Distance bounding-based RFID binding proof protocol to protect inpatient medication safety against relay attack. (2016)

• Record Type: Journal Article
• Authors: Falahati, Abolfazl; Jannati, Hoda
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 22:Number 2(2016)
• Page Start: 71
• Page End: 83
• Publication Date: 2016
• Subjects: distance bounding protocol -- mafia fraud attacks -- medication errors -- relay attacks -- RFID binding proof protocol -- inpatients -- patient safety -- patient medication -- radio frequency identification -- healthcare technology -- patient drugs -- authentication -- medication security -- hospital security; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

RFID binding proof protocols are suggested for the past decade to guard inpatient medication safety and to prevent medication errors in hospitals. In such protocols, the main goal is to authenticate two RFID tags (one for the patient and one for the patient's drug) simultaneously using an RFID reader by a nurse. This paper reveals that the existing RFID binding proof protocols are vulnerable to a relay attack. In the relay attack, an attacker is able to change the patient's drug without the nurse and the patient noticing the change. Furthermore, to overcome this weakness a paired distance bounding (PDB) protocol is proposed with two security parameters (N and t) to be deployed for RFID binding proof protocols. In a PDB protocol, two tags are authenticated simultaneously, and furthermore, an upper bound for the physical distance between these two tags and the reader is established. This implies the presence of both tags in the reader's area. The analytic results for the proposed protocol show that, with the appropriate selection of N and t parameters, the proposed protocol achieves a desirable security level against the relay attack.