Patent Application
20090115600
This application claims priority from Korean Patent Application No. 10-2007-0112425, filed on Nov. 6, 2007, in the Korean Intellectual Property Office, the entire disclosure of which is incorporated herein by reference.
1. Field of the Invention
The present invention relates to a Radio Frequency Identification (RFID) personal privacy control system and a personal privacy protection method using the same, and more particularly, to an RFID personal privacy control system and a personal privacy protection method using the same which may dynamically process a privacy level according to surrounding circumstances of an RFID tagged object and an owner of the object, thereby securely protecting personal information associated with the RFID tag. The RFID tag according to the present invention may include a tag attached to an object capable of being personalized, a tag for identifying a user, and the like, and be applicable to all objects and fields dealing with personal privacy.
This work was supported by the IT R&D program of MIC/IITA. [2005-S-088-03, Development of Security Technology for Secure RFID/USN service]
2. Description of Related Art
In general, a Radio Frequency Identification (RFID) refers to technology which may contactlessly read or record information from a tag having an unique identification number using a radio frequency to thereby recognize, trace, and manage objects, animals, persons, and the like to which the tag is attached. For example, at the time of shipping products by a manufacturer after the RFID technology has been introduced in a distribution system, a worker may be instructed to load the product on a specific transportation vehicle using information of an RFID tag attached to the product. Also, at the time of delivering the product to a corresponding shop, a number of products being in stock or the product name in the corresponding shop may be quickly evaluated by recognizing the RFID tagged product, thereby enabling effective ordering of the product. Also, when the products are delivered to a corresponding consumer, malfunction of the product in use and a time when the malfunction occurs may be detected using the RFID tag, thereby timely providing personalized services such as informing about replacement of the product in advance. Also, the consumer may verify authenticity of the product using the RFID tag, and the manufacturer may verify a distribution process of the product, thereby significantly improving qualities of services.
Applications of the RFID tag have been gradually expanded such as continuously providing services even after the product has been sold, being used for identifying the user, and the like other than production and distribution of the product.
In this regard, in the case where the RFID tag is used for identifying the user, exposure of personal information of the user may occur through the RFID tag, which results in causing problems in privacy of individuals. Further, when the user carries one's own object, severe personal privacy infringement may occur through an illicit reader in radio environments, such as exposure of information on one's own object, illicit information retrieval, abuse of personal information, and the like.
In the conventional art, to overcome the above-described problems, a privacy protection framework design based on a profile is utilized for the purpose of protection of the privacy. More specifically, the privacy protection framework design may have a structure in which a user connects with a privacy server linked with an information server to thereby determine one's own privacy level.
As an example for protection of privacy in the conventional RFID service network, the user may determine the privacy level, and also determine a third party capable of accessing to RFID tag information for each level, so that another third party having a different privacy level is prevented from accessing to the RFID tag information, thereby protecting the privacy. In this manner, since a protection degree of the privacy may vary according to a user's circumstance, the user is required to determine the privacy level each time connecting with the privacy protection framework. As a result, when the privacy level is not timely determined in accordance with the user's circumstance, access of another user to the RFID tag information is not able to be flexibly allowed depending on the circumstances.
For example, in the case of an ID tag identifying a patient, a doctor of another hospital other than an existing hospital where a medical treatment with respect to the patient has been performed is not allowed to access a personal treatment history of the patient due to protection of the privacy, which results in causing inconvenience in the medical treatment. Also, disadvantageously, all family members except one may be not allowed to access information about tagged home electronic appliances belonging to the one family member even in the same house. Also, at the time of one's own emergency, a lifeguard may not be allowed to access a treatment history of the individual due to the privacy level previously determined, and thus failing to administer a proper first aid treatment.
Therefore, a new RFID security system and method using the same according to the present invention which may securely protect personal information against infringement of the personal privacy while overcoming the above-described problems are disclosed. Specifically, the RFID security system and method using the same are disclosed, in which a control of the privacy may be more flexibly processed according to location and time in which a tagged object and an owner of the object are present.
An aspect of the present invention provides a Radio Frequency Identification (RFID) personal privacy control system and a personal privacy protection method using the same which may flexibly adjust a privacy level according to a user's circumstance, time, and location even without directly connecting with a system by the user to determine the privacy level, thereby providing object information (or RFID tag information) in accordance with a corresponding privacy level.
