Abstract:Our article investigates the vulnerabilities of lightweight RFID authentication schemes, namely LRSAS+ and LRARP+, and proposes an enhanced version leveraging the χper function to address their weaknesses. Through formal analysis and comparison with contemporary systems, we demonstrate that the improved scheme achieves robust security while minimizing computational overhead, making it suitable for resource‐constrained environments. In present times, Radio‐Frequency Identification (RFID) systems have seen a significant rise in their usage. There has been an increasing interest in developing even lighter RFID protocols suitable for resource‐constrained environments. Ensuring security and privacy remain critical challenges in RFID‐based systems. Recently proposed lightweight authentication schemes, namely LRSAS+ and LRARP+, are ideally suited for constrained devices. However, this article investigates these schemes and reveals certain vulnerabilities: LRSAS+ is susceptible to tag impersonation, desynchronization, and traceability attacks, while LRARP+ can fall prey to traceability and secret disclosure attacks. An enhanced version of these authentication systems is proposed that tackles their inherent weaknesses by leveraging the χper function. To verify the security of the proposed scheme, a formal analysis is conducted using Gong–Needham–Yahalom logic (GNY logic) and an automated security protocol verification tool, ProVerif. The improved scheme's effectiveness is also compared with multiple contemporary lightweight systems. The results indicate that the enhanced scheme not only meets the security requirements for lightweight authentication schemes but also achieves this with minimal computational overhead.

An Improved RFID-based Authentication Protocol for Rail Transit

Scalable Pseudo Random RFID Private Mutual Authentication

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Sensory-Data-Enhanced Authentication For Rfid-Based Access Control Systems

Improvement of Lightweight RFID Authentication Protocol

An Improved Hash-Based RFID Two-Way Security Authentication Algorithm

A Secure RFID Authentication Protocol Adopting Error Correction Code

Investigating the Performances and Vulnerabilities of Two New Protocols Based on R-RAPSE

Design and Analysis of an ID-updated Mutual Authentication Protocol for Mobile RFID System

Security and Privacy on Authentication Protocol for Low-cost RFID

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

An Authentication Protocol in Mobile RFID Environment

An Authentication Protocol Based on Key Array for RFID

An ultralightweight and privacy-preserving authentication protocol for mobile RFID systems.

Who Stole My Cheese?: Verifying Intactness of Anonymous RFID Systems

Rapdos: A RFID Authentication Protocol for Defending Against DoS

Lightweight Rfid Mutual Authentication Protocol Against Feasible Problems

RFID Authentication Against an Unsecure Backend Server

Toward designing a lightweight RFID authentication protocol for constrained environments

Cryptanalysis of an RFID-Enabled Authentication Protocol for Healthcare

RFID Secure Protocol Based on Key Value Renewal