Survey on Prominent RFID Authentication Protocols for Passive Tags

Baashirah, Rania; Abuzneid, Abdelshakour

doi:10.3390/s18103584

Cited by 31 publications

(21 citation statements)

References 47 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The low-cost passive RFID tag is small chip designed with limited resources that are only able to perform low computations. Consequently, a literature review was conducted by Baashirah et al [1] to classify the RFID authentication protocols based on the algorithm complexity that the tag has to perform for its responses. This classification includes: heavy-weight, simple-weight, light-weight, and ultra-lightweight.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

SLEC: A Novel Serverless RFID Authentication Protocol Based on Elliptic Curve Cryptography

Baashirah

Abuzneid

2019

Electronics

Self Cite

View full text Add to dashboard Cite

Internet of Things (IoT) is a new paradigm that has been evolving into the wireless sensor networks to expand the scope of networked devices (or things). This evolution drives communication engineers to design secure and reliable communication at a low cost for many network applications such as radio frequency identification (RFID). In the RFID system, servers, readers, and tags communicate wirelessly. Therefore, mutual authentication is necessary to ensure secure communication. Normally, a central server supports the authentication of readers and tags by distributing and managing the credentials. Recent lightweight RFID authentication protocols have been proposed to satisfy the security features of RFID networks. Using a serverless RFID system is an alternative solution to using a central server. In this model, both the reader and the tag perform mutual authentication without the need for the central server. However, many security challenges arise from implementing lightweight authentication protocols in serverless RFID systems. We propose a new secure serverless RFID authentication protocol based on the famous elliptic curve cryptography (ECC). The protocol also maintains the confidentiality and privacy of the messages, tag information, and location. Although most of the current serverless protocols assume secure channels in the setup phase, we assume an insecure environment during the setup phase between the servers, readers, and tags. We ensure that the credentials can be renewed by any checkpoint server in the mobile RFID network. Thus, we implement ECC in the setup phase (renewal phase), to transmit and store the communication credentials of the server to multiple readers so that the tags can perform the mutual authentication successfully while far from the server. The proposed protocol is compared with other serverless frameworks proposed in the literature in terms of computation cost and attacks resistance.

show abstract

Section: Related Workmentioning

confidence: 99%

“…Furthermore, RFID technology has been expanding significantly to become essential for daily life matters and integrated with household, automotive, and smartphone applications. A simple RFID system consists of three main components: tags, readers, and servers [1]. The RFID tag is a small chip that works as a transponder to a query signal.…”

Section: Introductionmentioning

confidence: 99%

SLEC: A Novel Serverless RFID Authentication Protocol Based on Elliptic Curve Cryptography

Baashirah

Abuzneid

2019

Electronics

Self Cite

View full text Add to dashboard Cite

show abstract

“…TMIS Protocols Research for generic secure RFID protocols is very active: for instance, a recent survey compares 38 protocols [1]. As for protocols specifically designed for TMIS systems, Masdari et al presented a complete classification in [8], and show that no protocol in the litterature satisfies all the security requirements.…”

Section: Introductionmentioning

confidence: 99%

Towards Secure TMIS Protocols

Gerault

Lafourcade

2020

Foundations and Practice of Security

View full text Add to dashboard Cite

Telecare Medicine Information Systems (TMIS) protocols aim at authenticating a patient in a telecare context, and permitting information exchange between the patient and a distant server through a verifier. In 2019, Safkhani and Vasilakos [10] showed that several protocols of the litterature were insecure, and proposed a new protocol. In this paper, we show that their proposal is insecure, mainly due to incorrect use of distance bounding countermeasures, and propose a secure version, resistant to distance bounding related threats.

show abstract

“…The comprehensive security analysis of the EGP protocol ensures its security claims and robustness against all existing cryptanalysis models. The EPC C1G2 tags are the key component of the low-cost RFID systems due to characteristics like small size, low cost, and unlimited lifespan [20]. Other features of the EPC C1G2 identification system are enumerated as follows [18]: The rest of the paper is organized as follows: Section 2 discusses the Ultralightweight Mutual Authentication Protocols (UMAPs) for the resource constraint RFID systems followed by Section 3 that describes multiple cryptanalysis models used for the security and privacy evaluation of the UMAPs.…”

Section: Introductionmentioning

confidence: 99%

Ultralightweight RFID Authentication Protocols for Low-Cost Passive RFID Tags

Khalid

Mujahid

Najam-ul-Islam

2019

Security and Communication Networks

View full text Add to dashboard Cite

The field of pervasive computing especially the Internet of Things (IoT) network is evolving due to high network speed and increased capacity offered by the 5G communication system. The IoT network identifies each device before giving it access to the network. The RFID system is one of the most prominent enabling technologies for the node identification. Since the communication between the node and the network takes place over an insecure wireless channel, an authentication mechanism is required to avoid the malicious devices from entering the network. This paper presents a brief survey on the authentication protocols along with the prominent cryptanalysis models for the EPC C1G2 RFID systems. A comparative analysis is provided to highlight the common weaknesses of the existing authentication algorithms and to emphasize on the lack of security standardization for the resource constraint IoT network perception layer. This paper is concluded by proposing an ultralightweight protocol that provides Extremely Good Privacy (EGP). The proposed EGP protocol avoids all the pitfalls highlighted by the cryptanalysis of the existing authentication protocols. The incorporation of the novel ultralightweight primitives, Per-XOR ( ) and Inverse Per-XOR ( −1 ), makes the protocol messages more robust and irreversible for all types of adversaries. A comprehensive security analysis illustrates that the proposed protocol proves to be highly resistive against all possible attack scenarios and ensures the security optimally.Radio Frequency Identification (RFID) system is emerging as an enabling technology for the node discovery due to the features such as high speed, long range, and nonline of sight scanning [4]. The RFID enabled IoT networks are being preferred in various surveillance, monitoring, and healthcare applications. Table 1 highlights some of the prominent applications reported in the literature.The architecture of the RFID enabled IoT network is composed of three components: the RFID system, the IoT middleware, and the Internet [15]. The RFID system facilitates the node identification and the data collection. The data gathered from the environment under observation is processed by the IoT middleware. The IoT middleware also acts as a gateway to the external Internet [16].The architecture of the RFID system embedded in an IoT network consists of three main components; the Electronic Product Code (EPC) tag, the reader, and the database. The tag is a low-cost electronic chip with the unique identification number ( ). The reader identifies each tag associated with

show abstract

Survey on Prominent RFID Authentication Protocols for Passive Tags

Cited by 31 publications

References 47 publications

SLEC: A Novel Serverless RFID Authentication Protocol Based on Elliptic Curve Cryptography

SLEC: A Novel Serverless RFID Authentication Protocol Based on Elliptic Curve Cryptography

Towards Secure TMIS Protocols

Ultralightweight RFID Authentication Protocols for Low-Cost Passive RFID Tags

Contact Info

Product

Resources

About