An aspect of the present invention provides an RFID personal privacy control system and a personal privacy protection method using the same which may prevent illicit exposure of information about an RFID tagged object and an owner of the object.
An aspect of the present invention provides an RFID personal privacy control system and a personal privacy protection method using the same which may transmit a processing result based on log and audit operations, thereby increasing reliability in security of the privacy.
An aspect of the present invention provides a RFID personal privacy control system and a personal privacy protection method using the same which may dynamically change and process an authorization for security services according to a user's circumstance, thereby providing various supplementary services.
According to an aspect of the present invention, there is provided a RFID privacy control server, which includes a context-aware information collecting unit to collect at least one context-aware information about a user; a privacy level adjusting unit to adjust a privacy level of the user based on the collected context-aware information; and a privacy control unit to determine, according to the adjusted privacy level, whether access of an RFID reader to RFID tag information is allowed, the RFID tag information corresponding to an RFID tag associated with the user.
According to an aspect of the present invention, there is provided an RFID information server based on context-awareness, which includes a context-aware information transmitting unit to transmit context-aware information collected from a context-aware sensor to an RFID privacy control server; a privacy level receiving unit to receive, from the RFID privacy control server, a privacy level adjusted according to the context-aware information; a security information generating unit to generate RFID tag information having been privacy-processed according to the adjusted privacy level; and a tag information transmitting unit to transmit the privacy-processed RFID tag information to a RFID reader.
According to an aspect of the present invention, there is provided an RFID personal privacy protecting method based on context-awareness, which includes collecting at least one context-aware information about a user, and classifying the collected information according to a predetermine criterion; estimating correlation between the classified context-aware information; adjusting a privacy level according to the context-aware information based on the estimated correlation; and determining, according to the adjusted privacy level, whether access of an RFID reader to RFID tag information is allowed, the RFID tag information corresponding to a RFID tag associated with the user.
The above and other aspects of the present invention will become apparent and more readily appreciated from the following detailed description of certain exemplary embodiments of the invention, taken in conjunction with the accompanying drawings of which:
Reference will now be made in detail to exemplary embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout. Exemplary embodiments are described below to explain the present invention by referring to the figures.
As illustrated in
The context-aware sensor 201 collects context-aware information about change in a tagged object and a user's circumstance. The collected context-aware information is transmitted to the RFID privacy control server 206, and the RFID reader 202 receives, from the RFID information server 204, RFID tag information to correspond to the context-aware information.
The RFID reader 202 according to the present embodiment of the invention may include a camera module for reading specified code information recorded in an RFID tag, a Code Division Multiplexing Access (CDMA) module, a Bluetooth module, an Infrared Data Association (IrDA) module, a radio communication module, and the like which are embedded therein. In
The integrated middleware 203 may denote an EPC middleware which connects RFID information read in the RFID reader 202 and the RFID application 205, and may be embodied as an Application Level Event (ALE) RFID I/F and Sensor Event (SE) RFID I/F of an EPC network standard. The integrated middleware 203 may receive, from the RFID information server 204, tag information corresponding to the tag ID, and transmit the received tag information to the RFID reader 202.
The RFID information server 204 may transmit context-aware information received from the context-aware sensor 201 to the RFID privacy control server 206, and receive privacy level information with respect to the tag information to correspond to the context-aware information. The RFID information server 204 may transmit the tag information, in which the privacy level is determined to correspond to the received tag ID, to the RFID reader 202.
The RFID application 205 may provide applicable services using the received tag information.
The RFID privacy control server 206 may automatically determine and adjust the privacy level with respect to the tag information by estimating correlation between information about changes in a tagged object and a user's circumstance.
As illustrated in
As illustrated in
The context-aware information collecting unit 301 collects at least one context-aware information about a user. According to the present embodiment of the invention, the context-aware information may be collected from a plurality of context-aware sensors positioned in a periphery of the user. As examples for the context-aware sensor, mechanical and electronic sensors may be given, and context-aware information associated with the user's circumstance may be automatically collected in various ways by the context-aware sensor. The context-aware information may include at least one of position information about the object or the user, time information, and state information.
