3.3 RFID Technology
Reading guide: RFID plays the "identity recognition" role in the IoT sensing layer — answering "which object is this." The first half of this section (3.3.1) sorts out the engineering trade-offs behind system composition and operating frequency bands, and it is the foundation for understanding the sensing layer's identity capability; the anti-collision protocols and EPC Gen2 specification details in the second half (3.3.2) can be read on demand. If what you care about is "where RFID sits in the overall IoT architecture" rather than protocol implementation, reading 3.3.1 and 3.3.3 (application scenario analysis) is enough.
3.3.1 RFID System Composition and Operating Principles
Sensors answer the question "how much"; RFID (Radio Frequency Identification) answers "which one." In a warehouse stacked with thousands of outwardly identical cartons, a sensor cannot tell which carton belongs to which order — and barcodes require laser scanning one by one, with line of sight. RFID uses radio-frequency signals coupled through space to transfer information without contact, and it supports bulk reading. Despite its physical limitations in metallic and liquid environments, it remains a backbone technology for identity sensing.
The most basic RFID system consists of three parts: reader, antenna, and tag. The antenna is often mistaken for an accessory of the reader, but in engineering terms it is an independent performance module — it determines the working radius and the effective coverage area.
Core Components and the Three Tag Types
The reader is the system's transceiver and data aggregation node. It generates the RF carrier, demodulates and decodes the signals that tags send back, and then delivers the tag data to a host computer or edge node over Ethernet, RS-232/485, USB, or Wiegand interfaces. In industrial settings, the reader usually connects directly to an edge computing node, which performs initial filtering and caching (see Section 3.5 on edge computing nodes).
The tag stores a unique identification code and user data. By power source, tags fall into three types:
Passive tags: no built-in battery; they draw operating power from the electromagnetic field emitted by the reader. Cost is extremely low and theoretical lifetime is unlimited, but communication range is limited by the energy supply — the greater the distance, the less energy the tag receives, until it can no longer keep working.
Semi-passive tags: the built-in battery powers only the chip; communication still depends on the reader's RF energy. During the few milliseconds of wake-up inside the reader's field, the battery supplies a stable voltage, making the reflected signal stronger and the read range longer. But battery life is finite, and the cost of replacement and maintenance offsets part of the maintenance-free advantage of passive tags.
Active tags: carry their own battery and a complete RF transceiver and transmit on their own initiative. Read range is the longest, but they cost several orders of magnitude more, are bulkier, and their batteries typically last a few years, leaving a heavy maintenance burden after deployment.
In engineering selection, trade-offs among the three tag types revolve around four points: communication range, deployment density, lifecycle cost, and environmental durability. Passive tags are the first choice for short-range, high-frequency scenarios such as retail anti-theft gates and library management; semi-passive tags mainly serve scenarios like container monitoring and road tolling that need somewhat longer range but want to reduce battery dependence; active tags suit scenarios such as vehicle tracking and wide-area asset positioning that impose hard requirements on read range and allow periodic battery replacement.
The antenna radiates the reader's RF signal outward and receives the signals reflected by tags. Polarization (linear versus circular), gain, and beam width directly affect read range and interference immunity. In dense deployments, antenna selection and mounting height often decide the system's success more than the reader itself — a wrong antenna choice cannot be rescued by the highest reader performance.
Operating Frequencies and Scenario Trade-offs
RFID operating frequencies are allocated by the ISO/IEC 18000 series of standards and by the radio regulatory authorities of each country. The physical characteristics of the different bands — read range, penetration, sensitivity to metal and liquids — directly determine each band's mainstream application scenarios.
Low frequency (LF, 125–134 kHz): typical read range is centimeter-level. It is generally less sensitive to water and human tissue than UHF, and dedicated tags and installation design can improve performance near metal; electromagnetic waves cannot simply "penetrate metal," which still shields or alters the antenna field. LF has a relatively low read rate and is common in animal identification, car keys, and access control.
High frequency (HF, 13.56 MHz): read range runs from a few centimeters to about a meter. The range is moderate, but the band supports anti-collision and high-speed bulk reading, and it is common in libraries, ticketing, and payment cards. ISO 18000-3 mainly covers this band.
Ultra-high frequency (UHF, 860–960 MHz): typical read range is several meters. The band reads far and reads many tags quickly, but its sensitivity to metal and liquids rises markedly. Warehousing and logistics, retail, and supply-chain traceability are its mainstream scenarios. ISO 18000-6 covers this band.
