Efficient identity authentication and encryption technique for high throughput RFID system

Hsu, Ching‐Hsien; Wang, Shangguang; Zhang, Daqiang; Chu, Hai-Cheng; Lü, Ning

doi:10.1002/sec.1488

Cited by 16 publications

(6 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Finally, the ATM machine will receive a matching result and a decision for the user's authentication request. Note that our idea can be extended to support other applications such as remote user authentication using smart cards and RFID identity authentication .…”

Section: Discussionmentioning

confidence: 99%

An enhanced user authentication solution for mobile payment systems using wearables

Wong

2016

Security Comm Networks

View full text Add to dashboard Cite

As technology continues to evolve, banks and other enterprises are restructuring their businesses to provide services to customers anywhere and anytime. However, it is challenging to move from conventional payment systems toward digital wallets across a range of payment services. Mobile devices are easily lost or stolen, so the rapid adoption of mobile devices for payment systems requires protection against unauthorized access to private applications and data. When mobile devices communicate with merchant point-of-sale systems, there is a risk of data leakage because third party applications in point-of-sale systems might access private data stored on the device without the user's knowledge or permission. We thus propose the use of wearable devices to store partial private data for the user and to participate in the user authentication. In this paper, we design a practical user authentication solution for mobile payment systems, and the main idea is to split the user's private data, such as credit card and banking information, and then store them across two separate devices (e.g., a smartphone and a wearable device). Our solution can improve the security of existing mobile payment systems that utilize user biometrics as an authentication factor, such as Apple Pay and Samsung Pay.

show abstract

Section: Discussionmentioning

confidence: 99%

An enhanced user authentication solution for mobile payment systems using wearables

Wong

2016

Security Comm Networks

View full text Add to dashboard Cite

show abstract

“…A key management identity authentication (KMIA) protocol for high throughput RFID system was proposed by Hsu et al [25]. This protocol was claimed to be able to achieve secure mutual authentication and data secrecy.…”

Section: Related Workmentioning

confidence: 99%

Ultralightweight Mutual Authentication RFID Protocol for Blockchain Enabled Supply Chains

Sidorov¹,

Ong²,

Sridharan³

et al. 2019

IEEE Access

View full text Add to dashboard Cite

Previous research studies mostly focused on enhancing the security of radio frequency identification (RFID) protocols for various RFID applications that rely on a centralized database. However, blockchain technology is quickly emerging as a novel distributed and decentralized alternative that provides higher data protection, reliability, immutability, transparency, and lower management costs compared with a conventional centralized database. These properties make it extremely suitable for integration in a supply chain management system. In order to successfully fuse RFID and blockchain technologies together, a secure method of communication is required between the RFID tagged goods and the blockchain nodes. Therefore, this paper proposes a robust ultra-lightweight mutual authentication RFID protocol that works together with a decentralized database to create a secure blockchain-enabled supply chain management system. Detailed security analysis is performed to prove that the proposed protocol is secure from key disclosure, replay, manin-the-middle, de-synchronization, and tracking attacks. In addition to that, a formal analysis is conducted using Gong, Needham, and Yahalom logic and automated validation of internet security protocols and applications tool to verify the security of the proposed protocol. The protocol is proven to be efficient with respect to storage, computational, and communication costs. In addition to that, a further step is taken to ensure the robustness of the protocol by analyzing the probability of data collision written to the blockchain. INDEX TERMS Blockchain, distributed ledger technology, radio frequency identification.

show abstract

“…RFID is simplest form of pervasive sensor networks and is commonly used for identification of physical objects [4,5]. Systems based on RFID consist of a tag, which is equipped with a transceiver to send and receive radio signals from connected devices [6,7]. The RFID Reader is the other device which acts as an access point and can receive and send messages to transceivers.…”

Section: Introductionmentioning

confidence: 99%

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

Mansoor

Ghani

Chaudhry

et al. 2019

Sensors

View full text Add to dashboard Cite

Despite the many conveniences of Radio Frequency Identification (RFID) systems, the underlying open architecture for communication between the RFID devices may lead to various security threats. Recently, many solutions were proposed to secure RFID systems and many such systems are based on only lightweight primitives, including symmetric encryption, hash functions, and exclusive OR operation. Many solutions based on only lightweight primitives were proved insecure, whereas, due to resource-constrained nature of RFID devices, the public key-based cryptographic solutions are unenviable for RFID systems. Very recently, Gope and Hwang proposed an authentication protocol for RFID systems based on only lightweight primitives and claimed their protocol can withstand all known attacks. However, as per the analysis in this article, their protocol is infeasible and is vulnerable to collision, denial-of-service (DoS), and stolen verifier attacks. This article then presents an improved realistic and lightweight authentication protocol to ensure protection against known attacks. The security of the proposed protocol is formally analyzed using Burrows Abadi-Needham (BAN) logic and under the attack model of automated security verification tool ProVerif. Moreover, the security features are also well analyzed, although informally. The proposed protocol outperforms the competing protocols in terms of security.

show abstract

Efficient identity authentication and encryption technique for high throughput RFID system

Cited by 16 publications

References 21 publications

An enhanced user authentication solution for mobile payment systems using wearables

An enhanced user authentication solution for mobile payment systems using wearables

Ultralightweight Mutual Authentication RFID Protocol for Blockchain Enabled Supply Chains

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

Contact Info

Product

Resources

About