As an example, the position information of the user may be determined using position information of a mobile terminal of the user. Specifically, state information associated with the user may be extracted according to a movement route and position of the mobile terminal of the user. Here, the state information may denote information indicating correlation between the object and the user with respect to an event generated as a context type, and the context-aware information may be determined based on the extracted state information.
According to another embodiment of the invention, the context-aware information may be directly inputted by the user using an input means which is different from the context-aware sensor. The user may directly input a state of the user's circumstance using the input means to thereby allow a server to accurately recognize the state of the user's circumstance. Various terminals connectable with the server via a communication network may be used as the input means.
The privacy level adjusting unit 302 adjusts a privacy level of the user based on the collected context-aware information. Specifically, the privacy level adjusting unit 302 classifies the context-aware information according to a predetermined criterion, and estimates correlation between the classified context-aware information to thereby adjust the privacy level. As an example, various correlation estimations (e.g., emergency state) with respect to context-aware information (e.g., position information) of the user or the related places (e.g., hospital, house, etc.), which are collected from the plurality of context-aware sensors to correspond to various given context information, may be extracted, and the privacy level based on the context-aware information may be determined and adjusted according to the extracted correlation estimations.
The privacy level may be identified by a privacy identifier including a level or type. As an example, the privacy identifier may include numerical information such as level 1, level 2, and the like, and also include type information which is appropriately determined according to applicable fields, locations, time, and the like such as type A (medical environment), type B (distribution management environment), type C (house) and the like.
According to the present embodiment of the invention, the privacy level may be differently determined for each information accessor wanting to acquire the RFID tag information. For this purpose, the privacy level may be stored in a privacy profile for each information accessor, and be able to be changed or expanded to correspond to the context-aware information. According to the present embodiment of the invention, the information accessor may be identified to correspond to an identifier of an RF reader. Specifically, in the case of a mobile RFID, when the RFID reader is embedded in a mobile terminal, an owner of the mobile terminal may be identified as the information accessor.
The privacy control unit 303 determines, according to the adjusted privacy level, whether access of the RFID reader to the RFID tag information is allowed. In this instance, the RFID tag information corresponds to an RFID tag associated with the user.
According to another embodiment of the invention, the privacy level may be individually determined to correspond to the RFID tag information being composed of a plurality of items. Also, when the access of the RFID reader to the RFID tag information is not allowed, the privacy control unit 303 may control the RFID information server to encrypt or delete the RFID tag information from the RFID tag, so that a privacy protection operation is performed against the information accessor which is not allowed to access the RFID tag information.
According to another embodiment of the invention, the RFID privacy control server 300 may further include a log audit processing unit (not shown).
In the case where the information accessor requests the RFID tag information in a predetermined circumstance, the log audit processing unit may determine to acquire an authorization of the user through a separate audit procedure.
As an example, the log audit processing unit may transmit a request for context information to the user, and the user may directly transmit context-aware information (second context-aware information) to the RFID privacy control server in response to the request, thereby realizing more accurate context-aware. The privacy level adjusting unit 302 may adjust the privacy level of the user based on the second context-aware information inputted by the user as well as the context-aware information received from the context-aware information collecting unit 301.
According to another embodiment of the invention, the user may transmit, to the RFID privacy control server, the second context-aware information used for directly intercepting, refusing, or allowing the access of the RFID reader to the RFID tag information, and the privacy control unit 303 may determine, according to the second context-aware information inputted by the user, whether the access of the RFID reader to the RFID tag information is allowed.
For the purpose of the transmission of the request for the context information, the log audit processing unit may transmit the request to the mobile terminal of the user using a short message service, so that the user can check the request in real time to thereby quickly respond to the second context-aware information.
According to another embodiment of the invention, when the response of the user for the request is absent for a predetermined time period, the privacy level adjusting unit 302 may regard this as a specific state stored in the privacy profile by the user, or an exceptional state and thereby may adjust the privacy level according to a predetermined criterion.
Hereinafter, a configuration in which the privacy level adjusting unit 302 and the privacy control unit 303 adjust the privacy level, respectively, and the access of the RFID reader to the RFID tag information is allowed according to the adjusted privacy level will be described in detail through more specific embodiments of the invention.
