An ultra-lightweight RFID authentication scheme for mobile commerce

Abstract

With the popularity of mobile social network, more and more people are willing to use a mobile device to accomplish some social activities, such as payment when shopping, product information inquiries, where RFID is a technology which can be good to complete payment functions on mobile devices. However, the widespread use of RFID tags brings the possibility for various security risks and privacy problems. In addition, the storage space, processing capability and power supply of RFID tags are limited. In this paper, in order to reduce the computational cost we present an ultra-lightweight RFID authentication scheme, named ULRAS. ULRAS only uses Bit and XOR operations to prevent the DDOS attack. ULRAS introduces the RR method to make the ULRAS more secure in communication, and uses sub-key and sub-index number into its key update process to achieve the forward security. Compared to the SASI protocol and the Gossamer protocol, ULRAS cost less computation and communication resources and have stronger security.