Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEIE Transactions on Smart Processing and Computing

An Enhanced Mutual Key Agreement Protocol for Mobile RFID-enabled Devices

Kambombo Mtoga, Eun‐Jun Yoon

Published Aug 1, 2012• 6 citations
OpenAlex

Abstract

Mobile RFID is a new application that uses a mobile phone as an RFID reader with wireless technology and provides a new valuable service to users by integrating RFID and ubiquitous sensor network infrastructures with mobile communication and wireless Internet. Whereas the mobile RFID system has many advantages, privacy violation problems on the reader side are very concerning to individuals and researchers. Unlike in regular RFID environments, where the communication channel between the server and reader is assumed to be secure, the communication channel between the backend server and the RFID reader in the mobile RFID system is not assumed to be safe. Therefore it has become necessary to devise a new communication protocol that secures the privacy of mobile RFID-enabled devices. Recently, Lo et al. proposed a mutual key agreement protocol that secures the authenticity and privacy of engaged mobile RFID readers by constructing a secure session key between the reader and server. However, this paper shows that this protocol does not meet all of the necessary security requirements. Therefore we developed an enhanced mutual key agreement protocol for mobile RFID-enabled devices that alleviates these concerns. We further show that our protocol can enhance data security and provide privacy protection for the reader in an unsecured mobile RFID environment, even in the presence of an active adversary.

Related papers

Cryptanalysis of Lo et al.'s Mutual Key Agreement Protocol for Mobile RFID-Enabled Devices

Kambombo Mtonga, Eun‐Jun Yoon

Lo et al. proposed a new mutual key agreement protocol aimed at securing mobile RFID-enabled devices. Recently, Chien and Tu showed that Lo et al.’s protocol has two weaknesses: the disclosure of trusted third party’s private key and un-authentication of the session key. However, this paper shows that Lo et al.’s protocol has an additional vulnerability of impersonation attack and suggests a remedy to cope with the problems in it.

대한전자공학회 학술대회•Jun 1, 2012•1 citation

A New Strong Adversary Model for RFID Authentication Protocols

Mehdi Hosseinzadeh, Jan Lánský, Amir Masoud Rahmani +4 more

Radio Frequency Identification (RFID) systems represent a key technology for ubiquitous computing and for the deployment of the Internet of Things (IoT). In RFID technology, authentication protocols are often necessary in order to confirm the identity of the parties involved (i.e. RFID readers, RFID tags and/or database servers). In this article, we analyze the security of a mutual authentication protocol proposed by Wang and Ma. Our security analysis clearly shows major security pitfalls in this protocol. Firstly, we show two approaches that an adversary may use to mislead an honest reader into thinking that it is communicating with a legitimate database. Secondly, we show how an adversary that has compromised some tags can impersonate an RFID reader to a legitimate database. Furthermore, we present a new adversary model, which pays heed on cases missed by previous proposals. In contrast to previous models where the communication between an RFID reader and a back-end server is through a secure channel, our model facilitates the security analysis of more general schemes where this communication channel (RFID reader-to-server) is insecure. This model determines whether the compromise of RFID tags has any impact on the security of the reader-to-server communication or vice versa. In a secure protocol, the possible compromise of RFID tags should not affect the RFID reader-server communication. In this paper, we show that compromising of RFID tags in Wang and Ma protocol has a direct impact on the reader-server security. Finally, we propose a new authentication protocol that offers an adequate security level and is resistant against the mentioned security risks. The security proofs of the proposed protocol are supported with Gong-Needham-Yahalom (GNY) logic and Scyther tool, which are formal methods to evaluate the security of a cryptographic protocol.

IEEE Access•Jan 1, 2020•19 citations

Robust Matrix-based RFID Mutual Authentication Protocol

Eun‐Jun Yoon, Kyeoung-Ju Ha, Kee-Young Yoo

In 2006, Lee and Ahn proposed a matrix-based RFID authentication protocol which eliminates the security problems in HB and RFID authentication protocols. Their proposed protocol provides the following three merits: (1) it reduces the computational costs of the RFID tag. (2) it reduces the communication overhead between the reader and the tag. (3) it protects the user privacy. However, this paper points out that Lee and Ahn's proposed protocol is insecure to various attacks because it does not provide mutual authentication which the RFID tag does not authenticate the legality of the RFID reader unlike their claims. In addition, this paper proposes an improved matrix-based RFID mutual authentication protocol that can provide the mutual authentication. As a result, the proposed protocol not only can provide strong security and but also guarantee high efficiency because it reduces the communication rounds compare with Lee-Ahn's protocol.

