Radio Frequency Identification Protocol Research Articles

Formal Security Analysis of ECC-Based RFID in Logic of Events Theory

Radio frequency identification (RFID) is a crucial component of the Internet of Things (IoT), and RFID using elliptic curve Cryptography (ECC) is a public key cryptosystem authentication approach that tackles the problem of electronic tag data encryption in RFID systems. The commercialisation and large-scale deployment of RFID systems has raised a number of security-related issues that suggest the need for security protocols. Logic of events theory (LoET) is a formal method for constructing and reasoning about distributed systems and protocols involving security concepts. This paper proposes three event classes, Compute, Retrieve, and Generate, and related axioms and inference rules to formally abstract the ECC session key generation function and formally institute the authentication process of both parties, and the ex-tended LoET is used to analyse the security properties of ECC-based RFID security protocols. Under reasonable assumptions, an ECC-based RFID mutual authentication scheme is shown to satisfy the strong mutual authentication feature. It is shown that extended logic of events theory may be used to prove the security properties of this class of ECC-based RFID protocols.

Enhancing Security and Privacy in Healthcare Systems Using a Lightweight RFID Protocol

Exploiting Radio Frequency Identification (RFID) technology in healthcare systems has become a common practice, as it ensures better patient care and safety. However, these systems are prone to security vulnerabilities that can jeopardize patient privacy and the secure management of patient credentials. This paper aims to advance state-of-the-art approaches by developing more secure and private RFID-based healthcare systems. More specifically, we propose a lightweight RFID protocol that safeguards patients’ privacy in the Internet of Healthcare Things (IoHT) domain by utilizing pseudonyms instead of real IDs, thereby ensuring secure communication between tags and readers. The proposed protocol has undergone rigorous testing and has been proven to be secure against various security attacks. This article provides a comprehensive overview of how RFID technology is used in healthcare systems and benchmarks the challenges faced by these systems. Then, it reviews the existing RFID authentication protocols proposed for IoT-based healthcare systems in terms of their strengths, challenges, and limitations. To overcome the limitations of existing approaches, we proposed a protocol that addresses the anonymity and traceability issues in existing schemes. Furthermore, we demonstrated that our proposed protocol had a lower computational cost than existing protocols and ensured better security. Finally, our proposed lightweight RFID protocol ensured strong security against known attacks and protected patient privacy using pseudonyms instead of real IDs.

Linear complementary pair of codes based lightweight RFID protocol

Data security and privacy is an essential topic in today’s life. It is necessary to prevent secret data from leakage. There are many services where data transfer is done without any physical contact and at a low-cost. Radio frequency identification (RFID) is one of the basic technical knowledge that solves the problem of data privacy. Many RFID protocols have been designed to ensure data security and privacy. But, a large portion of these protocols suffers from common security attacks and high computational costs. We present a lightweight RFID protocol based on linear complementary pair of codes to overcome these issues. This protocol ensures formal security using a random oracle model and BAN logic. For security verification of our protocol, we use the Scyther simulation tool. In addition, we compare the performance of our protocol in terms of storage costs, communication costs and computational costs with related existing protocols. We determine that our protocol gives preferable security and effectiveness over related competing protocols and is applicable for RFID systems.

SE-H: A Secure and Efficient Hash Protocol for RFID System

The Radio Frequency Identification (RFID) systems are suffered from the growing of security vulnerabilities. In the RFID Applications, an attackers may exploit these vulnerabilities to break the tag holder privacy and desynchronize the communication messages between system components. The majority of the proposed solutions fail to solve the existing vulnerabilities. Therefore, the authentication protocol is the main challenge in such systems. This paper proposes a secure and efficient hash authentication (SE-H) protocol for RFID system to support attractive security features. Compared with the recent RFID authentication protocols, the SE-H protocol cannot only perform strong security features including mutual authentication and the data secrecy features, but also perform the user anonymity and untraceability features with low cost performance. The security analysis proves that the SE-H protocol is resistant to the current vulnerabilities. Furthermore, the performance analysis in term of the authentication operations cost illustrates that SE-H protocol is more efficient than the recent RFID protocols.

