US 7,277,016 B2Grant
System and method for disabling RFID tags
Issue Date:2007-10-02
•4 Claims
•6 Drawing Sheets
Abstract
The invention provides protection to wireless portable transponders from unauthorized interrogation by employing a mechanism for disabling reception by or from the antenna of the transponder. Transponders include RFID tags that are attached to items that a persons may purchase or carry. Such transponders generally have an ability for receiving and storing electronic and other information, commonly in binary form using memories as in electronic circuits, etc. The invention is designed to provide privacy of electronic information. The tags can be protected from receiving or providing unauthorized or unwanted information. The invention provides the mechanism that permit the owner to decide when reception/interrogation of personal or other information is not desired by employing the provided mechanical disable control.
Metadata
Assignee
- International Business Machines Corporation
Inventors
- Paul Andrew Moskowitz
- Robert J. von Gutfeld
- Guenter Karjoth
Application Information
Application Number:US 10/946,975
Filing Date:2004-09-22
Priority Date:2004-09-22
Art Unit:2612
Classifications
IPC:
G08B13/14
Patent Drawings (6 sheets)
Description
Field of the Invention
[0001] The present invention is related to providing wireless portable transponders, such as cards and RFID tags, with user controlled means for disabling the tags as protection from an unauthorized interrogation. More particularly, the invention provides mechanical means that permit a user to decide to disable a tag and observe that the tag has been effectively disabled when transponder reception/interrogation of personal or other information is undesirable.
Background of the Invention
[0002] Portable transponders, employ RFID, Radio Frequency Identification, as the technology used to collect highway tolls, to serve as personal identification for access control, and to provide means for electronic information interchange, such as credit, etc. Passive RFID tags (i.e. tags without internal power sources such as batteries) and wireless cards contain chips, (also known as computer chips, microchips, memory chips) which store identification and other information, such as credit card numbers, financial data, etc. Tags may be applied to items to identify the item in much the same way that bar codes are used for identification purposes. Information is retrieved from a tag as well as the wireless cards of the present invention by an RFID base station or reader when the tag or card is scanned with radio waves by the reader. The tags may draw their power to function from the interrogation field supplied by the base (read/write) station.
[0003] Passive tags are described in U.S. Pat. No. 3,713,148,Card Apparatus and System, issued to Cardullo and Parks. In its simplest form the RFID tag or device includes a circuit, typically a silicon chip, although more than one chip may be used in the construction of the RFID device.
[0004] The circuit is generally connected to an antenna. The RFID device or card may take on a variety of forms including that of a tag, a key fob, or a card. As previously mentioned, a battery may also be employed to extend the range of the device. It is also possible in principle to build devices that function as tags or wireless cards using electrical circuits including only resistors, capacitors and inductors as is well known by those skilled in the art.
[0005] Large scale retailers and their suppliers are pursuing Radio Frequency Identification, RFID, tagging for supply chain tracking of goods. Demonstrations of RFID for item tagging will lead to point of sale check out and data collection. For the item tagging application, RFID tags are attached to some part of an item that is being inventoried or is for sale. The attachment may be such that the tag is not visible since the tag may be placed within a container section of the item or packaging material of the item. Removal of the tag after it is no longer useful can become difficult if not impossible for many practical situations. Thus, the tag will in many cases remain attached to the item that has been sold to a customer. This makes it possible for the tag to be read after the point of sale. This in turn leads to a question of the privacy of the purchaser or customer. The issue of privacy is of utmost concern. It is therefore desirable under some circumstances to deactivate or disable the RFID tag after the point of sale without having to physically remove the tag. Deactivation of the tag is one way to assure privacy.
[0006] Temporary deactivation of tags may not satisfy privacy concerns. RFID protocol proposals include a kill command that renders the tag inoperable. This kill command is often referred to as a “Privacy” command—which can be used to permanently deactivate the device at the end of its working life, for example as a customer leaves a store. However, there are two problems associated with the kill command. First, the execution of a kill command is only protected by a short password, 8 bits for example. Organizations using RFID tags are therefore concerned that unauthorized people may (easily) be able to deactivate them even before point of sale. Second, consumers are afraid that the kill command may not permanently “destroy” a tag. The entity who made the tag may also have means to reactivate it.
