EAP-SRES: An Enhanced Authentication Protocol for Secure Remote Education Systems Using NFC Technology

Abstract

Radio Frequency Identification (RFID) and Near Field Communication (NFC) are wireless technologies applied in several domains, among which, remote education. The communication between different components of this system is unsecured, which may lead to several security and privacy problems. Designing authentication protocols to protect a remote education system in an open environment (e.g. NFC, RFID, and Internet) is a challenging task. Recently, Yang et al. proposed a mutual authentication protocol based on the hash function for RFID systems to secure this system. Yang et al. showed that their protocol is secure and can resist various attacks. This work proves that Yang et al.'s protocol does not achieve reader authentication, location privacy, and security forward. Furthermore, we propose an enhanced authentication protocol for secure remote education systems (EAP-SRES) using NFC technology. Our protocol is based on post-quantum cryptosystem to resist quantum attacks. Security analysis by using CL-AtSe (Constraint Logic based Attack Searcher) tool and Ouafi-Phan privacy model shows that the EAP-SRES protocol achieves the requirements of mutual authentication, untraceability and resists different possible attacks. In addition, EAP-SRES protocol is very efficient in term of performance.

A Systematic Literature Review on Authentication and Threat Challenges on RFID Based NFC Applications

“…In addition, some attempts have been made to gain security for different computing edges. The post-quantum McEliece cryptosystem has been carried out for remote education [20]. Watermarking and deep learning techniques canbe implemented for facial and fingerprint recognition [17,27].…”

The Application of LoRa Module and Smart Card for A Large-Scale Area Attendance Monitoring System

“…The Internet of Things (IoT) plays a very important role in various sectors such as education, agriculture, plantations, and smart cities [1], [2], [3], [4], [5]. In the plantation sector, IoT can be used to send the presence status of field workers working for a company.…”