Intermittent Magnetic Field Monitoring System Based on Passive RFID Sensor Tags

The monitoring of magnetic fields is extremely important in many industrial environments, e.g., power grids. Despite of its importance, the existing monitoring methods either are large in size, require high power consumptions and manual observation, or although integrated in small wireless devices, need the use of batteries, increasing maintenance costs. This paper proposes an intermittent magnetic field monitoring system based on passive ultra-high frequency (UHF) radio frequency identification (RFID) technology. A magnetic field magnitude sensor has been integrated into a micro-controller unit (MCU) based tag, and the standard RFID communication protocol ISO/IEC 18000-6 Type C has been partially modified to allow faster sensed data transfer, especially for multiple tag situations rarely considered in the open literature. Static or 50 Hz magnetic field sensing accuracy lower than 3% have been experimentally measured with reasonable tag charging times and read distances, making possible for example to monitor magnetic fields on more than 10 locations simultaneously with a 60 s of updating time with a tag read range of 3 m.

Survey: Vulnerability Analysis of Low-Cost ECC-Based RFID Protocols against Wireless and Side-Channel Attacks.

The radio frequency identification (RFID) system is one of the most important technologies of the Internet of Things (IoT) that tracks single or multiple objects. This technology is extensively used and attracts the attention of many researchers in various fields, including healthcare, supply chains, logistics, asset tracking, and so on. To reach the required security and confidentiality requirements for data transfer, elliptic curve cryptography (ECC) is a powerful solution, which ensures a tag/reader mutual authentication and guarantees data integrity. In this paper, we first review the most relevant ECC-based RFID authentication protocols, focusing on their security analysis and operational performances. We compare the various lightweight ECC primitive implementations designed for RFID applications in terms of occupied area and power consumption. Then, we highlight the security threats that can be encountered considering both network attacks and side-channel attacks and analyze the security effectiveness of RFID authentication protocols against such types of attacks. For this purpose, we classify the different threats that can target an ECC-based RFID system. After that, we present the most promising ECC-based protocols released during 2014–2021 by underlining their advantages and disadvantages. Finally, we perform a comparative study between the different protocols mentioned regarding network and side-channel attacks, as well as their implementation costs to find the optimal one to use in future works.

Developing parking queue monitoring system using Wireless Sensor Network and RFID technology

Parking areas in urban centers are increasingly limited, but not in line with technological developments in addressing the problem of parking service needs in the urban public service center by implementing smart city technology. Many times the parking service waiting time is too long, due to a complicated procedure. Waiting time for services that are too long makes the parking queue increase in length, especially when registering for the end of a new parking lot. Besides, the storage of visitors’ parking slip accumulation is still manual and not paperless. Therefore, in this study, a solution was proposed in the form of a system to accelerate administrative services for parking visitors by integrating Radio Frequency Identification (RFID) and Wireless Sensor Network (WSN) technologies. This system utilizes the database so that the results of data processing can be used by management to obtain visitor data information on parking online and quickly. The results obtained from this study are a prototype of a parking visitor monitoring system using WSN technology based on Zigbee and RFID protocols. Meanwhile, the results of visitor parking information presented in data processing can be used by management to find out statistical data relating to parking services.

5G-Compliant Authentication Protocol for RFID

The term “Internet of Things” was originally coined when radio frequency identification (RFID) technology was being developed to refer to applications where RFID tagged objects and sensors enabled computers to achieve effective situational awareness without human intervention. Currently, this term encompasses a myriad of medium/small devices connected to the Internet. On the other hand, 5G is a key enabling technology that will support next generation wireless communications. Moreover, 5G aims to realize the “Internet of Everything”. Surprisingly, despite the expected relationship between these two technologies, RFID tags have not been properly integrated into 4G and it is not clear if this will change in 5G. RFID is considered as a parallel technology where, at best, it has connection to the core network using back-end servers as gateways between the two technologies. With the aim of overcoming this problem, this paper proposes a 5G compliant RFID protocol that allows RFID tags to act as fully fledged 5G subscribers while taking into account the main characteristics of RFID systems. This proposal leverages the separation between USIM and mobile equipment within the user equipment to implement a 5G compliant protocol where tags accomplish the authentication part, as 5G subscribers, while readers assume the mobile equipment role, carrying out the 5G communication and most of the resource consuming tasks.

Lightweight ECC based RFID Authentication Protocol

The RFID (radio frequency identification) technology is being extensively accepted and used as a governing recognizing technology in medical management domain like information corroboration, patient records, blood transmission, etc. With more rigid security concern to RFID based authentication protocols, ECC (elliptic curve cryptography) established Radio Frequency Identification verification protocols is being expected to fit the prerequisite of security and privacy. However, abounding new published ECC based RFID protocols have severe security vulnerability. In the following paper, we have reviewed few RFID verification and authentication protocols and has compared its strengths, fragility and proposed less complex and more efficient authentication protocol.

