Abstract:The most recent ultra-lightweight mutual authentication protocol (UMAP) adopts a mechanism for key updating to keep the security forward and backward. The back-end server updates the secret keys immediately after sending the final message. Certainly, an adversary can intercept the final messages so that the back-end server updates the secret keys while the RFID tag does not. The replay attack can send the last messages by continuing to render the back-end server and RFID tags unauthorized. The major problem faced by existing protocols, when using high cryptographic operations on low-cost RFID tags, requires more memory, and computational power makes them unusable for these types of tags. In addition, there are weaknesses in the design of the existing protocols that lead to the emergence of desynchronization, secret disclosure, and replay attacks. Therefore, this paper proposes the design and development of an ultra-lightweight mutual authentication protocol that overcomes the weaknesses in earlier protocols and builds by implementing the rotation operator, mechanism of the secret keys, T-function, and timestamp technique. The informal and formal analysis results using security protocol verification official tools (Scythe and AVISPA) show that the proposed protocol has the ability to prevent attacks, especially replay attacks. Experimental analyses of our protocol to measure the performance shows that the proposed protocol involves a lower overhead than previous protocols. The total execution time in milliseconds of the processes of the proposed protocol with the existing protocols is 0.031ms, and it achieves an average of 78.51% over other protocols. In addition, this paper provides a comparison with the most recent protocols on performance, privacy and security requirements. Our proposed protocol storage space requirement is lowest than the existing protocols, the cryptographic requirement is ultra-lightweight and efficient and shows that the communication messages for authentication in our protocol are lowest than existing protocols and our protocol fulfills the privacy and security requirements.

A replay-attack resistant message authentication scheme using time-based keying hash functions and unique message identifiers

Hash Function and Smart Card Based Multi-Server Authentication Protocol

A secured Cryptographic Hashing Algorithm

A Secure Hash Function MD-192 With Modified Message Expansion

A replay attack detection scheme based on perceptual image hashing

Construction and security analysis of hash algorithm based on stream cipher

On the Design of Time-Stamped Signatures

A Hash-Based Quantum-Resistant Chameleon Signature Scheme

Two-way Authentication Signature Scheme Based on Self-updating Hash Chains

Fault-assisted side-channel analysis of HMAC-Streebog

A Hash Tree Based Authentication Scheme in SIP Applications

Robust biometric scheme against replay attacks using one-time biometric templates

Correlation Power Attack on a Message Authentication Code Based on SM3.

A New Non-MDS Hash Function Resisting Birthday Attack and Meet-in-the-middle Attack

Replay Attack Detection for Cyber-Physical Systems with Sensitive States

Cumulative Message Authentication Codes for Resource-Constrained IoT Networks

High-performance Implementation of an HMAC Processor Based on SHA-3 Hash Function

An Identity Authentication Mechanism Based on Timing Covert Channel.

Authenticating Smart Home Devices Via Home Limited Channels

Multi-Factor Credential Hashing for Asymmetric Brute-Force Attack Resistance

Ultra-Lightweight Mutual Authentication Protocol to Prevent Replay Attacks for Low-Cost RFID Tags