한국통신학회논문지•Jan 1, 2008•0 citations

Design of a Mutual Authentication Protocol for RFID Based on ECC

Hongyan Kang

A low-cost, efficient and safe mutual authentication protocol for RFID based on elliptic curve cryptography (ECC) is proposed, specific to the security and privacy problem existed in the existing RFID authentication protocol, on the basis of deep analysis of the existing RFID protocol based on ECC.As to this proposal, mutual authentication between the tag and reader can be realized only through two sessions, under the condition of not destroying the security strength.So, the workload of calculation and system resource expense are reduced.The paper has described the protocol in detail and analyzed its security.The analysis result shows that, the protocol can resist tracking attack, replay attack, man-in-themiddle attack and other attacks, has good forward security and can realize mutual authentication between the server and the tag.Besides, it has definite practicability, due to low cost, security and scalability.

The Open Automation and Control Systems Journal•Sep 30, 2015•3 citations

EAP-SRES: An Enhanced Authentication Protocol for Secure Remote Education Systems Using NFC Technology

Foudil Cherif, Noureddine Chikouche

Radio Frequency Identification (RFID) and Near Field Communication (NFC) are wireless technologies applied in several domains, among which, remote education.The communication between different components of this system is unsecured, which may lead to several security and privacy problems.Designing authentication protocols to protect a remote education system in an open environment (e.g.NFC, RFID, and Internet) is a challenging task.Recently, Yang et al. proposed a mutual authentication protocol based on the hash function for RFID systems to secure this system.Yang et al. showed that their protocol is secure and can resist various attacks.This work proves that Yang et al.'s protocol does not achieve reader authentication, location privacy, and security forward.Furthermore, we propose an enhanced authentication protocol for secure remote education systems (EAP-SRES) using NFC technology.Our protocol is based on post-quantum cryptosystem to resist quantum attacks.Security analysis by using CL-AtSe (Constraint Logic based Attack Searcher) tool and Ouafi-Phan privacy model shows that the EAP-SRES protocol achieves the requirements of mutual authentication, untraceability and resists different possible attacks.In addition, EAP-SRES protocol is very efficient in term of performance.

International Journal of Computing and Digital Systems•May 1, 2020•2 citations

Security analysis and improvement to digital library RFID protocol

Hanwei Wu, Sihan Qing, Honglei Li

Recently, along with the widespread use of various mobile devices in e-commerce, a variety of RFID systems are integrated in mobile devices. Poorly designed security RFID systems will bring a great security risks. This paper reviews the existing RFID system security mechanism and focuses on the digital library RFID security protocol. Security assumptions are changed in the new application environment, leading to a new attack on the original agreement. A security protocol with the mutual authentication function is designed on the basis of the original protocol. The new protocol is compatible with the original protocol, but against new attacks. Formal analysis shows that the new protocol is in accordance with established safety goals.