The user may differently determine the privacy level of the tagged object for each information accessor, in advance. Specifically, the privacy level such as an owner of the object (level 1), family members of the owner (level 2), a third party (level 10) may be determined, respectively. For example, when the user determines the privacy level of RFID tag information as ‘5’ of an accessible privacy level, the third party (level 10) is not allowed to access the RFID tag information. However, disadvantageously, in the case of a nurse having ‘7’ of the privacy level, the nurse is not allowed to access a personal treatment history recorded on a tag of a patient. For this reason, the privacy level provided to each information accessor may be adjusted by estimating correlation between the context-aware information (position, time and state information). As an example, the user may determine a specific place or position (e.g., house and patronized hospital) as a safe place, and thereby may additionally adjust the privacy level of the specific place or position within a range of a privacy level 2 (arbitrary number). Also, the user may additionally adjust the privacy level with respect to an exceptional state (e.g., accident, or medical treatment). Thus, when a visitor to the patient's house is identified as the nurse, the privacy level of the nurse is adjusted from ‘6’ to ‘4’ of the privacy level. Also, when the user may be determined to be currently in a medical treatment course through correlation estimation, the privacy level of the nurse is additionally adjusted from ‘4’ to ‘2’ of the privacy level based on the current state.
When the patient meets the nurse in another place which is different from the patient's house, the nurse having ‘4’ of the privacy level may be allowed to access only medical-related information about the patient. Also, when the user, not as a patient, meets the nurse in another place which is different from the user's house, the nurse having ‘6’ of the privacy level may be not allowed to directly access to the personal treatment history or personal information of the user due to the correlation estimation.
As described above, according to the present invention, the privacy level of the user may be dynamically controlled based on the context-aware of the user, and thus determining whether the access of the information accessor to the tag information is allowed.
As illustrated in
The RFID tag information being available according to the privacy level of the user may include object category information, object name information, object code information, object history information, price information, distribution information, object description information, owner ID information, owner account information, owner personal information.
As illustrated in
Conversely, a privacy protection level having a relatively great significance may be determined such that access of only an information accessor having ‘1’ of the privacy level to the owner account information and the owner personal information is allowed. In this instance, each of the owner account information and the owner personal information has a relatively great direct relativity with the privacy of the individual.
As described above, according to the present invention, the privacy level may be differently determined for each item of the RFID tag information, thereby realizing preferential and effective privacy protection based on characteristics of the RFID tag information.
As illustrated in
According to the present embodiment of the invention, a range of the privacy level capable of being re-determined according to state information of the sensed RFID tag may vary according to applicable services and may be differently applied according to the state information. As an example, at the time of emergency, the privacy level of the tag information determined by the user may be lowered according to significance of the state information. For this purpose, the user may directly determine a personal privacy profile stored in an existing privacy profile as a default value, or a result derived from a privacy effect evaluation extracted from a specific applicable service may be determined as a default value of the privacy profile.
The privacy profile storage unit 502 stores privacy level information determined with respect to the tag information by the user. The privacy level may be determined by the user or an agent.
The context-aware privacy processing unit 503 estimates correlation between the sensed context-aware information and the profile of the user to thereby adjust and determine the privacy level with respect to the tag information. The context-aware privacy processing unit 503 transmits the privacy level to a reader according to a request of the reader, and stores a result of the transmitted privacy level in a log and audit information storage unit 504.
The log and audit information storage unit 504 stores and audits a processing result and a process with respect to whether the tag information is normally determined and processed within a range determined by the user, or whether abnormally received context information is re-determined.
As an example, in the case where an information accessor requests the tag information in a predetermined state, the log and audit information storage unit 504 may determine to allow the user to acquire an authorization of information use. Specifically, the log and audit information storage unit 504 may transmit a request for the context information to the mobile terminal of the user, and the user may check the request in real time to thereby determine approval or refusal of the information use. When a response of the user is absent for a predetermined time period, this may be regarded as a specific state stored in the privacy profile by the user, or an exceptional state, and thereby the privacy level is adjusted. Then, a record about the above-described series of processes for providing information is stored in the log and audit information storage unit 504. Thus, whether exposure of personal privacy information occurs through an abnormal route, or whether the personal privacy information is normally protected to correspond to the context-aware information may be stored, and thereby the stored information may be checked by an audit authority.
A privacy controlled-information processing unit 505 receives final privacy level information with respect to the tag information and provides the received information to the applicable service.
