Abstract Internet of Things (IoT) is the evolution of related technologies and applications such as Internet and mobile networks. Agriculture, as the source of food, is one of the key areas for the application of the IoT technology, and it is also the field with the most urgent, difficult and integrated characteristics of the IoT application. Future research into IoT will focus on generic technology, information security, and critical applications. Based on IoT, the existing Radio frequency identification system (RFID) security mechanisms are analyzed, with a focus on cryptographic protocols. Investigate the weaknesses or flaws in these protocols, and then a theoretical model and method to design and analyze RFID protocols within the provable security framework is discussed. A mutual authentication protocol of RFID system using synchronized secret information is put forward.
Abstract Internet of Things (IoT) is the evolution of related technologies and applications such as Internet and mobile networks. Agriculture, as the source of food, is one of the key areas for the application of the IoT technology, and it is also the field with the most urgent, difficult and integrated characteristics of the IoT application. Future research into IoT will focus on generic technology, information security, and critical applications. Based on IoT, the existing Radio frequency identification system (RFID) security mechanisms are analyzed, with a focus on cryptographic protocols. Investigate the weaknesses or flaws in these protocols, and then a theoretical model and method to design and analyze RFID protocols within the provable security framework is discussed. A mutual authentication protocol of RFID system using synchronized secret information is put forward.
Radio frequency identification (RFID) is one of the key technologies which constitute internet of things. Security and privacy issues of RFID systems is the focus of the present study. By analyzing several typical RFID security protocols, for the special security requirements of RFID systems in internet of things, in the paper, we propose a communication protocol SPAP(security-provable authentication protocol), then analyze and demonstrate the security of the protocol in details by the random oracle model. Analysis show that the protocol not only can solve the tag tracking, replay attack, cloning attack and the tag information indistinguishable, but also can solve the internal attack and the ownership transfer of tags and other issues of RFID Systems in internet of things. Finally, according to the comparisons, SPAP has the best performance.
Radio Frequency Identification (RFID) is a prominent technology within the Internet of Things (IoT) ecosystem, offering efficient and reliable object identification in various domains, including business, healthcare, and manufacturing. The security of RFID systems is of paramount importance, and recent authentication protocols have been developed to address these security concerns. In this survey paper, we explore and evaluate the latest authentication protocols designed to enhance security in RFID communications, primarily concentrating on the interaction between RFID readers and tags. We critically assess contemporary lightweight RFID authentication protocols, considering aspects such as security requirements, computational efficiency, and resilience against potential attacks. However, with the advent of quantum computing, these protocols are under scrutiny for their vulnerability. As a result, we emphasize the need for researchers to shift their focus toward post-quantum cryptography solutions to bolster the security of RFID systems. This paper serves as a comprehensive overview of recent developments in RFID authentication, shedding light on the pressing need for quantum-resistant security measures in this field.
Radio Frequency Identification (RFID) systems represent a key technology for ubiquitous computing and for the deployment of the Internet of Things (IoT). In RFID technology, authentication protocols are often necessary in order to confirm the identity of the parties involved (i.e. RFID readers, RFID tags and/or database servers). In this article, we analyze the security of a mutual authentication protocol proposed by Wang and Ma. Our security analysis clearly shows major security pitfalls in this protocol. Firstly, we show two approaches that an adversary may use to mislead an honest reader into thinking that it is communicating with a legitimate database. Secondly, we show how an adversary that has compromised some tags can impersonate an RFID reader to a legitimate database. Furthermore, we present a new adversary model, which pays heed on cases missed by previous proposals. In contrast to previous models where the communication between an RFID reader and a back-end server is through a secure channel, our model facilitates the security analysis of more general schemes where this communication channel (RFID reader-to-server) is insecure. This model determines whether the compromise of RFID tags has any impact on the security of the reader-to-server communication or vice versa. In a secure protocol, the possible compromise of RFID tags should not affect the RFID reader-server communication. In this paper, we show that compromising of RFID tags in Wang and Ma protocol has a direct impact on the reader-server security. Finally, we propose a new authentication protocol that offers an adequate security level and is resistant against the mentioned security risks. The security proofs of the proposed protocol are supported with Gong-Needham-Yahalom (GNY) logic and Scyther tool, which are formal methods to evaluate the security of a cryptographic protocol.
With the extensive application of Radio Frequency Identification(RFID),the contradiction between its security and computation is serious.On this background,the security defects and cost of the main RFID secure authentication protocols are analyzed.On this basis,a new authentication protocol is promoted with higher security and lower cost.Its security is verified via the strand space model,which proves that the mutual authentication of reader and tag can be realized safety and reliability.The analysis results show that the protocol is resistible to attacks such as spoofing attack,eavesdrop attack,replay attack,type flaw attack,tracking and so on,and also provides perfect forward secrecy,which has a lower computation,and is suitable for low-cost RFID system.
The Internet of Things (IoT) has become an important technology which permits different devices and machines to interconnect with each other using heterogeneous networks. The integration of numerous techniques is expected to offer extraordinary growth in future and current promising applications of IoT. In these days, the secure communication among interconnected IoT components has become an important issue of concern. Therefore, it has become a foremost need to design such authentication protocol which can make the secure communication among IoT components. In this article, we proposed an identity-based authentication and key agreement protocol for the IoT environment in order to offer the secure communication between various IoT entities. The devised protocol utilizes the physically unclonable function which helps to robustly resist the physical attack on IoT components. We analyze the proposed protocol informally which clearly shows that the proposed protocol offers the perfect forward secrecy, device anonymity and untraceability and also resists the desynchronization, IoT node impersonation and server impersonation attacks. The security features of proposed protocol are also analyzed formally using well known Random Oracle Model (ROM). Moreover, the performance of the devised protocol has also been determined in terms of communication and computational overhead. The performance and security analysis shows the supremacy of the devised protocol over the various related protocols.
The Internet of Things (IoT) represents a dynamic infrastructure, leveraging sensing and network communication technology to establish ubiquitous connectivity among people, machines, and objects. Due to its end devices’ limited computing resources and storage space, it is not feasible to merely transpose traditional internet security technologies directly to IoT endpoints. Maintaining security while concurrently ensuring performance is a particularly challenging endeavor. This paper provides a review of key agreements and authentication protocols pivotal to the security of IoT. First, this survey discusses the applications that need authentication and key agreement to strengthen their security and current research on these application fields. Subsequently, this paper engages in an in-depth exploration of the phase involved in the scheme of authentication and key agreement, including an examination of the cryptographic techniques employed within these processes. This survey also thoroughly studies the scheme’s security services, potential attacks, formal analysis and informal analysis to ensure resilience against such threats. This study aims to provide a profound understanding of the recent research on authentication and key agreement in IoT applications. It strives to contribute towards strengthening security systems for IoT applications, ensuring their sustainability in the face of evolving threats.