International Conference on Consumer Electronics, Communications and Networks (CECNet)•Apr 1, 2012•2 citations
Mobile RFID is a new application that uses a mobile phone as an RFID reader with wireless technology and provides a new valuable service to users by integrating RFID and ubiquitous sensor network infrastructures with mobile communication and wireless Internet. Whereas the mobile RFID system has many advantages, privacy violation problems on the reader side are very concerning to individuals and researchers. Unlike in regular RFID environments, where the communication channel between the server and reader is assumed to be secure, the communication channel between the backend server and the RFID reader in the mobile RFID system is not assumed to be safe. Therefore it has become necessary to devise a new communication protocol that secures the privacy of mobile RFID-enabled devices. Recently, Lo et al. proposed a mutual key agreement protocol that secures the authenticity and privacy of engaged mobile RFID readers by constructing a secure session key between the reader and server. However, this paper shows that this protocol does not meet all of the necessary security requirements. Therefore we developed an enhanced mutual key agreement protocol for mobile RFID-enabled devices that alleviates these concerns. We further show that our protocol can enhance data security and provide privacy protection for the reader in an unsecured mobile RFID environment, even in the presence of an active adversary.
Radio Frequency Identification (RFID) systems represent a key technology for ubiquitous computing and for the deployment of the Internet of Things (IoT). In RFID technology, authentication protocols are often necessary in order to confirm the identity of the parties involved (i.e. RFID readers, RFID tags and/or database servers). In this article, we analyze the security of a mutual authentication protocol proposed by Wang and Ma. Our security analysis clearly shows major security pitfalls in this protocol. Firstly, we show two approaches that an adversary may use to mislead an honest reader into thinking that it is communicating with a legitimate database. Secondly, we show how an adversary that has compromised some tags can impersonate an RFID reader to a legitimate database. Furthermore, we present a new adversary model, which pays heed on cases missed by previous proposals. In contrast to previous models where the communication between an RFID reader and a back-end server is through a secure channel, our model facilitates the security analysis of more general schemes where this communication channel (RFID reader-to-server) is insecure. This model determines whether the compromise of RFID tags has any impact on the security of the reader-to-server communication or vice versa. In a secure protocol, the possible compromise of RFID tags should not affect the RFID reader-server communication. In this paper, we show that compromising of RFID tags in Wang and Ma protocol has a direct impact on the reader-server security. Finally, we propose a new authentication protocol that offers an adequate security level and is resistant against the mentioned security risks. The security proofs of the proposed protocol are supported with Gong-Needham-Yahalom (GNY) logic and Scyther tool, which are formal methods to evaluate the security of a cryptographic protocol.
In 2006, Lee and Ahn proposed a matrix-based RFID authentication protocol which eliminates the security problems in HB and RFID authentication protocols. Their proposed protocol provides the following three merits: (1) it reduces the computational costs of the RFID tag. (2) it reduces the communication overhead between the reader and the tag. (3) it protects the user privacy. However, this paper points out that Lee and Ahn's proposed protocol is insecure to various attacks because it does not provide mutual authentication which the RFID tag does not authenticate the legality of the RFID reader unlike their claims. In addition, this paper proposes an improved matrix-based RFID mutual authentication protocol that can provide the mutual authentication. As a result, the proposed protocol not only can provide strong security and but also guarantee high efficiency because it reduces the communication rounds compare with Lee-Ahn's protocol.
A low-cost, efficient and safe mutual authentication protocol for RFID based on elliptic curve cryptography (ECC) is proposed, specific to the security and privacy problem existed in the existing RFID authentication protocol, on the basis of deep analysis of the existing RFID protocol based on ECC.As to this proposal, mutual authentication between the tag and reader can be realized only through two sessions, under the condition of not destroying the security strength.So, the workload of calculation and system resource expense are reduced.The paper has described the protocol in detail and analyzed its security.The analysis result shows that, the protocol can resist tracking attack, replay attack, man-in-themiddle attack and other attacks, has good forward security and can realize mutual authentication between the server and the tag.Besides, it has definite practicability, due to low cost, security and scalability.
Radio Frequency Identification (RFID) and Near Field Communication (NFC) are wireless technologies applied in several domains, among which, remote education.The communication between different components of this system is unsecured, which may lead to several security and privacy problems.Designing authentication protocols to protect a remote education system in an open environment (e.g.NFC, RFID, and Internet) is a challenging task.Recently, Yang et al. proposed a mutual authentication protocol based on the hash function for RFID systems to secure this system.Yang et al. showed that their protocol is secure and can resist various attacks.This work proves that Yang et al.'s protocol does not achieve reader authentication, location privacy, and security forward.Furthermore, we propose an enhanced authentication protocol for secure remote education systems (EAP-SRES) using NFC technology.Our protocol is based on post-quantum cryptosystem to resist quantum attacks.Security analysis by using CL-AtSe (Constraint Logic based Attack Searcher) tool and Ouafi-Phan privacy model shows that the EAP-SRES protocol achieves the requirements of mutual authentication, untraceability and resists different possible attacks.In addition, EAP-SRES protocol is very efficient in term of performance.
Recently, along with the widespread use of various mobile devices in e-commerce, a variety of RFID systems are integrated in mobile devices. Poorly designed security RFID systems will bring a great security risks. This paper reviews the existing RFID system security mechanism and focuses on the digital library RFID security protocol. Security assumptions are changed in the new application environment, leading to a new attack on the original agreement. A security protocol with the mutual authentication function is designed on the basis of the original protocol. The new protocol is compatible with the original protocol, but against new attacks. Formal analysis shows that the new protocol is in accordance with established safety goals.