Proof of Authenticity of Logistics Information with Passive RFID Tags and Blockchain

When tracing large (robotically automated) logistics, passive RFID tags are preferred because of their low cost. Therefore, among the many challenges of RFID, security between such a tag and a reader was the main area of research. Yet, the authenticity of data cannot be assured if the service releases falsified information to users either intentionally or by accident. Applying blockchain in supply chains is often referred to and even tested, but it just writes records as instructed, and there is a risk of falsified records being written in the first place. Thus, we propose a design in which a tamper-evident, location-limited, and digitally signing reader writes digital evidence into a blockchain service in an atomic (indivisible) fashion, as they report that a tag is read or written. This allows integrity and confidentiality of the logistics information maintained throughout the system, even if the private keys or signature algorithms are compromised, or the public key certificates expire. To show that our proposal is feasible, we present a prototype design. As a result, the authenticity of logistics information using inexpensive passive tags can be assured. Moreover, this solution can also be applied to IoT (Internet of Things) in general.