SBIR Phase I: Security Solutions for UHF passive Radio Frequency Identification (RFID) tags

这个小型企业创新研究第一阶段项目调查了在制药行业的无源UHF RFID标签中实施强公钥加密的可行性。制药行业每年因药品假冒和差异化而蒙受的损失超过400亿美元，这直接威胁到患者的安全。FDA正在敦促该行业采用RFID技术来缓解这些威胁，但如果不能确保标签上数据的安全，仍将面临巨大的风险。由于缺乏机载安全，今天的标签无法保护用户免受未经授权的阅读、复制或跟踪。SecureRF已经开发出一种安全协议，它比任何其他密码功能都要小几千倍，速度也快几千倍。第一阶段的预期结果是确定在无源EPCglobal第二代UHF RFID标签中实施该协议的可行性。药品必须受到保护，不受假冒和盗窃的影响，这会影响公共安全并推高消费药品价格。如果没有安全措施，FDA建议使用RFID标签可能会带来新的社会威胁，包括HIPAA下的患者隐私问题。该项目的其他商业价值将来自高价值资产跟踪、非接触式支付系统、国防和国土安全(包括边境安全)和近场通信。预计RFID市场规模为15亿至20亿美元，预计2015年将增长至269亿美元左右。如果成功，将开发一种新的低占用空间认证协议来应对这些商业机会。

This Small Business Innovation Research Phase I project investigates the feasibility of implementing strong public key cryptography within passive UHF RFID tags for the pharmaceutical industry. The pharmaceutical industry incurs over $40B in annual losses due to drug counterfeiting and divergence which directly threatens patient safety. The FDA is urging the industry to adopt RFID technology to mitigate these threats but a large exposure remains if the security of the data on the tag can not be ensured. Today's tags cannot protect the user from unauthorized reading, copying, or tracking due to the lack of onboard security. SecureRF has developed a security protocol which is thousands of times smaller and faster than any other cryptographic function. The anticipated result of Phase 1 is to determine the feasibility of implementing this protocol within passive EPCglobal Gen 2 UHF RFID tags. Pharmaceuticals must be protected from counterfeiting and theft which impacts public safety and drives up consumer drug prices. Without security, the FDA recommended use of RFID tags could introduce new societal threats including patient privacy concerns under HIPAA. Additional commercial value from this project will come from high value asset tracking, contactless payment systems, Defense and Homeland Security including border security, and Near Field Communications. The RFID market is estimated at $1.5-2.0 billion with a projected growth to around $26.9 billion in 2015. If successful, a new low-footprint authentication protocol to address these commercial opportunities will be developed.