An Interoperable Internet Scale Solution for RFID Network Security

Abstract

Security and privacy issues are critically important in RFID networks because EPC data and their associated business events are valuable assets. In this paper, an Interoperable Internet-Scale Security (IISS) framework for RFID networks is proposed. The IISS framework performs authentication and au- thorization based on an aggregation of business rules, enterprise information, and RFID tag information. IISS provides a protocol for several authentication schemes and identity techniques. It also provides an engine for reasoning over business rules from different domains. Moreover, the IISS framework is able to resolve provenance information of RFID tags, which can identify the history of a particular piece of EPC data through the supply chain. The IISS framework and the IISS ontologies to model the information in RFID networks are also described, and how the IISS framework can be developed for access control in RFID enabled supply chains is discussed. Finally, the IISS framework's efficiency is tested using a supply chain EPC simulator as the testing platform, which allows optimization of the IISS protocol's performance. I. INTRODUCTION Since Radio Frequency Identification (RFID) was invented in 1946, RFID technology has had widespread application, including electronic passports, transportation payments, and inventory systems. As RFID deployment continues to in- crease, its associated applications have become more and more network-centric. Most tags are used in supply chains where the Electronic Product Code (EPC) and associated business event data are transmitted through RFID networks. The design of RFID network thus plays a critical role in successfully deploying large-scale applications. Security and privacy issues are critically important for RFID