Patent ID: 8265282
Filing Date: 2012-09-11
Classification: G06Q,G07F

Abstract:
1. A method of secure management of data records stored in an RFID tag, wherein said data records contain a header portion and a payload portion and comprise data fields whose contents are provided by different parties, the different parties including an RFID-based service operator and at least one information data provider, wherein the data fields comprise service data fields and proprietary fields, wherein the service data fields contain information data relevant to at least one RFID-based service and are accessible to authorized end users, and wherein the proprietary fields contain proprietary data provided by the different parties, the method performed by the RFID-based service operator comprising: causing a first set of the service data fields to be stored in the RFID tag, the first set being managed by the RFID-based service operator and being encrypted with a first key personal to the service operator, the first set including the header portion of the data records; causing a second set of the service data fields to be stored in the RFID tag, the second set being managed by the at least one information data provider and being encrypted with a second key specific to a service of the at least one information data provider; determining a registration by said end users for access to the at least one RFID-based service; and delivering sets of keys to user equipment of said end users separate from the RFID tag so as to set different access rights to the data fields on the RFID tag for said end users and said different parties, the sets of keys each including the first key personal to the service operator such that said end users are provided access to the information data in the first set of the service data fields on the RFID tag, the sets of keys for end users registered to access the at least one RFID-based service including the second key specific to the service of the at least one information data provider such that said registered end users are provided access to the information data in the second set of the service data fields, each of said different parties having additional keys different from the sets of keys for said end users and allowing an exclusive access right to the proprietary data stored in the proprietary fields on the RFID tag and provided by the party itself.