SBIR Phase II: Security Solutions for UHF passive Radio Frequency Identification (RFID) tags

这个小企业创新研究（SBIR）第二阶段项目将开发和原型无源超高频RFID标签，并为制药行业实现强大的公钥加密。在被动标签上直接实现加密是一项重要的创新，因为当前的安全解决方案无法有效地满足这一需求。食品及药物管理局敦促美国制药业采用射频识别技术，以协助执行家谱法和减少假冒药品。然而，今天的RFID标签不能保护用户免受未经授权的读取、复制或跟踪，因为它们缺乏机载安全性。因此，由于无法确保标签上数据的安全性，因此仍然存在很大的暴露。SecureRF正在开发一种安全协议，它比任何其他加密功能都要小几千倍，速度也快几千倍。安全标签将使药品制造商和分销商能够确保患者安全和药品完整性，并改善其供应链流程。这个SBIR项目的目标是每年处理超过40亿美国处方的制药行业供应链。药品必须受到保护，防止假冒和盗窃，因为假冒和盗窃会影响公共安全，推高消费者药品价格。如果没有机载安全，FDA推荐使用RFID标签可能会无意中引入新的社会威胁，包括HIPAA下的患者隐私问题。安全RFID标签的使用还将使制药行业更有效地运行其供应链。除了军事和国土安全需求外，该项目的额外商业价值还将来自为高价值资产跟踪和非接触式支付系统开发安全产品。现有的加密算法无法在无源RFID标签等资源受限的计算设备上提供强大的身份验证和数据保护。这个SBIR提案提供了一个具有广泛意义的突破，将有助于推进对小型、低功耗计算设备的公钥加密技术的理解。

This Small Business Innovation Research (SBIR) Phase II project will develop and prototype passive UHF RFID tags implemented with strong public key cryptography for the pharmaceutical industry. Implementing cryptography directly on passive tags is a significant innovation as current security solutions cannot address this need effectively. The FDA is urging the United States pharmaceutical industry to adopt RFID technology to assist with the enforcement of pedigree laws and reduce drug counterfeiting. Today's RFID tags, however, cannot protect the user from unauthorized reading, copying, or tracking because they lack onboard security. Thus, a large exposure remains since the security of the data on the tag cannot be ensured. SecureRF is developing a security protocol which holds the promise of beings thousands of times smaller and faster than any other cryptographic function. Secured tags will enable drug manufacturers and distributors to ensure patient safety and drug integrity as well as improve their supply chain process.This SBIR project targets the pharmaceutical industry supply chain which handles over 4 billion U.S. prescriptions annually. Pharmaceuticals must be protected from counterfeiting and theft which impacts public safety and drives up consumer drug prices. Without onboard security, the FDA's recommended use of RFID tags could inadvertently introduce new societal threats including patient privacy concerns under HIPAA. The use of secure RFID tags will also enable the pharmaceutical industry to run their supply chain more efficiently. Additional commercial value from this project will come from developing secure products for high value asset tracking and contact-less payment systems in addition to military and Homeland Security needs. Existing cryptographic algorithms cannot provide strong authentication and data protection on resource-constrained computing devices like passive RFID tags. This SBIR proposal offers a breakthrough with broad-based significance that will help advance the technological understanding of public key cryptography for small, low powered computing devices.