A security protocol for RFID traceability. (11th January 2016)

• Record Type: Journal Article
• Authors: Gandino, Filippo; Montrucchio, Bartolomeo; Rebaudengo, Maurizio
• Is Part Of: International journal of communication systems. Volume 30:Number 6(2017)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2016-01-11
• Subjects: RFID -- security -- public key -- supply chain; Telecommunication systems -- Periodicals; 621.382
• DOI: 10.1002/dac.3109
• Languages: English
• ISSNs: 1074-5351

Abstract

Summary: Nowadays, traceability represents a key activity in many sectors. Many modern traceability systems are based on radio‐frequency identification (RFID) technology. However, the distributed information stored on RFID tags involves new security problems. This paper presents the traceability multi‐entity cryptography, a high‐level data protection scheme based on public key cryptography that is able to protect RFID data for traceability and chain activities. This scheme is able to manage entities with different permissions, and it is especially suitable for applications that require complex Information Systems. Traceability multi‐entity cryptography avoids industrial espionage, guarantees the information authenticity, protects the customer privacy, and detects malicious alterations of the information. In contrast to the state‐of‐the‐art RFID security schemes, the proposed protocol is applicable to standard RFID tags without any cryptographic capability, and it does not require a central database. Copyright © 2016 John Wiley & Sons, Ltd. Abstract : This paper presents the Traceability Multi Entity Cryptography (TMEC), a high level data protection scheme based on public key cryptography that is able to protect RFID data for traceability and chain activities. TMEC is able to manage entities with different permissions, avoids industrial espionage, guarantees the information authenticity, protects the customer privacy, and detects malicious alterations of the information. TMEC is applicable to standard RFID tags without any cryptographic capability, and it does not require a central database.