Abstract:Radio frequency identification (RFID) is an important technique used for automatic identification and data capture. In recent years, low-cost RFID tags have been used in many open-loop applications beyond supply chain management, such as the tagging of the medicine, clothes, and belongings after the point of sales. At the same time, with the development of semiconductor industry, handheld terminals and mobile phones are becoming RFID-enabled. Unauthorized mobile RFID readers could be abused by the malicious hackers or curious common people. Even for authorized RFID readers, the ownership of the reader can be transferred and the owners of the authorized mobile reader may not be always reliable. The authorization and authentication of the mobile RFID readers need to take stronger security measures to address the privacy or security issues that may arise in the emerging open-loop applications. In this paper, the security demands of RFID tags in emerging open-loop applications are summarized, and two example protocols for authorization, authentication and key establishment based on symmetric cryptography are presented. The proposed protocols adopt a timed-session-based authorization scheme, and all reader-to-tag operations are authorized by a trusted third party using a newly defined class of timed sessions. The output of the tags is randomized to prevent unauthorized tracking of the RFID tags. An instance of the protocol A is implemented in 0.13-μm CMOS technology, and the functions are verified by field programmable gate array. The baseband consumes 44.0 μW under 1.08 V voltage and 1.92 MHz frequency, and it has 25,067 gate equivalents. The proposed protocols can successfully resist most security threats toward open-loop RFID systems except physical attacks. The timing and scalability of the two protocols are discussed in detail.

Secret sharing based RFID protocol using ECC for TMIS

Cryptanalysis of an RFID-Enabled Authentication Protocol for Healthcare

Scalable Pseudo Random RFID Private Mutual Authentication

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

A provably secure RFID authentication protocol based on ECQV for the medical internet of things

Cryptanalysis on Secure ECC based Mutual Authentication Protocol for Cloud-Assisted TMIS

Dependable and Provable Secure Two-Factor Mutual Authentication Scheme Using ECC for IoT-Based Telecare Medical Information System

RFID-enabled protocol based on eigenvalues and eigenvectors of a matrix

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

A Secure Authentication and Key Agreement Protocol for Telecare Medicine Information System

Session-based Security Enhancement of RFID Systems for Emerging Open-Loop Applications

An ultra light weight and secure RFID batch authentication scheme for IoMT

Security and Privacy on Authentication Protocol for Low-cost RFID

An hybrid security framework using internet of things for healthcare system

A Novel RFID Authentication Protocol Based on A Block-Order-Modulus Variable Matrix Encryption Algorithm

Shedding Light on RFID Distance Bounding Protocols and Terrorist Fraud Attacks

KIMAP: Key-Insulated Mutual Authentication Protocol for RFID

A Secure Distributed Authentication scheme based on CRT-VSS and Trusted Computing in MANET

A Secure RFID Authentication Protocol Adopting Error Correction Code

A new RFID ultra-lightweight authentication protocol for medical privacy protection in smart living

Exploiting RF Interference for Private Cardinality Estimation in RFID System.