Radio frequency identification (RFID) based authentication methodology using standard and private frequency RFID tags

Disclosed is a self-contained hardware-based authentication system that incorporates different authentication protocols for access to soft and/or hard assets with different security levels. The system embodiments include the use of a RFID device that comprises dual RFID tags operating under different frequencies. Specifically, one RFID tag operates on a public frequency and, when activated, transmits an identifier encrypted using a public key. The other RFID tag operates on a private frequency and, when activated, transmits a private key that can be used to decrypt the encrypted identifier. Upon receipt by a processor (e.g., a local processor or security server) of a request for access to a specific asset, a security level for the specific asset is determined. Then, depending upon the particular security level (e.g., low, medium or high) different authentication protocols are instituted using the RFID device. Also disclosed are embodiments of an associated authentication methodology.

BACKGROUND

1. Field of the Invention

The embodiments of the invention generally relate to radio frequency identification RFID) authentication systems and, more specifically, to an improved RFID authentication system.

2. Description of the Related Art

Entities, such as governments, corporations, business, etc., often have secured soft and hard assets (i.e., secured electronic and physical property, respectively). Secured hard assets can comprise, for example, secured facilities, secured areas with a secured facility, secured equipment (e.g., file cabinets, computers, etc.) within a secured area, etc. Secured soft assets can comprise secured electronic data, for example, electronic folders, files, documents, programs, images, videos, etc. The security levels for such soft and hard assets may further vary (e.g., from low to high). Current user authentication methodologies for allowing access to secured assets revolve around manual user authentication protocols and identification (ID) badges or cards. Some ID badges (or cards) use radio frequency identification (RFID) tags (i.e., RFID transponders) for user authentication.

For example, a typical RFID authentication system comprises a RFID tag (i.e., an RFID transponder), a RFID reader (i.e., a RFID interrogator), and a host device (e.g., a computer). The RFID tag comprises an integrated circuit device and, particularly, a memory device programmed with authentication (i.e., identifying) information and an antenna, for transmitting the authentication information, when activated. The RFID reader also comprises an antenna. The RFID reader antenna transmits a radio frequency signal to activate and, thereby initiate transmission of the authentication information by the RFID tag antenna. The RFID reader antenna further receives (i.e., reads) the transmitted authentication information and communicates the read authentication information to the host device. The host device then authenticates the user (i.e., verifies the identity of the user) that is requesting assess to secured soft or hard assets, based on the received authentication information. Unfortunately, such RFID authentication systems do not allow for different levels of user authentication protocols based on different security-levels associated with the assets. Therefore, there is a need in the art for a self-contained, security-level based and hard-ware based secure access methodology to soft and hard assets.

SUMMARY

In view of the foregoing, disclosed herein are embodiments of a self-contained hardware-based authentication system that incorporates different authentication protocols for access to soft and/or hard assets with different security levels. The system embodiments include the use of a RFID device (e.g., a badge or card) that comprises dual RFID tags operating under different frequencies. Specifically, one RFID tag operates on a public frequency and, when activated, transmits an identifier (e.g., a passphrase, passcode, password, etc.) encrypted using a public key. The other RFID tag operates on a private frequency and, when activated, transmits a private key that can be used to decrypt the encrypted identifier. Upon receipt by a processor (e.g., a local processor or security server) of a request for access to a specific asset, a security level for the specific asset is determined. Then, depending upon the particular security level (e.g., low, medium or high) different authentication protocols are instituted using the RFID device. Also disclosed are embodiments of an associated authentication methodology.

More particularly, disclosed herein are embodiments of a RFID authentication system. The authentication system can comprise multiple RFID devices (e.g., ID badges or ID cards). Each RFID device can be associated with a different user of the system and can be embedded with dual RFID tags. Specifically, each RFID device can comprise a first RFID tag. The first RFID tag can comprise a first integrated circuit device that stores an encrypted identifier for a specific user and, more particularly, an encrypted identifier that was encrypted with a public key. The first RFID tag can also comprise a first RFID tag antenna that is connected to the first integrated circuit device and that transmits the encrypted identifier, when activated. The RFID device can also comprise a second RFID tag. The second RFID tag can comprise a second integrated circuit device that stores a private key that can be used to decrypt the encrypted identifier stored in the first integrated circuit device. The second RFID tag can also comprise a second RFID tag antenna that is connected to the second integrated circuit device and that transmits the private key, when activated. On each RFID device, the first RFID tag antenna can operate at a first radio frequency and the second RFID tag antenna can operate at a second radio frequency that is different from the first radio frequency. More specifically, the second radio frequency can have a more restricted use relative to the first radio frequency. That is, the first radio frequency can be a public radio frequency and the second radio frequency can be a private radio frequency.

