Abstract:Security and privacy issues in RFID technology gain tremendous popularity recently. However, existing work on RFID authentication problems always make assumptions such as (1) hash function can be fully employed in designing RFID protocols; (2) channels between readers and server are always secure. The first assumption is not suitable for EPC Class-1 Gen-2 tags, which has been challenged in many research work, while the second one cannot be directly adopted in mobile RFID applications where wireless channels between readers and server are always insecure. To solve these problems, in this paper, we propose a novel ultralightweight and privacy-preserving authentication protocol for mobile RFID systems. We only use bitwise XOR, and several special constructed pseudo-random number generators to achieve our aims in the insecure mobile RFID environment. We use GNY logic to prove the security correctness of our proposed protocol. The security and privacy analysis show that our protocol can provide several privacy properties and avoid suffering from a number of attacks, including tag anonymity, tag location privacy, reader privacy, forward secrecy, and mutual authentication, replay attack, desynchronization attack etc. We implement our protocol and compare several parameters with existing work, the evaluation results indicate us that our protocol significantly improves the system performance.

Key Value Renewal Random Hash Lock for Security and Privacy Enhancement of RFID

An Improved Authentication Approach to Enhance Security and Privacy in RFID System

Scalable Pseudo Random RFID Private Mutual Authentication

RFID Secure Protocol Based on Key Value Renewal

Randomizing RFID Private Authentication

LOCK: A fast and flexible tag scanning mechanism with handheld readers

One More Hash Is Enough: Efficient Tag Stocktaking In Highly Dynamic Rfid Systems

Who Stole My Cheese?: Verifying Intactness of Anonymous RFID Systems

A Private and Scalable Authentication for RFID Systems Using Reasonable Storage.

Enhancement of a Lightweight RFID Security Protocol

Security and Privacy on Authentication Protocol for Low-cost RFID

Security and privacy protection in RFID-enabled supply chain management.

RSEL: revocable secure efficient lightweight RFID authentication scheme

Intactness verification in anonymous RFID systems

An Improved Hash-Based RFID Two-Way Security Authentication Algorithm

A Lightweight Anti-Desynchronization RFID Authentication Protocol

Security Improvement of RFID Authentication Protocol Based on Hash Function

Research on RFID Multi-Authentication Protocol Based on Hash Function

RFID tag anti-collision security study and evaluation

Dynamic Key-Updating: Privacy-Preserving Authentication for RFID Systems

Privacy and Authentication Protocol for Mobile RFID Systems