Summary of the Invention
[0007] An aspect of the present invention, is to provide transponder information exchange privacy and control by providing tag structures that make it possible for a user to mechanically alter the tag in such a way so as to inhibit the ability of a base station or reader to interrogate the RFID tag or transponder by wireless means for those tags that are readily accessible by the holder of the tagged item.
[0008] It is also the aim of this invention to provide a system and method for the permanent deactivation or disabling of wireless RFID tags unless electromechanical means are undertaken to reactivate. Such reactivation would require deliberate actions on the part of the owner of the RFID tag to permit the reactivation to take place and could not be undertaken without the owner's knowledge unless the item were either stolen or deliberately left unattended. It is further the aim of this invention to provide a system and method for the visual confirmation that a tag has been deactivated.
[0009] Another aspect of the present invention, is to enable a holder of a tagged device to protect his/her privacy by deactivating the RFID tag at will, while also making it possible for an establishment to interrogate the tag at the holder's discretion by means of mechanical probing.
[0010] In order to utilize the methods of disabling to be described we also require a method for manufacturing a wireless RFID tag where these disabling techniques to be described can be utilized. The manufacturing method consists in the assembly of a memory chip with an externally accessible antenna connected to the chip. The chip and antenna are mounted on some mounting means such as a non-electrically conducting substrate. The antenna is coupled to the memory chip by way of an electrical conductor passing through an exterior portion of the substrate and at least a portion the externally mounted antenna and the antenna connection in the form of an electrical conductor can be mechanically removed when it is desired to disable interrogation of said RFID tag.
Brief Description of the Drawings
[0011] The above and other objects, features, and advantages of the present invention will become more apparent from the following detailed description when taken in conjunction with the accompanying drawings, in which:
[0012] FIG. 1 illustrates an example of a system of the invention;
[0013] FIG. 2 shows a flow diagram illustrating a disabling function;
[0014] FIG. 3 is an example of an RFID tag, whose antenna is constructed of a scratch-off conducting material;
[0015] FIG. 4 shows an RFID tag in which the antenna may be disconnected by mechanical means;
[0016] FIG. 5 shows an RFID tag in which the antenna may be removed by mechanical means.
Detailed Description of the Invention
[0017] The present invention provides methods, systems and apparatus to protect wireless transponders, such as RFID tags that may be carried on a person, from an unauthorized interrogation. Such tags have means for receiving and storing electronic information, commonly in binary form using memories and/or electronic circuits, typically, but not exclusively such as chips containing ‘bits’ to store the information. The invention is designed to provide privacy of this type of electronic information and yet permit the information to be queried later through mechanical or ohmic contact at the user's discretion. At the same time the tags can be protected from receiving unauthorized or unwanted information. The invention provides means that permit a user, generally the owner, to decide when reception/interrogation of this personal information is desirable by simple mechanical means. The disabling of the tag to prevent interrogation of the RFID consists in physically damaging at least a portion of an interrogation circuit in said RFID tag.
[0018] FIG. 1 , illustrates a system of the invention 100. A person or cardholder 110 carries at least one tagged item 115 which has at least one wireless or RFID tag 120 attached to the item 115, the card being interrogated by an RFID reader 150 which may be located at a point-of-sale, POS, terminal, the reading transmitted to a computing network. The RFID tag has an antenna 125 connected to a chip on the tag which provides a means for communication to the chip. The card may be read through the use of an electromagnetic, EM, signal 160 that provides means for communication between the tag 120 and a reader 150. Information received by the reader 150 may be transferred to a computing system 170 where it is processed and stored in a database. The system 170 may in turn be connected to a network 180 which makes possible the exchange of information with other computing systems. In order to protect the privacy of the person 110, the tag 120 is constructed with a built in means for separating the antenna from the chip. Thus, the user may mechanically and electrically disconnect the antenna from the chip. FIG. 2 shows a flow diagram 200 illustrating the disable function. In order to be able to assure a consumer that a tag has been deactivated, we provide a method, FIG. 2 , wherein there is confirmation of the deactivation of an RFID tag by physical inspection or electronic confirmation. Tags are deactivated by the physical destruction of the tag antenna. This is accomplished by means that are familiar to consumers. Alternatively, tags can be destroyed by destruction of the wiring that is attached to the antenna for those cases where the wiring is accessible to the customer.