The authentication system can further comprise at least one RFID reader. Specifically, a RFID reader can be associated with one or more assets. For example, in the case of physical assets (e.g., a facility, building, piece of equipment, etc.), one RFID reader may be associated with one asset. However, in the case of soft assets, one RFID reader may be associated with a computer that stores or has access to multiple soft assets. Each RFID reader can comprise a first RFID reader antenna for activating and receiving transmitted data from the first RFID tag antenna on a RFID device and a second RFID reader antenna for activating and receiving transmitted data from the second RFID tag antenna on a RFID device. The authentication system can further comprise a single processor (i.e., a server) or multiple local processors each capable of receiving a request by a specific user for access to a specific asset, of determining the security level associated with that specific asset and of authenticating the specific user, according to the appropriate security-level based protocol, using the different RFID tags on the specific user's RFID device.

Also disclosed herein are embodiments of an associated radio frequency identification (RFID) authentication method. The method embodiments can comprise providing each specific user with a RFID device, such as the dual-RFID tag RFID device described in detail above. Then, when a request by that specific user for access to a specific asset is received, a determination is made as to the security level associated with the specific asset. Next, depending upon the security level, at least one level of user authentication is performed using the RFID device. Finally, also disclosed is a computer program product for performing radio frequency identification (RFID) authentication. This computer program product can comprise a computer usable medium having computer usable program code embodied therewith. The computer program code can comprise computer usable program code that is configured to perform the above-described RFID authentication method.

DETAILED DESCRIPTION

The embodiments of the invention and the various features and advantageous details thereof are explained more fully with reference to the non-limiting embodiments that are illustrated in the accompanying drawings and detailed in the following description.

As mentioned above, entities, such as governments, corporations, business, etc., often have secured soft and hard assets (i.e., secured electronic and physical property, respectively). Secured hard assets can comprise, for example, secured facilities, secured areas with a secured facility, secured equipment (e.g., file cabinets, computers, etc.) within a secured area, etc. Secured soft assets can comprise secured electronic data, for example, electronic folders, files, documents, programs, images, videos, etc. The security levels for such soft and hard assets may further vary (e.g., from low to high). Current user authentication methodologies for allowing access to secured assets revolve around manual user authentication protocols and identification (ID) badges or cards. Some ID badges (or cards) use radio frequency identification (RFID) tags (i.e., RFID transponders) for user authentication.

For example, a typical RFID authentication system comprises a RFID tag (i.e., an RFID transponder), a RFID reader (i.e., a RFID interrogator), and a host device (e.g., a computer). The RFID tag comprises an integrated circuit device and, particularly, a memory device programmed with authentication (i.e., identifying) information and an antenna, for transmitting the authentication information, when activated. The RFID reader also comprises an antenna. The RFID reader antenna transmits a radio frequency signal to activate and, thereby initiate transmission of the authentication information by the RFID tag antenna. The RFID reader antenna further receives (i.e., reads) the transmitted authentication information and communicates the read authentication information to the host device. The host device then authenticates the user (i.e., verifies the identity of the user) that is requesting assess to secured soft or hard assets, based on the received authentication information. Unfortunately, such RFID authentication systems do not allow for different levels of user authentication protocols based on different security-levels associated with the assets. Therefore, there is a need in the art for a self-contained, security-level based and hard-ware based secure access methodology to soft and hard assets.

More particularly, referring toFIGS. 1 and 2, disclosed herein are embodiments of a RFID authentication system100. The authentication system100can comprise multiple RFID devices (e.g., ID badges or ID cards). Each RFID device102can be associated with a different user101of the system100and can be embedded with dual RFID tags110,120.

