Analysis on Security and Privacy Guidelines: RFID-Based IoT Applications

Abstract

The Internet of Things (IoT) comprises many technologies, among them is Radio Frequency Identification (RFID), which can be used to track single or multiple objects. This technology has been widely used in healthcare, supply chain, logistics, and asset tracking. However, such applications require a high level of security and privacy and are unfortunately vulnerable to various attacks and threats that need to be addressed in order for RFID-based IoT applications to reach their full potential. To this end, we propose a set of security and privacy guidelines for RFID, supported by modelling guidelines, mitigations, and the attack vectors cohesively. We compare to the state of the art and point out their shortcomings on known guidelines and reason to address these in our model. The overall methodology is as follows: (i) identify the security and privacy guideline features, (ii) highlight the security goals for RFID-based IoT applications, (iii) analyze the features in relation to RFID industrial standards, and relate them to security goals, (iv) summarize attacks and threats against RFID applications and correlate them with violated security goals, (v) derive a set of security and privacy guidelines for RFID applications in accordance with security and privacy by design frameworks. We also describe our derived guidelines in connection with the involved stakeholders, and (vi) outline the existing mitigation strategies to implement our proposed guidelines. Finally, we describe the main limitations of our work that should be investigated in the future and identify the multiple challenges that concern current security strategies.INDEX TERMS Internet of Things;RFID;security guidelines;privacy guidelines;countermeasures;security goals;privacy and security by design;attacks

Semi-Passive UHF RFID Sensor Tags: A Comprehensive Review

“…The UHF RFID technology has gained significant popularity in the Internet-of-Things (IoT) industry due to its cost-effectiveness, extended lifespan and recent sensing capabilities [1]. This technology has found applications in various fields including logistics, healthcare, transport and industry, among others.…”

An overview of the consumer‐centric disruptive technology research: Insights from topic modelling and literature review

“…Take virtual reality (VR), for example, which only began to take shape in 2018 but swiftly flourished into a practical tool used across various industries by 2020. Although radio frequency identification technology has been around for longer, privacy and security concerns, as mentioned by(Abdulghani et al, 2022), remain a hot topic of scholarly focus. Despite the decline in research on older technologies, the emphasis on customer behaviour in creating smart retailing, self-service technology, and smart cities has increased in the past 3 years, leading to more significant benefits for the end user.Meanwhile, on the lower end of the graph, technologies such as big data remain in a world of theoretical discussions with little to no relevance to the industry or customers.…”