Radio frequency identification (RFID) is one of the key technologies which constitute internet of things. Security and privacy issues of RFID systems is the focus of the present study. By analyzing several typical RFID security protocols, for the special security requirements of RFID systems in internet of things, in the paper, we propose a communication protocol SPAP(security-provable authentication protocol), then analyze and demonstrate the security of the protocol in details by the random oracle model. Analysis show that the protocol not only can solve the tag tracking, replay attack, cloning attack and the tag information indistinguishable, but also can solve the internal attack and the ownership transfer of tags and other issues of RFID Systems in internet of things. Finally, according to the comparisons, SPAP has the best performance.
Radio frequency identification (RFID) is one of the key technologies which constitute internet of things. Security and privacy issues of RFID systems is the focus of the present study. By analyzing several typical RFID security protocols, for the special security requirements of RFID systems in internet of things, in the paper, we propose a communication protocol SPAP(security-provable authentication protocol), then analyze and demonstrate the security of the protocol in details by the random oracle model. Analysis show that the protocol not only can solve the tag tracking, replay attack, cloning attack and the tag information indistinguishable, but also can solve the internal attack and the ownership transfer of tags and other issues of RFID Systems in internet of things. Finally, according to the comparisons, SPAP has the best performance.
Abstract Internet of Things (IoT) is the evolution of related technologies and applications such as Internet and mobile networks. Agriculture, as the source of food, is one of the key areas for the application of the IoT technology, and it is also the field with the most urgent, difficult and integrated characteristics of the IoT application. Future research into IoT will focus on generic technology, information security, and critical applications. Based on IoT, the existing Radio frequency identification system (RFID) security mechanisms are analyzed, with a focus on cryptographic protocols. Investigate the weaknesses or flaws in these protocols, and then a theoretical model and method to design and analyze RFID protocols within the provable security framework is discussed. A mutual authentication protocol of RFID system using synchronized secret information is put forward.
Radio Frequency Identification (RFID) is a prominent technology within the Internet of Things (IoT) ecosystem, offering efficient and reliable object identification in various domains, including business, healthcare, and manufacturing. The security of RFID systems is of paramount importance, and recent authentication protocols have been developed to address these security concerns. In this survey paper, we explore and evaluate the latest authentication protocols designed to enhance security in RFID communications, primarily concentrating on the interaction between RFID readers and tags. We critically assess contemporary lightweight RFID authentication protocols, considering aspects such as security requirements, computational efficiency, and resilience against potential attacks. However, with the advent of quantum computing, these protocols are under scrutiny for their vulnerability. As a result, we emphasize the need for researchers to shift their focus toward post-quantum cryptography solutions to bolster the security of RFID systems. This paper serves as a comprehensive overview of recent developments in RFID authentication, shedding light on the pressing need for quantum-resistant security measures in this field.
The Radio Frequency Identification(RFID) grouping-proof protocol is used to verify whether there are multiple tags,because in actual scenario,these tags are used for the identification of one object.However,due to the simple structure and limited computing and storage resources of the RFID tags,the security protocol is difficult to achieve.To address this problem,this paper proposes a grouping-proof protocol that insures privacy and forward security.First,this paper uses hash function and randomization to guarantee the confidentiality and privacy of each session.Then,by means of activate-sleep mechanism,filter-response mechanism and the combination of identity authentication and grouping-proof technology,the efficiency of protocol is improved.Analysis results show that the RFID grouping-proof protocol meets the requirements of anonymity and forward security,so it can prevent eavesdropping,tracking attack,replay attack and de-synchronize attack.
Radio Frequency Identification (RFID) systems represent a key technology for ubiquitous computing and for the deployment of the Internet of Things (IoT). In RFID technology, authentication protocols are often necessary in order to confirm the identity of the parties involved (i.e. RFID readers, RFID tags and/or database servers). In this article, we analyze the security of a mutual authentication protocol proposed by Wang and Ma. Our security analysis clearly shows major security pitfalls in this protocol. Firstly, we show two approaches that an adversary may use to mislead an honest reader into thinking that it is communicating with a legitimate database. Secondly, we show how an adversary that has compromised some tags can impersonate an RFID reader to a legitimate database. Furthermore, we present a new adversary model, which pays heed on cases missed by previous proposals. In contrast to previous models where the communication between an RFID reader and a back-end server is through a secure channel, our model facilitates the security analysis of more general schemes where this communication channel (RFID reader-to-server) is insecure. This model determines whether the compromise of RFID tags has any impact on the security of the reader-to-server communication or vice versa. In a secure protocol, the possible compromise of RFID tags should not affect the RFID reader-server communication. In this paper, we show that compromising of RFID tags in Wang and Ma protocol has a direct impact on the reader-server security. Finally, we propose a new authentication protocol that offers an adequate security level and is resistant against the mentioned security risks. The security proofs of the proposed protocol are supported with Gong-Needham-Yahalom (GNY) logic and Scyther tool, which are formal methods to evaluate the security of a cryptographic protocol.
In order to solve the weakness in security and privacy and the poor performance of the existing RFID authentication protocols,a Hash-based mutual authentication protocol for RFID is proposed and its security is proved by using the provable security model,with the privacy and security features of the proposed protocol analyzed.Compared with several RFID authentication protocols with the similar structure,the proposed protocol can effectively solve the privacy and security issues of the RFID system and has significant performance advantages,because it greatly reduces the amount of storage and computation of tags,and particularly improves the search efficiency of the server database.
With the extensive application of Radio Frequency Identification(RFID),the contradiction between its security and computation is serious.On this background,the security defects and cost of the main RFID secure authentication protocols are analyzed.On this basis,a new authentication protocol is promoted with higher security and lower cost.Its security is verified via the strand space model,which proves that the mutual authentication of reader and tag can be realized safety and reliability.The analysis results show that the protocol is resistible to attacks such as spoofing attack,eavesdrop attack,replay attack,type flaw attack,tracking and so on,and also provides perfect forward secrecy,which has a lower computation,and is suitable for low-cost RFID system.