[0019] In the normal state of use for a tag, following ‘begin’ 201, the tag is functioning and may be confirmed to be functioning by means of a test 205. The test may consist of placing the tag within the field of an RFID reader, and then using the RFID reader to read information held in the memory of the chip on the RFID tag. If continued functioning is desired 210, no more is done. If the functioning is not desired 210, e.g. the user wishes that the tag may not be read by wireless means, the antenna is disabled 215. The disabling of the antenna is accomplished by mechanical means as described in the figures below. Additionally, the disabling of the antenna function may be confirmed by visual inspection. After the tag is disabled, the disabling may be confirmed by means of a test 220, leading to ‘end’ 290. However, visual inspection is the preferred method to determine the tag has been disabled.
[0020] Alternatively, if the object is simply to have the tag disabled, there is no need to first test to see if the tag is enabled. Rather, the mechanical disconnection of the antenna connection to the chip or the mechanical destruction of the antenna itself is adequate to assure that wireless radio signals will not be received and will not be conveyed to the chip. This will disable the tag. The disconnection may be confirmed by visual inspection.
[0021] FIG. 3 is an example of an RFID tag that may be disabled by a mechanical means 300. In this embodiment, the antenna is constructed of conducting “scratch-off material”. Such material is familiar to consumers in its use to obscure printed material on lottery tickets. Behm et. al. describe the use of such material to construct scratch-off circuits to use in lottery ticket applications, U.S. Ser. No. 5,599,046, and document verification, U.S. Ser. No. 5,997,044, herein incorporated by reference. Ask, France, (http://www.ask.fr/uk/technology/ask_technology.html) is a company that manufactures printed conducting circuits.
[0022] In our system, the antenna 310 of the RFID tag 305 is manufactured upon a substrate 350 using the scratch off material. The substrate 350 or mounting means may be a plastic material such as polyimide or polyester. The chip 320, also called a memory chip, is mounted on the substrate and is connected to the antenna 310 by an electrical conductor or conductors 345. The RFID tag is manufactured in such a way that some or all of the antenna or its connecting wiring is exposed. The electrical conductor or conductors 345 pass through a window 340, e.g. an exterior portion of the substrate or mounting means. For instance, an open window 340 in a covering substrate may be built into the tag at or in the region of the connection of the antenna 310 to the chip 320. Such tags are placed on the article or on its packaging in such a way that the antenna or the antenna chip connection may be scratched-off using a coin, a fingernail, or other such object.
[0023] Thus, the consumer or a check-out attendant in a retail establishment, may perform the scratch-off operation to disable interrogation of the tag. The tag is open for visual observation for the confirmation of the disabling of the tag.
[0024] FIG. 4 shows a second embodiment 400. Perforations 440 such as those used to enable the separation of postage stamps from each other are manufactured into the antenna and its substrate in such a manner that a separation along a line of perforations, separates the antenna 410 from the chip 420, or a sufficient portion of the antenna from itself so as to disable the RFID tag 405. A single or double line of perforations may be designed into the structure. In some cases the perforations are on a perforated transparent adhesive sheet. A pull tab 450 may be added to facilitate the separation. In this embodiment a double line of perforations is employed. Thus, the consumer or a check-out attendant in a retail establishment, may perform the separation operation to disable the tag. The tag is open for visual observation for the confirmation of the disabling of the tag. There may also be an auxiliary specialized reader in the retail establishment to give additional confirmation that the tag has been destroyed or permanently disabled. Here, the customer can place the item with the tag within the reading range of the special reader to further ascertain that the tag can no longer be read. This reader could simply give a signal such as a continuous blinking light or the like to indicate that the tag which is within the proper range of the special reader is not sending back a signal, i.e. is not being read.
