Abstract:The most recent ultra-lightweight mutual authentication protocol (UMAP) adopts a mechanism for key updating to keep the security forward and backward. The back-end server updates the secret keys immediately after sending the final message. Certainly, an adversary can intercept the final messages so that the back-end server updates the secret keys while the RFID tag does not. The replay attack can send the last messages by continuing to render the back-end server and RFID tags unauthorized. The major problem faced by existing protocols, when using high cryptographic operations on low-cost RFID tags, requires more memory, and computational power makes them unusable for these types of tags. In addition, there are weaknesses in the design of the existing protocols that lead to the emergence of desynchronization, secret disclosure, and replay attacks. Therefore, this paper proposes the design and development of an ultra-lightweight mutual authentication protocol that overcomes the weaknesses in earlier protocols and builds by implementing the rotation operator, mechanism of the secret keys, T-function, and timestamp technique. The informal and formal analysis results using security protocol verification official tools (Scythe and AVISPA) show that the proposed protocol has the ability to prevent attacks, especially replay attacks. Experimental analyses of our protocol to measure the performance shows that the proposed protocol involves a lower overhead than previous protocols. The total execution time in milliseconds of the processes of the proposed protocol with the existing protocols is 0.031ms, and it achieves an average of 78.51% over other protocols. In addition, this paper provides a comparison with the most recent protocols on performance, privacy and security requirements. Our proposed protocol storage space requirement is lowest than the existing protocols, the cryptographic requirement is ultra-lightweight and efficient and shows that the communication messages for authentication in our protocol are lowest than existing protocols and our protocol fulfills the privacy and security requirements.

Ultra-lightweight RFID Mutual Authentication Protocol

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Lightweight Rfid Mutual Authentication Protocol Against Feasible Problems

Scalable Pseudo Random RFID Private Mutual Authentication

Lightweight Mutual Authentication Protocol for Low Cost RFID Tags

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

Lightweight Authentication Protocol Based on Physical Unclonable Function

Ultra-Lightweight Mutual Authentication Protocol to Prevent Replay Attacks for Low-Cost RFID Tags

Improvement of Lightweight RFID Authentication Protocol

Rapdos: A RFID Authentication Protocol for Defending Against DoS

Security Flaws in a Recent Ultralightweight RFID Protocol

Security and Privacy on Authentication Protocol for Low-cost RFID

Dual-Reader Wireless Protocols for Dense Active Rfid Identification

A Privacy-preserving Lightweight Authentication Protocol for Low-Cost RFID Tags

On the Security of Chien's Ultralightweight RFID Authentication Protocol

Design and Analysis of an ID-updated Mutual Authentication Protocol for Mobile RFID System

An ultralightweight and privacy-preserving authentication protocol for mobile RFID systems.

PUF-Based RFID Authentication Protocol Against Secret Key Leakage

Toward designing a lightweight RFID authentication protocol for constrained environments

Low-cost RFID Secure Protocol Based on Agent Random Number