Zero Knowledge and Hash-Based Secure Access Control Scheme for Mobile RFID Systems

Abstract

The integration of RFID technology and mobile smart device stimulates the daily increasing popularity of mobile RFID-based applications, which makes its way to become a new hot zone for research and development. The primary mitigation strategies of RFID systems are ensuring that all devices are behind the corporate firewall, and physically securing the network itself. But due to the portable nature of an RFID Mobile device, as well as the potential to use wireless or internet connections for communications, Mobile RFID systems have specific security concerns that need to be addressed. In this paper, an authentication protocol based on zero-knowledge protocol and hashing in mobile RFID environment is proposed which effectively achieves forward security with preventing replay, eavesdropping, and counterfeit tag attacks.