Abstract:Radio frequency identification (RFID) systems compliant to the EPCglobal Generation 2 (Gen2) passive UHF RFID protocol are being deployed in a broad range of applications including access control, automated tolling, personal identification, anti-counterfeiting, and supply chain management. With the broad applications and the demand for ever increasing amounts of on-tag functionality, security on the tag has become a critical enabling functionality in many applications. To address this growing marketplace need, EPCglobal is developing a standard security framework within which security functionality may be integrated seamlessly into the Gen2 protocol. We review the proposed Gen2 security framework and introduce example cryptographic suites to illustrate how to utilize this framework to provide a range of security functionality. We analyze the security of the Gen2 protocol and this new functionality in the context of timing-based attacks. We conclude that the tight communication timings specified in the Gen2 protocol mitigate timing-based attacks; however, the loose timing implementations on commercial interrogators and limited timing enforcement on tags lesson the effectiveness of the specified timing constraints. Further, we conclude that the new security framework allows for the efficient integration of secure functionality that, as specified, is resistant to timing-based attacks; however, we caution that using the delayed response of the new Gen2 security functionality creates new vulnerabilities to timing based attacks such as relay attacks and man-in-the-middle attacks. © 2013 IEEE.

Secure RFID System Based on DES Encrypt Algorithm

A secure RFID communication protocol based on simplified DES

An authentication approach to enhance RFID security

Security Modeling for RFID Tag and Safety Improvement of EPC C1G2 Protocol

A scheme to enhance security of RFID middleware

A Secure RFID System Based on Mutual Authentication

A Gen2-Based RFID Authentication Protocol for Security and Privacy

A Novel Authentication Protocol Suitable to EPC Class 1 Generation 2 RFID System

Data Exfiltration via Multipurpose RFID Cards and Countermeasures

On security with the new Gen2 RFID security framework

An Improved Hash-Based RFID Two-Way Security Authentication Algorithm

Security Design for the Digital Management on Vehicle License Plates,Based on RFID Technology

Electromagnetic analysis and attacks system for cryptographic RFID

RFID Middleware and Security Solution

Design and Implementation of a Security-Enhanced Baseband System for UHF RFID Tag

Who Stole My Cheese?: Verifying Intactness of Anonymous RFID Systems

Defense against impersonating attackers: An efficient RFID mutual authentication protocol based on standard

Enhancement of a Lightweight RFID Security Protocol

Experimental Analysis of an RFID Security Protocol

Intactness verification in anonymous RFID systems