reader does not obtain the digital signature verification key. After passing the value to the digital signature verification server, the digital signature verification server directly verifies the digital signature value and receives only the success or failure of the verification. The operating environment of FIGS. 7 and 11 may be selected according to traffic conditions and arithmetic processing capability between the digital signature verification server and the digital signature verification RFID reader.

Based on the operation shown in FIG. 11, the RFID electronic signature verification key distribution and utilization method according to the present invention will be described in more detail as follows.

First, as a first step, the digital signature RFID reader in the management domain of the digital signature server requests the tag ID of the RFID tag (S1101).

In a second step, the RFID tag responds with a tag ID to the digital signature RFID reader (S1102).

As a third step, the digital signature RFID reader requests the digital signature by sending data required for the digital signature to the digital signature server (S1103).

As a fourth step, the digital signature server generates a key pair of the signature key for the digital signature and the verification key for the digital signature verification, obtains the digital signature value for the data requested as the signature key, and responds to the digital signature RFID reader ( S1104).

As a fifth step, the digital signature RFID reader stores the electronic signature value in the RFID tag (S1105).

As a sixth step, the RFID tag responds to the digital signature RFID reader that the digital signature value has been successfully stored (S1106).

As a seventh step, the digital signature server delivers the digital signature verification key to the digital signature verification server of the next destination to which the RFID tag is to be moved. This process can be seen as a kind of key push (S1107).

As an eighth step, when the RFID tag enters the communication area of the digital signature verification RFID reader in the management domain of the digital signature verification server at the destination, the digital signature verification RFID reader requests a tag ID from the RFID tag (S1108).

As a ninth step, the RFID tag responds its tag ID to the digital signature verification RFID reader (S1109).

As a tenth step, the digital signature verification RFID reader requests the digital signature value from the RFID tag (S1110).

As an eleventh step, the RFID tag responds to the digital signature verification RFID reader at step S1111.

In a twelfth step, the digital signature verification RFID reader sends the digital signature value to the digital signature verification server to request verification (S1112).

As a thirteenth step, the digital signature verification server verifies the received digital signature value using the digital signature verification key held by the digital signature verification server and then responds to the digital signature verification RFID reader whether the verification succeeds or fails (S1113).

The key distribution method in different RFID systems according to the present invention can be embodied as computer readable codes on a computer readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet). Include. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

As described above, the key distribution method in the different RFID system according to the present invention enables the RFID reader to quickly and securely obtain a master key and an electronic signature key used for communication message protection between the RFID tag and the RFID reader. It has advantages. The effect of the method according to the invention with this advantage can be summarized as follows.

First, a key distribution method in different RFID systems according to the present invention is one master key request and one response to a database server that always manages itself to securely communicate with an RFID tag entered in its communication area. Since the master key can be obtained by receiving, there is an effect that the master key can be obtained quickly and securely compared to a plurality of requests, response methods, or a plurality of components.

Second, the key distribution method in the different RFID system according to the present invention is a one-time digital signature to the digital signature verification server that always manages itself to verify the digital signature value stored in the RFID tag entered in the communication area of the RFID reader Since the digital signature verification key can be obtained by requesting the verification key and receiving one response, the digital signature verification key can be obtained quickly and safely compared to the method that passes through a plurality of requests, response methods, or multiple components. .

 Finally, the key distribution method in the different RFID system according to the present invention is a message format used for RFID master key delivery and acquisition and RFID digital signature verification key delivery and acquisition of the tag ID, key type, key length, key value Because of the configuration, it is possible to transmit and manage the master key and the digital signature verification key all at once according to the needs of the application.

Claims (14)

