A realistic lightweight authentication protocol preserving strong anonymity for securing RFID system. Issue 55 (November 2015)

• Record Type: Journal Article
• Authors: Gope, Prosanta; Hwang, Tzonelih
• Is Part Of: Computers & security. Issue 55(2015)
• Page Start: 271
• Page End: 280
• Publication Date: 2015-11
• Subjects: RFID -- Privacy -- Mutual authentication -- Strong anonymity -- DoS attack; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2015.05.004
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Radio Frequency Identification (RFID) system is a contactless automatic identification system using small, low-cost RFID tag to an animate or inanimate object. Because of the advantage of simultaneous recognition of massive amounts of information, it is expected to replace the traditional bar-code system. However, two major issues with an RFID system are: i) an adversary can access the tag information, which may cause privacy and forgery problems; ii) the computational capability of the RFID tags is very limited. Although, to deal with these issues, impressive efforts have been made by designing anonymous authentication schemes with the help of lightweight cryptographic primitives such as one way hash function, symmetric key encryption/decryption, exclusive-OR. However, to the best of our knowledge none has succeeded so far. In this article, we take an initial step to shed light on the rationale underlying this prominent issue. In order to do that, we will first demonstrate that the existing lightweight cryptographic primitive based anonymous authentication protocols in RFID systems are impractical. Subsequently, we propose a realistic lightweight authentication protocol for RFID system, which can ensure various imperative security properties such as anonymity of the RFID tag, untraceability, forward security etc. Highlights: Here, we have demonstrated that existing lightweight solutions for RFID system are impractical. We have proposed a realistic anonymous authentication protocol for RFID system. Proposed scheme can satisfy all the security requirements of the RFID system.