[0025] FIG. 5 shows a third embodiment 500. The antenna 510 or portion of the antenna is sandwiched between two layers of packaging material. The sandwich is manufactured in such a manner that the adhesion of the antenna to the upper layer of the packaging material is greater than its adhesion to the lower layer which in turn is affixed to the purchased item. This produces a peel-off layer 540 affixed by an adhesive material or layer to the antenna. The antenna is removed or destroyed, e.g. delaminated, by pulling the upper layer of material from the tag 505, removing the antenna with it. A pull tab 550 i-s is connected to the upper layer of packaging is used to facilitate the delamination process. The tag may be designed in such a way that only a portion of the antenna is removed, the portion that is above the peel-off line 545. This leaves a pair of short antenna lines, or stubs, 560 attached to the chip 520.
[0026] Another method for disabling the tag is one where the antenna is formed on a decal with the ends of the antenna in electrical contact with the connecting stubs. Removal of the decal removes the antenna thereby disabling the chip from receiving any wireless radio frequency communication.
[0027] Under normal circumstances, the above mentioned methods of removing all or a portion of the antenna would disable the functioning of the antenna and thus the functioning of the RFID tag or transponder in such a way that interrogation of the tag by wireless means is no longer feasible. However, the remaining short antenna stubs 550 may be electrically contacted by mechanical probes (the probes electrically connected to one another) allowing the reading of the tag through an ohmic contact directly to the stubs. These probes may have sharp or sharpened ends in order to pierce any thin protective layer overlaying the portion of the antenna or stubs still remaining after previous disablement, i.e. resulting from tearing off or destroying the major portion of the antenna as previously described. Thus, even if a tag is disabled from a wireless point-of-view, a consumer may allow the tag to be read, for example, by a retail establishment when an item that the tag is attached to is returned for a refund or credit. Again, the successful disabling of the tag may be confirmed by visual inspection or through use of the auxiliary reader described above.
[0028] It is noted that the foregoing has outlined some of the more pertinent objects and embodiments of the present invention. This invention may be used for many applications. Thus, although the description is made for particular arrangements and methods, the intent and concept of the invention is suitable and applicable to other arrangements and applications. It will be clear to those skilled in the art that modifications to the disclosed embodiments can be effected without departing from the spirit and scope of the invention. The described embodiments ought to be construed to be merely illustrative of some of the more prominent features and applications of the invention. Other beneficial results can be realized by applying the disclosed invention in a different manner or modifying. the invention in ways known to those familiar with the art.
Claims
We claim:
1. An apparatus to manufacture a wireless RFID tag, said apparatus comprising:
means for providing a memory chip, an antenna, and a mounting means for mounting said memory chip and said antenna; and
means for coupling said memory chip to said antenna with an electrical conductor passing through an exterior portion of said mounting means, at least a portion of said electrical conductor being removable when it is desired to disable interrogation of said RFID tag.
2. An apparatus as recited in claim 1, said apparatus further comprising:
means for disabling an interrogation of said RFID tag by physically damaging at least a portion of an interrogation circuit in said RFID tag so as to damage said RFID tag.
3. An apparatus as recited in claim 2, wherein the means for disabling the interrogation of said RFID tag by physically damaging at least a portion of the interrogation circuit in said RFID tag, comprises means taken from a group of means consisting of: means for scratching off a connection emanating from the antenna within said RFID tag, means for scratching off the antenna, means for removing a connection to the ends of the antenna, means for peeling off a layer containing the antenna, said antenna in contact with contacts connected to the input chip of said RFID tag, means for removing said portion of said electrical conductor, and means for damaging the connection to the input chip.