Specifically, each RFID device102can comprise a first RFID tag110. The first RFID tag110can comprise a first integrated circuit device111(e.g., a first memory device) that stores (i.e., that is programmed with) an encrypted identifier113for a specific user101. The encrypted identifier113can comprise an identifier (e.g., a passphrase, passcode, password, series of letters and/or numbers, etc.) which has been previously encrypted using a public key. This identifier can be selected by or assigned to the specific user101. Identifiers with greater lengths can provide enhanced security. The first RFID tag110can also comprise a first RFID tag antenna112that is connected to the first integrated circuit device111and that transmits the encrypted identifier113, when activated.

The RFID device102can also comprise a second RFID tag120. The second RFID tag120can comprise a second integrated circuit device121(e.g., a second memory device) that stores (i.e., that is programmed with) a private key123and, more particularly, a private key123that can be used to decrypt the encrypted identifier113. The second RFID tag120can also comprise a second RFID tag antenna122that is connected to the second integrated circuit device121and that transmits the private key123, when activated.

On each RFID device102, the first RFID tag antenna112can operate at a first radio frequency and the second RFID tag antenna122can operate at a second radio frequency that is different from the first radio frequency. More specifically, the second radio frequency can have a more restricted use relative to the first radio frequency. For example, the first radio frequency of the first RFID tag antenna112can be a public radio frequency and the second radio frequency of the second RFID tag antenna122can be a private radio frequency (i.e., a secured or proprietary radio frequency).

Those skilled in the art will recognize that in conventional public-key cryptography two related keys (i.e., a public key and a private key) are generated mathematically. Information that is encrypted with a public key can only be read (i.e., decrypted) with the related private key. Generally, such keys are used as follows. A first user will generate both the public key and the related private key. The first user will disseminate the public key and keep the private key private. A second user will use the public key to encrypt data (e.g., a message) and will transmit the encrypted data to the first user. The first user will then decrypt the message using the private key.

As mentioned above, the RFID authentication system100of the present invention uses public and private keys; however, the system100differs from conventional public-key cryptography in that the RFID device102of the present invention is configured to transmit public key encrypted information113over a public frequency and further to transmit the private key123, which is required to decrypt the encrypted information113, over a private frequency. The unique RFID device102of the present invention can transmit both public key encrypted information113and the related private key123in such a manner as to provide multiple levels of user authentication for allowing access to soft and hard assets (i.e., electronic and physical property) having different security levels (e.g., low, medium and high security levels).

Specifically, the authentication system100can further comprise at least one RFID reader (e.g.,130a-d). An RFID reader can be associated with one or more assets. That is, in the case of secured hard assets (i.e., secured physical property), one RFID reader may be associated with only one asset. For example, see RFID readers130aand130bassociated with a secured piece of equipment, such as a secured computer150aor file cabinet150b;see RFID reader130cassociated with a secured area, such as a secured door150cto a building or room within a building; and see RFID reader130dassociated with a secured facility150d.However, in the case of soft assets (i.e., secured electronic property, such as electronic data files, documents, folders, images, videos, programs, etc.), one RFID reader130amay be associated with a computer150athat stores or has access to (e.g., via a local or global network) multiple soft assets160a-d. Each RFID reader130a-dcan comprise a first RFID reader antenna131for activating and receiving transmitted data from the first RFID tag antenna112on a RFID device102and a second RFID reader antenna132for activating and receiving transmitted data from the second RFID tag antenna122on a RFID device102.

The authentication system100can further comprise at least one processor. For example, as illustrated inFIG. 1, a single processor140(i.e., a server) can be in communication with (e.g., over a wired or wireless network) and in control of each of the RFID readers130a-d. This single processor140can further be in communication with each of the assets150a-dand in control of denying and allowing access to hard assets150a-dand, in the case of the computer150a, also denying and allowing access to soft assets160a-d.

Alternatively, as illustrated inFIG. 2, for any given RFID reader (e.g.,130a-d), a corresponding local processor140a-dmay be in communication with and in control of that given RFID reader. Each local processor can further be an integral component of an asset (e.g., see processor140aof computer150a) or a discrete component in communication with a specific asset (e.g., see processors140b-dassociated with assets150b-d). Each local processor140a-dcan similarly be in control of denying or allowing access to one or more specific assets. For example, processor140aassociated with computer150acan be in control of denying and allowing access to the computer150a, processor140acan further be in control of denying and allowing access to any soft assets (i.e., electronic property160a-d) contained or accessible through computer150a. The use of local processors140a-dhas the advantage of allowing the system100to be portable (i.e., stand alone), as it does not require a network connection.

