Using RFID to Protect System Firmware

Breeching the security of safety- or security-intensive products such as auto parts, set top boxes, military electronics, or smart batteries can be a lucrative business that is well worth the nominal investment required to create lookalike packaging and labeling, or to change the system firmware to allow unpaid access to licensed content. Because the counterfeiter does not incur any of the costs associated with product development, he quickly covers his capital investment at the expense of the authentic product manufacturer or service provider.

Classic solutions to counterfeiting have been tamper resistant/evident packaging, and special label markings. However, any information that is visible on the product can be cloned and the clones can be used to make fake products appear authentic. RFID, which is typically viewed as a next-generation barcode technology for the automation of inventory control and product tracking, can also ensure the security of end-product firmware and protect against product counterfeiting, while also maintaining a secure record of a product’s ingredients, chain of custody and environmental conditions from raw material acquisition all the way through to purchase by the end user.

RFID devices can be as small as a grain of rice, with enough memory to store encryption keys, algorithms and chain of ownership information. They do not require direct line-of-sight for access, allowing them to be embedded into virtually any product, including drug vials, cosmetics or jewelry.

On their own, RFID labels are not at all secure because the product information is broadcast over the air and can be intercepted easily using a sub-$100 RFID reader. However, there are RFID implementations that provide security that approaches that of a secure microcontroller.