According to the present embodiment of the invention, the context-aware privacy processing unit 503 receives, from an existing privacy profile storage unit, static level information determined by the user, and combines the static level information and dynamic privacy information processed through context-aware. The context-aware privacy processing unit 503 verifies whether the combined result is applied within a privacy level range determined by the virtual user, and whether an accurate privacy processing is executed. Finally, the context-aware privacy processing unit 503 transmits the privacy level information with respect to the tag information to the RFID information server.
As illustrated in
The context-aware information transmitting unit 601 transmits context-aware information collected from the context-aware sensor to the RFID privacy control server. The context-aware sensor collects context-aware information about change in the tagged object or the user's circumstance.
The privacy level receiving unit 602 receives, from the RFID privacy control server, the privacy level adjusted to correspond to the context-aware information. The RFID privacy control server may adjust the privacy level of the user determined for each information accessor or for each of a plurality of items based on the context-aware information, and transmit the adjusted privacy level to the privacy level receiving unit 602.
The security information generating unit 603 generates the privacy-processed RFID tag information to correspond to the adjusted privacy level. As an example, when access of the RFID reader to the RFID tag information is allowed due to the adjusted privacy level of the RFID reader, the security information generating unit 603 directly transmits, to the RF reader, the RFID tag information stored in a database to correspond to an original tag ID acting as the privacy-processed RFID tag information. Also, when the access of the RFID reader to the RFID tag information is not allowed due to the adjusted privacy level of the RFID reader, the security information generating unit 603 may encrypt or delete the RFID tag information to thereby generate the privacy-processed RFID tag information.
The tag information transmitting unit 604 transmits the privacy-processed RFID tag information to the RFID reader.
In operation S701, the RFID personal privacy protecting method collects at least one context-aware information about a user, and classifies the collected information according to a predetermined criterion. The context-aware information may be collected from a plurality of context-aware sensors positioned in a periphery of the user, or from a direct input of the user. The context-aware information may include at least one of position, time, and state information of an RFID tagged object or the user. As an example, the position information of the user may be determined using position information of the mobile terminal of the user.
In operation S702, the RFID personal privacy protecting method estimates correlation between the classified context-aware information. As an example, various correlation estimations (e.g., emergency state) with respect to virtual context-aware information (e.g., position information) of the user and the related places (e.g, hospital, house), which are collected from the plurality of context-aware sensors to correspond to various given context information, may be extracted.
In operation S703, the RFID personal privacy protecting method adjusts the privacy level with respect to the RFID tag information according to the extracted correlation estimation.
In operation S704, the RFID personal privacy protecting method determines whether access to RFID tag information is allowed according to the adjusted privacy level. In this instance, the RFID tag information corresponds to the RFID tag associated with the user. When access to information about the object is not allowed, the RFID personal privacy protecting method encrypts or deletes the RFID tag information.
Descriptions of the RFID personal privacy protecting method corresponding to descriptions given with respect to
The RFID personal privacy protecting method according to the above-described exemplary embodiments of the present invention may be recorded in computer-readable media including program instructions to implement various operations embodied by a computer. The media may also include, alone or in combination with the program instructions, data files, data structures, and the like. The media and program instructions may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable media include magnetic media such as hard disks, floppy disks, and magnetic tape; optical media such as CD ROM disks and DVD; magneto-optical media such as optical disks; and hardware devices that are specially configured to store and perform program instructions, such as read-only memory (ROM), random access memory (RAM), flash memory, and the like. Examples of program instructions include both machine code, such as produced by a compiler, and files containing higher level code that may be executed by the computer using an interpreter. The described hardware devices may be configured to act as one or more software modules in order to perform the operations of the above-described exemplary embodiments of the present invention.
As described above, according to the present invention, illicit exposure of information about a tagged object and an owner of the object may be prevented.
According to the present invention, a state of the user is recognized and the recognized state is automatically reflected in a privacy processing, thereby eliminating troublesome tasks in which the user is required to connect with a system according to respective states every time determining the privacy level.
According to the present invention, a processing result is transmitted to the user through a log and audit operation, thereby increasing reliability in privacy security of the user.
Although a few exemplary embodiments of the present invention have been shown and described, the present invention is not limited to the described exemplary embodiments. Instead, it would be appreciated by those skilled in the art that changes may be made to these exemplary embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2007-0112425 | Nov 2007 | KR | national |
