Ultralightweight RFID Authentication Protocols for Low-Cost Passive RFID Tags

Abstract

The field of pervasive computing especially the Internet of Things (IoT) network is evolving due to high network speed and increased capacity offered by the 5G communication system. The IoT network identifies each device before giving it access to the network. The RFID system is one of the most prominent enabling technologies for the node identification. Since the communication between the node and the network takes place over an insecure wireless channel, an authentication mechanism is required to avoid the malicious devices from entering the network. This paper presents a brief survey on the authentication protocols along with the prominent cryptanalysis models for the EPC C1G2 RFID systems. A comparative analysis is provided to highlight the common weaknesses of the existing authentication algorithms and to emphasize on the lack of security standardization for the resource constraint IoT network perception layer. This paper is concluded by proposing an ultralightweight protocol that provides Extremely Good Privacy (EGP). The proposed EGP protocol avoids all the pitfalls highlighted by the cryptanalysis of the existing authentication protocols. The incorporation of the novel ultralightweight primitives, Per-XOR ( ) and Inverse Per-XOR ( −1 ), makes the protocol messages more robust and irreversible for all types of adversaries. A comprehensive security analysis illustrates that the proposed protocol proves to be highly resistive against all possible attack scenarios and ensures the security optimally.Radio Frequency Identification (RFID) system is emerging as an enabling technology for the node discovery due to the features such as high speed, long range, and nonline of sight scanning [4]. The RFID enabled IoT networks are being preferred in various surveillance, monitoring, and healthcare applications. Table 1 highlights some of the prominent applications reported in the literature.The architecture of the RFID enabled IoT network is composed of three components: the RFID system, the IoT middleware, and the Internet [15]. The RFID system facilitates the node identification and the data collection. The data gathered from the environment under observation is processed by the IoT middleware. The IoT middleware also acts as a gateway to the external Internet [16].The architecture of the RFID system embedded in an IoT network consists of three main components; the Electronic Product Code (EPC) tag, the reader, and the database. The tag is a low-cost electronic chip with the unique identification number ( ). The reader identifies each tag associated with

Questioning the Security of Three Recent Authentication and Key Agreement Protocols

“…Hence, depending on the target application, some designers have tried to design their protocol using only bit-wise operations and bit-wise permutation functions, e.g. [11], [3], [26], [27], and some other tried to use more sound components such as hash functions, e.g. [28], Physically Unclonable Functions (PUF), e.g.…”

Design and Implementation of RFID Authentication Protocol based on Simple Symmetric Key (SSK) algorithm

“…Basically RFID system is a low-cost design with limited memory and power and capable to support wireless communication. Therefore, it is essential to introduce low-cost module cryptographic algorithm for privacy and security for the device [31].…”

“…The performance comparison of the EGP protocol shows that it outperforms compared to its contending UMAPs in terms of security. This remarkable feature makes EGP the best choice for extremely low-cost IoTs sensors and RFID tags [31].…”

“…The RFID reader transmits signals to the server about the object which can be attached with the manufacturer device. [28][29][30][31]. For the aspects of security concern of wired networks and wireless networks facing various vulnerabilities by the trespassers.…”

A New Mechanism for Generating an Ipv6 Address in IoT Context

“…Radiofrequency identification (RFID) [24] technology has gained a lot of attention in recent years. RFID is an automatic system that stores/retrieves data in/from devices called RFID tags.…”