Each processor, whether it is a single server140(as illustrated inFIG. 1) or one of multiple local processors140a-d(as illustrated inFIG. 2), can comprise three databases141-143. The first database141can store the security levels145(e.g., low, medium or high) associated with one or more assets (e.g., with one or more hard assets150a-dand/or soft assets160a-d). The second database142can store, for each specific user (e.g., user101) of the system100, the encrypted identifier113encrypted with the public key (i.e., the same encrypted identifier113as should be stored in the first integrated circuit device111of the first RFID tag110on the RFID device102). Finally, the third database143can store, for each specific user (e.g., user101) of the system100, the unencrypted identifier114for the specific user101.

Each processor, whether it is a single server140(as illustrated inFIG. 1) or one of multiple local processors140a-d(as illustrated inFIG. 2), is further capable of receiving a request by a specific user101for access to a specific asset. In the case of hard assets (i.e., secured physical property150a-d), this request may, for example, be automatically triggered (e.g., by automatic activation of a motion or weight detection device) or manually triggered (e.g., by manual activation of an access request input device, such as pushing a door bell or turning on a computer) by the specific user101upon presentation before the physical asset. In the case of soft assets (i.e., secured electronic property160a-d), this request may, for example, be triggered by an attempt to open the electronic file, document, folder, etc.

Upon receiving such a request, each processor can further determine the security level associated with the specific asset to which access is requested. Specifically, upon receiving a request by a specific user101for access to a specific asset, the processor can access the first database141to determine the security level (e.g., low, medium or high) associated with that specific asset. Then, upon determining the security level associated with the specific asset, the processor can further authenticate the specific user101, according to the appropriate security-level based protocol, using the different RFID tags110and120on the specific user's RFID device102.

That is, for all security levels145(i.e., when the security level any one of a low, medium or high security level), the processor (i.e., server140ofFIG. 1or one of the local processors140a-dofFIG. 2) can perform a first level of user authentication. Specifically, the processor can cause the first RFID tag antenna112of the first RFID tag110on the user's RFID device102to be activated by the first RFID reader antenna131of the appropriate RFID reader, thereby causing the encrypted identifier113to be transmitted. Next, the processor can compare the encrypted identifier113, as stored by the second database142, and the encrypted identifier113, as transmitted by the first RFID tag antenna112. When the encrypted identifier113, as stored by the second database142, and the encrypted identifier113, as transmitted by the first RFID tag antenna112, are not identical (i.e., are different), then the processor can deny the specific user101access to any or all of the assets (i.e., can block access by the specific user101). When the encrypted identifier113, as stored by the second database142, and the encrypted identifier113, as transmitted by the first RFID tag antenna112, are identical (i.e., are the same) and when the security level comprises a low security level, the processor can allow (i.e., grant) the specific user101access to the specific asset requested. For example, in the case of hard assets (i.e., secured physical property150a-d), the processor may cause a computer150ato boot up, may cause a file cabinet150bor a door150cto become unlocked, may cause a gate150dto open, etc. In the case of soft assets (i.e., secured electronic property160a-d), the processor may cause an electronic folder, file, document, program, image, video, etc. to open on a computer150a.

However, when the security level is greater than a low security level (i.e., when the security level comprise a medium or high security level), the processor (i.e., server140ofFIG. 1or one of the local processors140a-dofFIG. 2) can further perform a second level of user authentication. Specifically, the processor can cause the second RFID tag antenna122of the second RFID tag120on the users RFID device102to be activated by the second RFID reader antenna132of the appropriate RFID reader, thereby causing the private key123to be transmitted. Then, the processor can decrypt the encrypted identifier113with the private key123so as to generate a decrypted identifier for the specific user101. Next, the processor can compare the decrypted identifier to the unencrypted identifier114(as stored in the third database143). When the decrypted identifier and the unencrypted identifier114are not identical (i.e., are different), the processor can deny the specific user101access to any or all of the assets (i.e., can block access by the specific user101). When the decrypted identifier and the unencrypted identifier114are identical (i.e., are the same) and when the security level comprises a medium security level, the processor can allow (i.e., grant) the specific user101access to the specific asset. For example, in the case of hard assets (i.e., secured physical property150a-d), the processor may cause a computer150ato boot up, may cause a file cabinet150bor a door150cto become unlocked, may cause a gate150dto open, etc. In the case of soft assets (i.e., secured electronic property160a-d), the processor may cause an electronic folder, file, document, program, image, video, etc. to open on a computer150a.