Security Analysis and Enhancement of the Most Recent RFID Protocol for Telecare Medicine Information System

Radio-frequency Identification (RFID) schemes have been widely adopted in medical healthcare environments such as telecare medicine information system (TMIS). There are many research focus in the privacy protection of medical information security with cloud computing and big data technologies. This paper deeply identified the attacks of two RFID protocols in the literature. Fan et al.’s protocol (LRMP) and Benssalah et al.’s scheme (TMISP) both are subjected to tracking attacks, tag impersonation attacks, reader impersonation attacks. LRMP protocol suffers from de-synchronization attacks. In order to solve main weaknesses, the article presents a RFID medical privacy protection scheme based on cloud computing. The scheme ensures security and privacy of the collected data via secure authentication. The security analysis and performance evaluation shows that the proposed scheme can effectively solve security and privacy weaknesses, and resist against forward traceable attacks and backward traceable attacks.

Secure Lightweight IoT Integrated RFID Mobile Healthcare System

Patient safety is a global public health concern nowadays, especially in elderly people who need physiological health monitoring systems integrated with a technology which will help to oversee and manage the medical needs. In this direction, we propose a lightweight effective healthcare monitoring system designed by using the Internet of Things (IoT) and Radio Frequency Identification (RFID) tags. In this technique, we use dual-band RFID protocols which are the one working at a high frequency of 13.56 MHz and useful to figure out the individuals, and 2.45 GHz microwave bands are used to monitor corporal information. Sensors are used to monitor and collect patient physiological data; RFID tag is used to recognize the patient. This IoT-based RFID healthcare monitoring system provides acquisition of physiological information of elderly people and patients in hospital. Further, it is aiming to secure patient’s health recordings using hyper elliptic curve- (HEC-) based signcryption algorithm while allowing the doctor to access patient health information. Privacy is provided to variable length patient medical records using different genus curves, and the evaluation shows that the proposed algorithm is optimal with respect to healthcare.

Encrypted Tag Design for RFID Systems

The wireless implantable RFID tag combines wireless communication technology, medical sensor technology, and data conversion technology to achieve continuous detection of body indicators. The implantable tag system includes a small signal detection circuit, a readout circuit to complete sensor data acquisition and conversion, and a digital baseband and RF front end to perform communication with an external reader. The digital baseband processor handles communication protocols, controls communication flow, configures the RF front end, and controls the sampling of human body data by the ADC, which is a key component of the implantable tag system.Based on the 13.56MHz IS015693 radio frequency identification protocol, this paper designs and implements an encrypted tag baseband. Through the analysis of the protocol and the application requirements of the tag, the system architecture of the digital baseband is formulated. Subsequently, the functional logic was verified using Cadence’s Incisive EDA tool and synthesized using Synopsys’ EDA synthesis tool Design Compiler. The simulation results show that the logic function is correct. The synthesis tool report shows that under the 0.13um process, timing closures. The setup time and hold time meet the requirements.

Ultralightweight Mutual Authentication RFID Protocol for Blockchain Enabled Supply Chains

Previous research studies mostly focused on enhancing the security of radio frequency identification (RFID) protocols for various RFID applications that rely on a centralized database. However, blockchain technology is quickly emerging as a novel distributed and decentralized alternative that provides higher data protection, reliability, immutability, transparency, and lower management costs compared with a conventional centralized database. These properties make it extremely suitable for integration in a supply chain management system. In order to successfully fuse RFID and blockchain technologies together, a secure method of communication is required between the RFID tagged goods and the blockchain nodes. Therefore, this paper proposes a robust ultra-lightweight mutual authentication RFID protocol that works together with a decentralized database to create a secure blockchain-enabled supply chain management system. Detailed security analysis is performed to prove that the proposed protocol is secure from key disclosure, replay, man-in-the-middle, de-synchronization, and tracking attacks. In addition to that, a formal analysis is conducted using Gong, Needham, and Yahalom logic and automated validation of internet security protocols and applications tool to verify the security of the proposed protocol. The protocol is proven to be efficient with respect to storage, computational, and communication costs. In addition to that, a further step is taken to ensure the robustness of the protocol by analyzing the probability of data collision written to the blockchain.