Microwave (MW, 2.45 GHz/5.8 GHz): read range is usually several meters, and the band relies mostly on active tags. Bandwidth is large but environmental interference is severe; typical applications include container tracking and vehicle tolling identification.
Engineering selection must balance a conflicting pair: the longer the read range the better, yet as range grows, tolerance for metallic and liquid environments falls. UHF reads far, but a tag on a metal surface detunes severely — anti-metal tags are mandatory; HF reads short, but its ability to penetrate moisture is acceptable, which suits library inventory. There is no universal band — only the best trade-off for the specific scenario.
Three Engineering Reminders
Polarization alignment: a mismatch between the polarization of the antenna and that of the tag makes the read range shrink sharply. During installation, make sure the antenna's polarization direction matches the long axis of the tag antenna — field installers often overlook this step, and the system then goes live with a card-read rate far below expectations.
Metal and liquid interference: metal shelving and water-bearing goods (cases of beverages, for example) severely weaken UHF signals. Before deployment, take one tag, attach it to the surface of a target object, and test the identification success rate at different distances and angles — this simple field test often exposes problems that a standardized laboratory environment cannot reproduce.
Dense reading and collision: when large numbers of tags enter the reader's field at the same time, data collisions cause missed reads. This is the core problem the anti-collision algorithms of Section 3.3.2 must solve.
With system composition and operating bands understood, the next engineering problem is how one reader successfully identifies hundreds or thousands of tags at the same moment — exactly the anti-collision and data-reading protocols that Section 3.3.2 unfolds.
3.3.2 RFID Anti-Collision and Data Reading Protocols
When a single reader faces several hundred tags entering its read zone at once, the hardest problem is not that the signal is too weak — it is that multiple tags reply at the same instant and their signals superimpose in the air, forming collisions. This tag collision is the core engineering challenge of large-scale RFID deployment. The task of an anti-collision protocol is to set orderly speaking rules for a large population of tags on a shared channel.
The probabilistic route: Framed Slotted ALOHA. The Framed Slotted ALOHA (FSA) adopted by EPC Gen2 is a probabilistic algorithm. The reader sets the frame length with a Query command; a frame consists of 2^Q slots, with Q configurable between 0 and 15 (as defined by the specification). Each tag picks a slot within the frame at random and replies there. A tag that occupies a slot alone is identified successfully; when multiple tags reply at once they collide and choose again in the next round. The protocol's adaptive Q mechanism estimates the tag population from the ratio of collided to idle slots in the current round and dynamically adjusts the frame length toward the tag count, keeping system throughput at a high level. In an example where tags significantly outnumber the available slots, a reader running FSA needs tens to over a hundred command interactions to complete one full identification round, with total time on the order of seconds — engineering-acceptable.
The deterministic route: binary search tree. The reader's query command carries a prefix bit mask and invites only tags whose ID prefix matches to reply. When two or more tags collide at a given bit position, the reader splits the search space in half, shortens the prefix, and asks again, until only a single matching tag remains. Identifying each tag requires multiple round trips of communication, and as the tag population grows, the total time usually exceeds the FSA scheme. The engineering trade-off is clear: in scenarios with large, dynamic tag populations such as warehouses and logistics, FSA trades fewer rounds for high throughput; in scenarios with few tags but a strict requirement for ordered identification, such as access control and asset inventory, the deterministic advantage of binary search is more valuable.
The EPC Gen2 protocol and tag memory structure. EPC Gen2 operates in the 860–960 MHz band and is defined by the EPCglobal UHF Class 1 Gen 2 specification (now merged into the GS1 system of standards). Core designs include RTF (Reader Talks First) — the reader initiates communication — the adaptive Q mechanism, and a layered memory structure. The specification also defines multiple Sessions, with which the reader can inventory different tag groups independently and avoid duplicate identification.
Under this specification, tag memory is logically divided into four independent banks:
- Reserved bank: stores the Kill Password and the Access Password, 32 bits each. In checkout or recycling scenarios, a Kill command can be sent to permanently disable the tag and prevent privacy leakage.
- EPC bank: stores the item's unique Electronic Product Code; the specification defines a common length of 96 bits, comprising a header, a partition number, an object class, and a serial number, followed by protocol-control bits (PC bits) and a CRC-16 checksum.
- TID bank (Tag Identifier): a globally unique identifier preset by the chip manufacturer — written at the factory and unmodifiable — usually 64 to 96 bits, containing a manufacturer code, a model, and a unique serial number.