However, when the security level comprises a high security level, the processor (i.e., server140ofFIG. 1or one of the local processors140a-dofFIG. 2) can further perform a third level of user authentication. Specifically, the system100can further comprise a user interface (e.g., key board and graphical user interface (GUI)155aof computer150aor a keypad and display155b-cassociated with other physical assets150b-c). Through the user interface, the processor can prompt the specific user101to manually enter the unencrypted identifier and can then compare the unencrypted identifier as entered by the specific user101with the unencrypted identifier114as stored by the third database143(which was previously determined to be the same as the decrypted identifier). When the unencrypted identifier as entered by the specific user101through the user interface (e.g.,155a) and the unencrypted identifier114as stored by the third database143are not identical (i.e., are different), the processor140can deny the specific user101access to any or all of the assets (i.e., can block access by the specific user101). When the unencrypted identifier as entered by the specific user101through the user interface (e.g.,155a) and the unencrypted identifier114as stored by the third database143are identical, the processor140can allow (i.e., grant) the specific user101access to the specific asset. For example, in the case of hard assets (i.e., secured physical property150a-d), the processor may cause a computer150ato boot up, may cause a file cabinet150bor a door150cto become unlocked, may cause a gate150dto open, etc. In the case of soft assets (i.e., secured electronic property160a-d), the processor may cause an electronic folder, file, document, program, image, video, etc. to open on a computer150a.

Referring toFIG. 3in combination withFIGS. 1 and 2, also disclosed herein are embodiments of an associated radio frequency identification (RFID) authentication method. The method embodiments can comprise providing each specific user101with a personalized RFID device, such as the dual-RFID tag RFID device102described in detail above (302). Then, when a request by that specific user101for access to a specific asset, such as one of the hard assets105a-dor soft assets106a-d, is received (i.e., an authentication request) (304), a determination is made as to the security level associated with the specific asset (306). Specifically, at process306, the security level associated with the specific asset (as low307, medium308or high309) is determined by accessing a first database141that stores at least the security level for that one specific asset. Next, depending upon the security level, at least one level of user authentication is performed using the RFID device102(310,320,330).

Specifically, the method embodiments comprise performing a first level of user authentication regardless of the security level (i.e., when the security level comprises any one of a low security level307, a medium security level308and a high security level309) (310). The process310of performing the first level of user authentication comprises causing a first RFID reader antenna131of an appropriate RFID reader (e.g., see RFID readers130a-130dassociated with assets150a-d) to activate the first RFID tag antenna112of the first RFID tag110on the user's RFID device102in order to receive the encrypted identifier113, as stored in the first integrated circuit110of the first RFID tag110(311-312). Then, a second database142that also stores the encrypted identifier113for the specific user101is accessed (313) and the encrypted identifier113, as transmitted by the first RFID tag antenna112, is compared with the encrypted identifier113, as stored in the second database142(314). When the encrypted identifier113, as stored by the second database142, and the encrypted identifier113, as transmitted by the first RFID tag antenna112, are not identical (i.e., are different), then access by the specific user101to any or all of the assets is denied (315). When the encrypted identifier113, as stored by the second database142, and the encrypted identifier113, as transmitted by the first RFID tag antenna112, are identical (i.e., are the same) and when the security level comprises a low security level307, then access by the specific user101to the specific asset requested is allowed (i.e., granted) (316). For example, in the case of hard assets (i.e., secured physical property150a-d), a computer150amay be booted up, a file cabinet150bor a door150cmay become unlocked, a gate150dmay open, etc. In the case of soft assets (i.e., secured electronic property160a-d), an electronic folder, file, document, program, image, video, etc. may be opened on a computer150a.

