Supporting recovery, privacy and security in RFID systems using a robust authentication protocol

ABSTRACT

RFID systems have been scrutinized nowadays as one of the emerging technologies in pervasive environment. And authentication becomes indispensible in applications where security and privacy are major concerns. Besides thwarting some major attacks, RFID systems need to be able to recover from unexpected conditions during operation. In this paper, we propose a Robust Authentication Protocol (RoAP) that supports not only security and privacy, but also recovery in RFID systems. The protocol can get back the desynchronized tags and readers to their normal state, and thus provides robustness. We also present a "safety ring" consisted of six major goals that have to ensure by each RFID system to be secured. This paper illustrates security and robustness analysis of the protocol. Finally, we present the implementation of our authentication protocol.

REFERENCES

• 1: Ahamed, S. I., Rahman. F., Hoque, E., Kawsar, F., and Nakajima, T. YA-SRAP: Yet Another Serverless RFID Authentication Protocol. In the 4th IET International Conference on Intelligent Environment (IE08), Seattle, USA, Jul 2008.
• 2: Avoine., G. Security and Privacy in RFID Systems. http://www.avoine.net/rfid/, 2008.
• 3: Gildas Avoine , Philippe Oechslin, A Scalable and Provably Secure Hash-Based RFID Protocol, Proceedings of the Third IEEE International Conference on Pervasive Computing and Communications Workshops, p.110-114, March 08-12, 2005 [doi>10.1109/PERCOMW.2005.12]
• 4: Mauro Conti , Roberto Di Pietro , Luigi Vincenzo Mancini , Angelo Spognardi, RIPP-FS: An RFID Identification, Privacy Preserving Protocol with Forward Secrecy., Proceedings of the Fifth IEEE International Conference on Pervasive Computing and Communications Workshops, p.229-234, March 19-23, 2007 [doi>10.1109/PERCOMW.2007.100]
• 5: Juels, A. RFID Security and Privacy: A Research Survey. Manuscript, Sep. 2005.
• 6: Juels, A. and Weis, S. Defining Strong Privacy for RFID. Cryptology ePrint Archive, Report 2006/137, IACR, Apr. 2006.
• 7: Ohkubo, M., Suzuki, K., and Kinoshita, S. Cryptographic Approach to "Privacy-Friendly" Tags. In RFID Privacy Workshop, MIT, MA, USA, Nov 2003.
• 8: Seo, Y., and Kim, K. Scalable and Untraceable Authentication Protocol for RFID. In International Workshop on Security in Ubiquitous Computing Systems (Secubiq '06), Springer-Verlag, Seoul, Korea, August 2006.
• 9: Gene Tsudik, YA-TRAP: Yet Another Trivial RFID Authentication Protocol, Proceedings of the 4th annual IEEE international conference on Pervasive Computing and Communications Workshops, p.640, March 13-17, 2006 [doi>10.1109/PERCOMW.2006.152]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Authentication

General Terms:
Security, Verification

Keywords:
RFID, authentication, privacy, recovery, robust, security