- User bank: an optional bank providing space for application-defined data such as product batch numbers, production dates, or process parameters; its length is defined by the chip manufacturer.
The engineering trade-off between read rate and tag count. Read rate versus tag count follows a nonlinear "rise then fall" relationship. When the tag count approaches the frame length, system throughput nears its peak; when tags far exceed the frame length, collided slots multiply and the required rounds rise nonlinearly. In actual field conditions, tag orientation, antenna distance, and media interference trigger the hidden terminal problem — strongly signaled tags suppress weakly signaled ones and force them through more retransmissions. Read rates measured in engineering practice are usually below the theoretical value. Optimization measures include: setting an appropriate initial Q for the environment; spreading the reading load using EPC Gen2's Session mechanism; tilting tags at an angle on conveyor belts or access lanes so that antenna orientations diversify; and controlling the speed at which tags pass the antenna so each tag has a sufficient interaction time window.
This section closes the loop on the capability of extracting data from many tags. The next section discusses how to determine a tag's position in space from identification data.
3.3.3 Analysis of RFID Application Scenarios in the IoT
The value of RFID lies not in the technology itself but in a fundamental problem it solves for IoT scenarios: rapidly identifying large numbers of objects without contact, without direct line of sight, and without manual intervention. Barcodes must be aimed and scanned by hand; QR codes carry more information but still depend on line of sight. RFID in the UHF band completes identification in bulk, at long range, and on the move — once this capability meets concrete industry scenarios, it opens up possibilities ranging from process optimization to business-model innovation. The EPC Gen2 standard, published by EPCglobal and later becoming the ISO/IEC 18000-63 international standard (formerly known as ISO/IEC 18000-6 Type C), defined a unified communication grammar for RFID deployment at scale worldwide.
Logistics, Warehousing, and Asset Management: Where RFID Is Most Mature
Logistics and warehousing is the application scenario where RFID has penetrated deepest. A typical deployment installs fixed readers and panel antennas at the warehouse goods-in, goods-out, and main passages, and attaches a UHF RFID tag to every pallet or outer carton. When a forklift or conveyor carries whole pallets of goods through the reader portal, the reader automatically reads the EPC codes of all tags on the pallet and reports them over the wired network to the warehouse management system (WMS).
What truly moves a warehouse manager to deploy RFID is the lifting of two hard constraints — scanning one item at a time, and requiring line of sight — through "bulk" and "non-line-of-sight" reading. A forklift carrying a pallet of dozens of mixed goods through the portal would need every item scanned one by one with barcodes, a lengthy process; a UHF RFID reader completes the entire read within seconds. In engineering practice, the success rate of bulk reading depends directly on the Framed Slotted ALOHA anti-collision capability covered in Section 3.3.2 — the reader adaptively adjusting Q so that frame length matches the tag count is the underlying guarantee of bulk-reading reliability.
One example illustrates the engineering model of this application: a mid-sized e-commerce warehouse with a moderate daily order volume needed several employees scanning item by item in the outbound checking area, so each outbound batch took considerable time. After an RFID portal system was introduced, outbound checking was reduced to one employee monitoring the system screen while the reads were done automatically by the reader. The read time can be recomputed with the FSA model of Section 3.3.2: let the tag count be n and the frame length 2^Q; each tag picks one slot within the frame at random with equal probability, and the expected number of tags identified in a single round is E = n×(1−1/2^Q)^(n−1). Take a full pallet of 200 tags (an illustrative figure): with Q fixed at 4 (frame length 16), E = 200×(15/16)^199 ≈ 0.0005 — fewer than one tag identified per round on average, with almost every slot colliding — which is exactly why the reader must rely on the adaptive-Q mechanism; after the reader raises Q to 8 (frame length 256), E = 200×(255/256)^199 ≈ 92, so nearly half are identified in the first round, the remaining tags enter the next round, and iterating with the same expression, about four rounds complete the inventory. Estimating a millisecond-order interaction per slot, four frame cycles together total on the order of seconds — consistent with the field scale of a whole pallet passing the portal in seconds. More critically, the system can capture "disappearance events" — a tag that should have appeared in an outbound batch but was not read immediately triggers an anomaly alarm, averting the risk of missed or even lost items (summarized from engineering practice).
