Abstract:Security and privacy issues in RFID technology gain tremendous popularity recently. However, existing work on RFID authentication problems always make assumptions such as (1) hash function can be fully employed in designing RFID protocols; (2) channels between readers and server are always secure. The first assumption is not suitable for EPC Class-1 Gen-2 tags, which has been challenged in many research work, while the second one cannot be directly adopted in mobile RFID applications where wireless channels between readers and server are always insecure. To solve these problems, in this paper, we propose a novel ultralightweight and privacy-preserving authentication protocol for mobile RFID systems. We only use bitwise XOR, and several special constructed pseudo-random number generators to achieve our aims in the insecure mobile RFID environment. We use GNY logic to prove the security correctness of our proposed protocol. The security and privacy analysis show that our protocol can provide several privacy properties and avoid suffering from a number of attacks, including tag anonymity, tag location privacy, reader privacy, forward secrecy, and mutual authentication, replay attack, desynchronization attack etc. We implement our protocol and compare several parameters with existing work, the evaluation results indicate us that our protocol significantly improves the system performance.

Research and Application of RFID System Security Authentication Protocol Based on ECC Algorithm.

A Novel Ecc-Based Rfid Authentication Protocol

An Elliptic Curve Based Authentication Scheme for RFID

ECC-based RFID authentication protocol enabling tag ownership transfer

Security Analysis of Some Recent Authentication Protocols for RFID

A Secure RFID Mutual Authentication Protocol for Healthcare Environments Using Elliptic Curve Cryptography

Privacy and Authentication Protocol for Mobile RFID Systems

Research on RFID Multi-Authentication Protocol Based on Hash Function

An ultralightweight and privacy-preserving authentication protocol for mobile RFID systems.

An Improved Hash-Based RFID Two-Way Security Authentication Algorithm

Experimental Analysis of an RFID Security Protocol

Pitfalls in an ECC-based Lightweight Authentication Protocol for Low-Cost RFID

A provably secure RFID authentication protocol based on ECQV for the medical internet of things

A Secure RFID Authentication Protocol Adopting Error Correction Code

Vulnerability analysis of elliptic curve-based RFID protocol

An ECDLP-Based Randomized Key RFID Authentication Protocol

Vulnerability analysis of elliptic curve cryptography-based RFID authentication protocols.

Security Improvement of RFID Authentication Protocol Based on Hash Function

Analysis of an Improved RFID Authentication Protocol

Double factors based authentication protocol for RFID

Design and Analysis of a Low-Cost Mutual Authentication Protocol for RFID