Abstract:Our article investigates the vulnerabilities of lightweight RFID authentication schemes, namely LRSAS+ and LRARP+, and proposes an enhanced version leveraging the χper function to address their weaknesses. Through formal analysis and comparison with contemporary systems, we demonstrate that the improved scheme achieves robust security while minimizing computational overhead, making it suitable for resource‐constrained environments. In present times, Radio‐Frequency Identification (RFID) systems have seen a significant rise in their usage. There has been an increasing interest in developing even lighter RFID protocols suitable for resource‐constrained environments. Ensuring security and privacy remain critical challenges in RFID‐based systems. Recently proposed lightweight authentication schemes, namely LRSAS+ and LRARP+, are ideally suited for constrained devices. However, this article investigates these schemes and reveals certain vulnerabilities: LRSAS+ is susceptible to tag impersonation, desynchronization, and traceability attacks, while LRARP+ can fall prey to traceability and secret disclosure attacks. An enhanced version of these authentication systems is proposed that tackles their inherent weaknesses by leveraging the χper function. To verify the security of the proposed scheme, a formal analysis is conducted using Gong–Needham–Yahalom logic (GNY logic) and an automated security protocol verification tool, ProVerif. The improved scheme's effectiveness is also compared with multiple contemporary lightweight systems. The results indicate that the enhanced scheme not only meets the security requirements for lightweight authentication schemes but also achieves this with minimal computational overhead.

Improvement of Lightweight RFID Authentication Protocol

A Secure RFID Authentication Protocol Adopting Error Correction Code

On the Security of Chien's Ultralightweight RFID Authentication Protocol

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Scalable Pseudo Random RFID Private Mutual Authentication

An Improved RFID-based Authentication Protocol for Rail Transit

PUF-Based RFID Authentication Protocol Against Secret Key Leakage

An Improved Hash-Based RFID Two-Way Security Authentication Algorithm

Lightweight Rfid Mutual Authentication Protocol Against Feasible Problems

A Privacy-preserving Lightweight Authentication Protocol for Low-Cost RFID Tags

Security and Privacy on Authentication Protocol for Low-cost RFID

An Efficient Delegation-Based Anonymous Authentication Protocol

An ultralightweight and privacy-preserving authentication protocol for mobile RFID systems.

A Lightweight Key Management Scheme For 60 Ghz Wpan

Toward designing a lightweight RFID authentication protocol for constrained environments

An Authentication Protocol Based on Key Array for RFID

Pitfalls in an ECC-based Lightweight Authentication Protocol for Low-Cost RFID

Dynamic Key-Updating: Privacy-Preserving Authentication for RFID Systems

Design and Analysis of an ID-updated Mutual Authentication Protocol for Mobile RFID System

RFID Secure Protocol Based on Key Value Renewal

Lightweight group authentication protocol for secure RFID system