4. An apparatus as recited in claim 2, wherein said electrical conductor has a limitation taken from a group of limitations consisting of:
said electrical conductor being a portion of said antenna;
said electrical conductor being formed on a removable layer of said mounting means;
said electrical conductor being covered by an adhesive material adhering to said electrical conductor;
said electrical conductor being covered by an adhesive material adhering to said electrical conductor, wherein said adhesive material having perforation surrounding at least a portion of said electrical conductor, said perforation formed such as to simplify removal of said adhesive material from said mounting means in a manner causing removal of said electrical conductor;
said mounting means comprising a first adhesive layer firmly affixed to the top surface of at least a portion of said electrical conductor, and a second adhesive layer less firmly affixed to the bottom surface of said electrical conductor;
said electrical conductor being covered by an insulating layer with a window giving access to said electrical conductor; and any combination of these limitations; wherein a disconnection in said electrical conductor may be observed by visual inspection.
Patent Citations (15)
| Patent | Date | Inventor | Cited By |
|---|---|---|---|
| US4728938(A) | 1988-03-01 | Kaltner | Applicant |
| US4835524(A) | 1989-05-01 | Lamond et al. | Applicant |
| US6025780(A) | 2000-02-01 | Bowers et al. | Applicant |
| US6050622(A) | 2000-04-01 | Gustafson | Examiner |
| US6181248(B1) | 2001-01-01 | Fockens | Applicant |
| US6317028(B1) | 2001-11-01 | Valiulis | Applicant |
| US6796508(B2) | 2004-09-01 | Muller | Examiner |
| US7034689(B2) | 2006-04-01 | Teplitxky et al. | Examiner |
| US7098794(B2) | 2006-08-01 | Lindsay et al. | Examiner |
| US2002/0117543(A1) | 2002-08-01 | Kocznar et al. | Applicant |
| US2002/0149468(A1) | 2002-10-01 | Carrender et al. | Applicant |
| US2004/0189470(A1) | 2004-09-01 | Girvin et al. | Examiner |
| US2005/0128087(A1) | 2005-06-01 | Claessens et al. | Examiner |
| US2006/0017545(A1) | 2006-01-01 | Volpi et al. | Examiner |
| EP1010152 | 2004-04-01 | Applicant |
Non-Patent Literature (13)
- International Publication No. WO 02/084584 published on Oct. 24, 2002.Applicant
- “Overcoming the Consumer Privacy Concerns of Product Tracking Through RFID Tags,” SANS Institute 2004, Steve Hankel, GIAC Security Essentials Certification (GSEC).Applicant
- Juels, A. et al. “The Blocker Tag: Selective Blocking of RFID Tags for Consumer Privacy.” .Applicant
- “Active Breakthrough Performance through RFID Radio Frequency Identification Technology,” Internet URL: http://www.rfida.com/rfidtech.htm.Applicant
- “NCR Prototype Kiosk Kills RFID Tags,” RFID Journal, Internet URL: http://www.rfidjournal.com/article/articleprint/585/-1/1/.Applicant
- “RFID Backlash Prompts ‘Kill’ Feature,” by Junko Yoshida, Apr. 28, 2003, Internet URL: http://www.eetimes.com/article/showArticle.jhtml?articleId=12803964.Applicant
- “STMicroelectronics Launches UHF RFID Chip Fully Supporting EPCglobal Class 1 Specification,” Internet URL: http://www.st.com/stonline/press/news/year2004/p1462m.htm.Applicant
- “ELocity Inc., Friday's Stock Focus Alerts You on RFID Technology,” Florida, Apr. 16, 2004, Internet URL: boston.com.Applicant
- “EnXnet's Emerging Technology Solves Privacy Concerns,” Oklahoma, Apr. 15, 2004, Internet URL: boston.com.Applicant
- “EnXnet's RFID Deactivation Device Vital Role in the Consumer Marketplace,” Oklahoma, Apr. 20, 2004, Internet URL: boston.com.Applicant
- Juels, A. et al. “The Blocker Tag: Selective Blocking of RFID Tags for Consumer Privacy.”, date unknown.Applicant
- “Active Breakthrough Performance through RFID Radio Frequency Identification Technology,” Internet URL: http://www.rfida.com/rfidtech.htm, date unknown.Applicant
- “NCR Prototype Kiosk Kills RFID Tags,” RFID Journal, Internet URL: http://www.rfidjournal.com/article/articleprint/585/-1/1/, 2004.Applicant