Asset management is another strong suit of RFID. In hospital equipment management, IT asset tracking, and tool-cabinet control, rapid inventorying and locating of high-value assets is a hard requirement. Fixed readers are installed where assets enter and leave, handheld readers are carried by inspection staff, and the TID (Tag Identifier) of each RFID tag is bound to the equipment ledger. Barcode inventory requires touching each item one by one; RFID asset inventory lets an inspector stand at a doorway and scan the whole room's equipment in one pass with a handheld terminal, generating a discrepancy report in real time.
Smart Retail: From Self-Checkout to Frictionless Shopping
The retail industry is shifting from the traditional checkout counter toward "frictionless" operation. Typical RFID applications are unattended checkout and fine-grained inventory management. One example: goods carry EPC Gen2-compatible UHF tags applied at the factory or at goods-in, and each item's EPC is bound to its SKU (Stock Keeping Unit) and item-level serial number. The consumer puts the goods into a checkout station or a smart shopping cart, the integrated reader scans all items in an instant, a display generates the list automatically, and the consumer completes payment by scanning a code or tapping a card. This differs fundamentally from barcode checkout: barcodes must be scanned one by one by an infrared beam, with consumer and cashier manually arranging the packages; RFID is a one-shot bulk read whose time cost no longer accumulates linearly with the number of items. In high-foot-traffic retail stores, the bulk read of a full cart can likewise be kept within seconds (the read rate is constrained by the anti-collision throughput described in Section 3.3.2); but whether checkout counters can be reduced accordingly depends on conditions such as product tag coverage, the store's customer-flow structure, and loss-prevention requirements, and must be confirmed by on-site measurement (summarized from engineering experience and industry cases).
The other layer of value in smart retail is inventory visibility. The store embeds reader antennas in its shelves; after the business day ends, the system automatically takes stock of shelf quantities and interfaces with the backend ERP (Enterprise Resource Planning) to generate replenishment suggestions. No clerk needs to walk the floor scanning item by item with a handheld terminal. This ties directly to EPC Gen2's anti-collision capability — it is precisely because the FSA protocol supports bulk reading at a high success rate in dense tag environments that automated store inventory becomes engineering-feasible.
When implementing a retail RFID project, the following typical scenarios need to be assessed in advance.
| Typical scenario | How RFID improves the business | Main implementation risks/costs |
|---|---|---|
| Apparel store item-level tagging | Checkout shifts from scanning to bulk reading; inventory shifts from manual and slow to automatic and fast | Tag cost is amortized into every item; the store network and checkout counters need retrofitting |
| Supermarket/convenience-store item-level tagging | Frictionless checkout reduces queuing; automatic anti-theft alarms | Liquid/metal product packaging attenuates UHF signals noticeably; tag cost is hard to justify for low-price items |
| Warehouse/distribution center | Bulk identification at inbound/outbound replaces item-by-item scanning; automatic verification of picking accuracy | Portal structures need retrofitting; reader antenna mounting angles require professional tuning |
| High-value goods (jewelry, phones) | Automatic inventory and anti-theft; records of try-on/trial behavior | Metal environments affect the signal heavily; an auxiliary HF solution may be needed |
| Fresh food/cold chain | Fast outbound processing with assured batch traceability | Low temperatures affect tag adhesives; humid environments may interfere with reading |
Personnel Positioning and Access Control
RFID applications in personnel management are usually combined with access control. For example: as employees wearing HF- or UHF-band badge tags pass through an access lane, the reader identifies the tag ID, and the system decides whether to open the door after checking it against a whitelist. Compared with traditional magnetic and IC cards, RFID entrance identification is contactless, insertion-free, and low-maintenance. Where large numbers of people pass through lanes (exhibitions, factory campuses, schools), UHF RFID supports long-range (several meters, for example) bulk identification — people can be "read while walking," without stopping in front of the turnstile.
As for real-time positioning accuracy, a pure RFID solution still falls short. Most RFID systems can only determine "whether a tag is inside the coverage area of a certain reader antenna" — zone-level positioning — and cannot achieve sub-meter precision the way UWB or Bluetooth AoA can. In scenarios that require fine-grained personnel trajectory tracking (high-cleanliness zones, cleanrooms), RFID usually serves as a supplementary tool for access control and zone sensing, while more precise positioning needs are handed to the positioning technologies of the next section.
Looking further afield, RFID assigns a unique ID to every object (or person) — and this "ID" concept maps in the IoT DC3 system to deviceId and tenantId, running through every data path from the sensing layer to the application layer (see Chapters 2 and 5). An RFID tag itself generates no time-series data such as temperature or vibration, but the identity a tag carries, the locations associated with it, and its entry and exit events remain indispensable metadata in any IoT system.