POP method: an approach to enhance the security and privacy of RFID systems used in product lifecycle with an anonymous ownership transferring mechanism

ABSTRACT

Out of three types of RFID (Radio Frequency IDentification) tags, passive tags are widely used as they are cheaper and long-lasting. However, those tags are bounded with constraints, and also there is no acceptable method to manage the changing hands of the same tagged-product throughout the product lifecycle. Therefore, ensuring security and privacy of RFID tagged-products during the product-lifecycle has become crucial. This paper proposes a method named POP (Product-flow with Ownership-transferring Protocol), which consists of robust communication protocol and anonymous-ownership transferring mechanism to securely manage the changing hands of the same tagged-products and to control the behaviors of tags throughout the product lifecycle. Furthermore, the proposed method alleviates the risks by providing the controlling power of communication to the tagged-products' owners and also by introducing a long-term security maintenance technique. Thus, the POP method comprehensively ensures the privacy and security in RFID tagged-products used throughout the product lifecycle.

REFERENCES

• 1: David M, Andrea S, and David W, A Scalable, Delegatable Pseudonym Protocol Enabling Ownership Transfer of RFID Tags ECRYPT Workshop on RFID and Lightweight Crypto, Graz University of Technology, Graz, Austria (2005).
• 2: Gary M. Pisarsky, RFID Technology: An Analysis of Privacy and Security Issues, 20^th Computer Science Seminar, SA3-T1, (2004)
• 3: Xingxin (Grace) Gao , Zhe (Alex) Xiang , Hao Wang , Jun Shen , Jian Huang , Song Song, An Approach to Security and Privacy of RFID System for Supply Chain, Proceedings of the E-Commerce Technology for Dynamic E-Business, IEEE International Conference on (CEC-East'04), p.164-168, September 13-15, 2004 [doi>10.1109/CEC-EAST.2004.14]
• 4: Gwo-Ching Chang, A Feasible Security Mechanism for Low Cost RFID Tags, Proceedings of the International Conference on Mobile Business (ICMB'05), p.675-677, July 11-13, 2005 [doi>10.1109/ICMB.2005.2]
• 5: Lei Ye , Henry C. B. Chan, RFID-Based Logistics Control System for Business-to-Business E-Commerce, Proceedings of the International Conference on Mobile Business (ICMB'05), p.630-636, July 11-13, 2005 [doi>10.1109/ICMB.2005.85]
• 6: Martin H, Thomas J and Willi M. Grain -A Stream Cipher for Constrained Environments, ECRYPT Workshop on RFID and Lightweight Crypto, (2005) pages 114--125
• 7: Simson L. Garfinkel , Ari Juels , Ravi Pappu, RFID Privacy: An Overview of Problems and Proposed Solutions, IEEE Security and Privacy, v.3 n.3, p.34-43, May 2005 [doi>10.1109/MSP.2005.78]
• 8: Stephan J. Engberg, Morten B. Harning, Christian Damsgaard Jensen, Zero-knowledge Device Authentication: Privacy and Security Enhanced RFID preserving Business Value and Consumer Convenience, (2004).
• 9: Weis S. A, Sarma S. E, Rivest R. L and Daniel W. E., Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems. Laboratory for Computer Science-Auto-ID Center. MIT, USA

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

General Terms:
Security

Keywords:
RFID tag, anonymous ownership transfer, grain 1 stream-cipher, privacy, product lifecycle, protocol