However, when the security level is determined at process306to be greater than a low security level (i.e., when the security level comprises a medium308or high309security level), a second level of user authentication can be performed (320). Specifically, the process320of performing the second level of user authentication comprises causing a second RFID reader antenna132of the same RFID reader (e.g., see RFID readers130a-dassociated with assets150a-d) to activate the second RFID tag antenna122of the second RFID tag120on the user's RFID device102in order to receive the private key123, as stored on the second integrated circuit device121of the second RFID tag120(321-322). Next, the encrypted identifier113with the private key123is decrypted so as to generate a decrypted identifier for the specific user101(323). Then, a third database143that stores an unencrypted identifier114for the specific user101can be accessed (324) and the decrypted identifier as generated at process323can be compared to this unencrypted identifier114(325). When the decrypted identifier and the unencrypted identifier114are not identical (i.e., are different), access by the specific user101to any or all of the assets is denied (326). When the decrypted identifier and the unencrypted identifier114are identical (i.e., are the same) and when the security level comprises a medium security level308, then access by the specific user101to the specific asset requested is allowed (i.e., granted) (327). For example, in the case of hard assets (i.e., secured physical property150a-d), a computer150amay be booted up, a file cabinet150bor a door150cmay become unlocked, a gate150dmay open, etc. In the case of soft assets (i.e., secured electronic property160a-d), an electronic folder, file, document, program, image, video, etc. may be opened on a computer150a.

However. when the security level is determined at process306to be a high security level309, a third level of user authentication can be performed (330). Specifically, the process330of performing the third level of user authentication can comprise prompting the specific user101to manually enter the unencrypted identifier through a user interface (331) and then comparing the unencrypted identifier as entered by the specific user101at process331with the unencrypted identifier114as stored by the third database143(which was previously determined at process325to be the same as the decrypted identifier) (332). When the unencrypted identifier as entered by the specific user101through the user interface (e.g.,155a) and the unencrypted identifier114as stored by the third database143are not identical (i.e., are different), then access by the specific user101to any or all of the assets is denied (334). When the unencrypted identifier as entered by the specific user101through the user interface (e.g.,155a) and the unencrypted identifier114as stored by the third database143are identical (i.e., are the same), then access by the specific user101to the specific asset requested is allowed (i.e., granted). For example, in the case of hard assets (i.e., secured physical property150a-d), a computer150amay be booted up, a file cabinet150bor a door150cmay become unlocked, a gate150dmay open, etc. In the case of soft assets (i.e., secured electronic property160a-d), an electronic folder, file, document, program, image, video, etc. may be opened on a computer150a.

Finally, also disclosed is a computer program product for performing radio frequency identification (RFID) authentication. This computer program product can comprise a computer usable medium having computer usable program code embodied therewith. The computer program code can comprise computer usable program code that is configured to perform the above-described RFID authentication method.

The embodiments of the invention can take the form of an entirely hardware embodiment or an embodiment including both hardware and software elements. In a preferred embodiment, the method of the invention is implemented in software, which includes but is not limited to firmware, resident software, microcode, etc.

It should be understood that the corresponding structures, materials, acts, and equivalents of all means or step plus function elements in the claims below are intended to include any structure, material, or act for performing the function in combination with other claimed elements as specifically claimed. Additionally, it should be understood that the above-description of the present invention has been presented for purposes of illustration and description, but is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the invention. The embodiments were chosen and described in order to best explain the principles of the invention and the practical application, and to enable others of ordinary skill in the art to understand the invention for various embodiments with various modifications as are suited to the particular use contemplated. Well-known components and processing techniques are omitted in the above-description so as to not unnecessarily obscure the embodiments of the invention.

Finally, it should also be understood that the terminology used in the above-description is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. For example, as used herein, the singular forms “a”, “an” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. Furthermore, as used herein, the terms “comprises”, “comprising,” and/or “incorporating” when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.

Therefore, disclosed above are embodiments of a self-contained hardware-based authentication system that incorporates different authentication protocols for access to soft and/or hard assets with different security levels. The system embodiments include the use of a RFID device (e.g., a badge or card) that comprises dual RFID tags operating under different frequencies. Specifically, one RFID tag operates on a public frequency and, when activated, transmits an identifier (e.g., a passphrase, passcode, password, etc.) encrypted using a public key. The other RFID tag operates on a private frequency and, when activated, transmits a private key that can be used to decrypt the encrypted identifier. Upon receipt by a processor (e.g., a local processor or security server) of a request for access to a specific asset, a security level for the specific asset is determined. Then, depending upon the particular security level (e.g., low, medium or high) different authentication protocols are instituted using the RFID device. Also disclosed are embodiments of an associated authentication methodology.