(a) obtaining, by the first server managing the first RFID reader, the master key based on the ID of the RFID tag that operates for the first time in its jurisdiction; (b) providing the master key at the request of the first RFID reader; (c) transferring the master key to a second server that is in charge of an area where the RFID tag is to be moved; And (d) the second server delivering the master key at the request of a second RFID reader that recognizes the RFID tag entering its own jurisdiction. . The method of claim 1, wherein step (a) (a1) the first server requesting the ID of the RFID tag to the first RFID reader, and requesting the ID to the RFID tag from the first RFID reader according to the request; (a2) an RFID tag transmitting an ID to the first RFID reader according to the request, and the first RFID reader receiving the RFID tag to the first server; And (a3) receiving the master key after the first server accesses a server of the person who produced the RFID tag having the ID and requests a master key for the RFID tag; How keys are distributed in the system. The method of claim 2, wherein step (a3) comprises: (a31) requesting a master key for the RFID tag by designating one RFID ID and key type per one RFID tag; And (a32) receiving a response including information of an RFID tag ID, a key type, a key length, and a master key per one RFID tag. The method of claim 3, The master key request for the RFID tag in step (a31) includes a first tag number field, a first packet length field, a first tag ID field, and a first key type field. The one key type field has a structure repeating according to the number of tags in the first tag number field, The response may include a second tag number field, a second packet length field, a second tag ID field, a second key length field, and a second master key field and according to the number of tags in the second tag number field. And a second key length field and a second master key field, each having a structure of repeating. The method of claim 2, The server and the RFID tag of the person who produced the RFID tag A key distribution method in different RFID systems, wherein the master key is stored. The method of claim 1, wherein step (c) The first server has a configuration of a third tag number field, a third packet length field, a third tag ID field, a third key type field, a third key length field, and a third master key field. The third tag ID field, the third key type field, the third key length field, and the third master key field are transmitted to the second server as a message having a repeating data format according to the number of tags in the field. Key distribution method in different RFID systems. The method of claim 1, wherein step (d) (d1) requesting, by the second RFID reader, a master key by designating one RFID ID and one key type per RFID tag to the second server; And (d2) the second server responding to the second RFID reader the information including the information of the RFID tag ID, key type, key length, and master key per one RFID tag; Key Distribution Method in RFID System. The method of claim 7, wherein The request of the master key includes a fourth tag number field, a fourth packet length field, a fourth tag ID field, and a fourth key type field, wherein the fourth tag ID field and the fourth key type field are the fourth tag. It has a structure that repeats according to the number of tags in the number field, The response includes a fifth tag number field, a fifth packet length field, a fifth tag ID field, a fifth key type field, a fifth key length field, and a fifth master key field and the number of tags in the fifth tag number field. And a fifth tag ID field, a fifth key type field, a fifth key length field, and a fifth master key field according to each other. (a) generating a signature key and a verification key by the first digital signature server and receiving data of an RFID tag through a first RFID reader under its jurisdiction to perform digital signature; (b) transferring the verification key to a second digital signature server that has jurisdiction over the area where the RFID tag is to be moved; And (c) the second digital signature server transferring the verification key at the request of a second RFID reader that recognizes the RFID tag entering its own jurisdiction; and a key in a different RFID system. Distribution method. (a) generating a signature key and a verification key by the first digital signature server and receiving data of an RFID tag through a first RFID reader under its jurisdiction to perform digital signature; (b) transferring the verification key to a second digital signature server that has jurisdiction over the area where the RFID tag is to be moved; (c) transmitting, by the second RFID reader detecting the RFID tag, the digital signature value obtained from the RFID tag to the second digital signature server; And and (d) verifying the digital signature value by the second digital signature server and transmitting the result to the second RFID reader. The method of claim 9 or 10, wherein step (a) (a1) generating a signature key and verification key pair by the first digital signature server; (a2) the first RFID reader requesting and receiving an ID from the RFID tag; (a3) the first RFID reader transmitting data requiring an electronic signature to the first digital signature server; (a4) the first digital signature server obtaining the digital signature value for the data using the signature key and transmitting the digital signature value to the first RFID reader; And (a5) the first RFID reader storing the digital signature value in the RFID tag. The method of claim 9 or 10, wherein step (b) The first digital signature server has a configuration of a first tag number field, a first packet length field, a first tag ID field, a first key type field, a first key length field, and a first digital signature verification key field. The second digital signature server is a message having a data format in which the first tag ID field, the first key type field, the first key length field, and the first digital signature verification key field repeat according to the number of tags in the first tag number field. A key distribution method in different RFID systems, characterized in that the forwarding. The method of claim 9, wherein step (c) (c1) requesting, by the second RFID reader, a verification key by designating one RFID ID and a key type per one RFID tag to the second digital signature server; And and (c2) responding, by the second digital signature server, the second RFID reader to the RFID tag ID, key type, key length, and verification key information on the RFID tag. A key distribution method in different RFID systems. The method of claim 13, The request for the verification key includes a second tag number field, a second packet length field, a second tag ID field, and a second key type field, wherein the second tag ID field and the second key type field are the second tag. It has a structure that repeats according to the number of tags in the number field, The response includes a third tag number field, a third packet length field, a third tag ID field, a third key type field, a third key length field, and a third verification key field and the number of tags in the third tag number field. And a third tag ID field, a third key type field, a third key length field, and a third verification key field according to each other.

Images