Systems and Methods for RFID Security

Abstract

An RFID system includes an RFID tag, an RFID reader, and a server. The RFID tag communicates to the server via encrypted information. The information may be encrypted with synchronized encryption keys. In this manner, the reader need not decrypt the information from the RFID tag. The effectiveness of malicious readers is thereby reduced, resulting in improved RFID tag security.

1 - 44 . (canceled) 
     
     
         45 . A system for making a purchase transaction at a point of sale (POS) terminal, the system comprising:
 a server configured to communicate with the POS terminal;   an electronic device including:
 a display; 
 a memory storing a first fingerprint information of a user and an encrypted data relating to a financial information of the user; 
 a processor configured to:
 receive a second fingerprint information; 
 compare the first fingerprint information with the second fingerprint information to determine a match; and 
 send, in response to determining the match, the encrypted data relating to the financial information of the user to the POS terminal for communicating the encrypted data to the server; 
 
   wherein the server is further configured to:
 receive the encrypted data relating to the financial information of the user from the POS terminal for the purchase transaction; 
 decrypt the encrypted data to authorize the purchase transaction; 
 charge an account of the user for the purchase transaction; and 
 acknowledge an authorization of the purchase transaction; 
   wherein the electronic device is further configured to:
 display, in response to acknowledging, a successful communication acknowledged by the server on the display of the electronic device. 
   
     
     
         46 . The system of  claim 45 , wherein POS terminal acts as a conduit of said encrypted data by receiving the encrypted data from the electronic device and sending the encrypted data to the server without decrypting the encrypted data. 
     
     
         47 . The system of  claim 45 , wherein the transaction information comprises a transaction amount, wherein the server is further configured to receive the transaction information from the POS terminal, wherein charging the account of the user for the purchase transaction comprises debiting the account of the user by the transaction amount. 
     
     
         48 . The system of  claim 47 , wherein the POS terminal is associated with a store, wherein the server is further configured to credit the store with the transaction amount. 
     
     
         49 . The system of  claim 45 , wherein the memory of the electronic device further stores a set of keys to encrypt the data relating to the financial information of the user. 
     
     
         50 . The system of  claim 45 , the electronic device further comprising a power supply configured to provide power to the display, memory, and processor of the electronic device. 
     
     
         51 . An electronic device for making a purchase transaction at a point of sale (POS) terminal in communication with a server, the electronic device comprising:
 a display;   a memory storing a first fingerprint information of a user and an encrypted data relating to a financial information of the user;   a processor configured to:
 receive a second fingerprint information; 
 compare the first fingerprint information with the second fingerprint information to determine a match; 
 send, in response to determining the match, the encrypted data relating to the financial information of the user to the POS terminal for communicating the encrypted data and the purchase transaction to the server and for the server to decrypt the encrypted data to authorize the purchase transaction and to charge an account of the user for the purchase transaction; and 
 display a successful communication acknowledged by the server on the display of the electronic device. 
   
     
     
         52 . The electronic device of  claim 51 , wherein the purchase transaction comprises a transaction amount, wherein charging the account of the user for the purchase transaction comprises debiting the account of the user by the transaction amount. 
     
     
         53 . The electronic device of  claim 52 , wherein the POS terminal is associated with a store, wherein the transaction amount is further for the sever to credit the store with the transaction amount. 
     
     
         54 . The electronic device of  claim 51 , wherein the memory further stores a set of keys to encrypt the data relating to the financial information of the user. 
     
     
         55 . The electronic device of  claim 51  further comprising a power supply configured to provide power to the display, memory, and processor of the electronic device. 
     
     
         56 . The electronic device of  claim 51 , wherein POS terminal acts as a conduit of said encrypted data by receiving the encrypted data from the electronic device and sending the encrypted data to the server without decrypting the encrypted data. 
     
     
         57 . A method for use by an electronic device for making a purchase transaction at a point of sale (POS) terminal in communication with a server, the electronic device having a processor, a display, a memory storing a first fingerprint information of a user and an encrypted data relating to a financial information of the user, the method comprising:
 receiving, using the processor, a second fingerprint information;   comparing, using the processor, the first fingerprint information stored in the memory with the second fingerprint information to determine a match;   sending, in response to determining the match, the encrypted data relating to the financial information of the user to the POS terminal for communicating the encrypted data and the purchase transaction to the server and for the server to decrypt the encrypted data to authorize the purchase transaction and to charge an account of the user for the purchase transaction; and   displaying a successful communication acknowledged by the server on the display of the electronic device.   
     
     
         58 . The method of  claim 57 , wherein the purchase transaction comprises a transaction amount, wherein charging the account of the user for the purchase transaction comprises debiting the account of the user by the transaction amount. 
     
     
         59 . The method of  claim 58 , wherein the POS terminal is associated with a store, wherein the transaction amount is further for the sever to credit the store with the transaction amount. 
     
     
         60 . The method of  claim 57 , wherein the memory further stores a set of keys to encrypt the data relating to the financial information of the user. 
     
     
         61 . The method of  claim 57 , wherein the electronic device further comprises a power supply configured to provide power to the display, memory, and processor of the electronic device. 
     
     
         62 . The method of  claim 57 , wherein POS terminal acts as a conduit of said encrypted data by receiving the encrypted data from the electronic device and sending the encrypted data to the server without decrypting the encrypted data.