Survey on Prominent RFID Authentication Protocols for Passive Tags.

Radio Frequency Identification (RFID) is one of the leading technologies in the Internet of Things (IoT) to create an efficient and reliable system to securely identify objects in many environments such as business, health, and manufacturing areas. Recent RFID authentication protocols have been proposed to satisfy the security features of RFID communication. In this article, we identify and review some of the most recent and enhanced authentication protocols that mainly focus on the authentication between a reader and a tag. However, the scope of this survey includes only passive tags protocols, due to the large scale of the RFID framework. We examined some of the recent RFID protocols in term of security requirements, computation, and attack resistance. We conclude that only five protocols resist all of the major attacks, while only one protocol satisfies all of the security requirements of the RFID system.

A Novel Authentication Management RFID Protocol Based on Elliptic Curve Cryptography

The existing RFID (Radio Frequency Identification) security protocol lacks the key establishment mechanism, assuming only that both parties of the authentication protocol have shared their respective session keys. However, key establishment is an integral part of the RFID security system. This article first introduces the elliptic curve related mathematical theory foundation. Then we establish the key negotiation mechanism, and analyze the correctness and rationality of the negotiation mechanism. Finally, we design the authentication protocol based on elliptic curve in mobile RFID system, analyze the protocol authentication process, and compare the security and performance with other protocols, which shows that the authentication protocol has more efficient performance and the ability to resist all kinds of attacks.

Lightweight RFID Protocol for Medical Privacy Protection in IoT

Traditional medical privacy data are at a serious risk of disclosure, and many related cases have occurred over the years. For example, personal medical privacy data can be easily leaked to insurance companies, which not only compromises the privacy of individuals, but also hinders the healthy development of the medical industry. With the continuous improvement of cloud computing and big data technologies, the Internet of Things technology has been rapidly developed. Radio frequency identification (RFID) is one of the core technologies of the Internet of Things. The application of the RFID system to the medical system can effectively solve this problem of medical privacy. RFID tags in the system can collect useful information and conduct data exchange and processing with a back-end server through the reader. The whole process of information interaction is mainly in the form of ciphertext. In the context of the Internet of Things, the paper presents a lightweight RFID medical privacy protection scheme. The scheme ensures security privacy of the collected data via secure authentication. The security analysis and evaluation of the scheme indicate that the protocol can effectively prevent the risk of medical privacy data being easily leaked.

Gen2 RFID-Based System Framework for Resource Circulation in Closed-Loop Supply Chains

Product recycling has become a mandatory activity under extended producer responsibility. Therefore, it is important to operate a closed-loop supply chain that integrates sourcing, production, delivery, and recycling to achieve not only environmental sustainability, but also economic benefits. However, this goal is affected by chronic problems caused by uncertainties relating to the return timing, quantity, and quality of returned items. Many studies proved that information visibility could solve these problems. In this context, a system framework for closed-loop supply chain management is proposed that gathers real-time information within a supply chain and product lifecycle by using the Internet-of-Things, including radio frequency identification (RFID). Specifically, the most recent Gen2 RFID protocol, which provides new features to create new positive effects, is considered. Additionally, an information system is designed, including RFID tag encoding, which supports the operation of the proposed system. Finally, the lifecycle benefits are examined, such as counterfeit prevention, real-time monitoring and maintenance in the middle-of-life phase, and reverse process streamlining. The ultimate aim is to design a system that facilitates the profitable and environmentally friendly operation of the closed-loop supply chain.

Cryptanalysis and improvement of two new RFID protocols based on R-RAPSE

RFID (Radio Frequency IDentification) is a pioneer technology which has depicted a new lifestyle for humanity. Nowadays we observe an increase in the number of RFID applications and no one can ignore their numerous usage. An important issue with RFID systems is providing privacy requirements of these systems during authentication. Recently in 2014, Cai et al. proposed two improved RFID authentication protocols based on R-RAPS (RFID Authentication Protocol Security Enhanced Rules). We investigate the privacy of their protocols based on Ouafi and Phan privacy model and show that these protocols cannot provide private authentication for RFID users. Moreover, we show that these protocols are vulnerable to impersonation, DoS and traceability attacks. Moreover, we present two improved efficient and secure authentication protocols to ameliorate the performance of Cai et al.’s schemes. Our analysis illustrates that the existing weaknesses of the discussed protocols are eliminated in our proposed protocols.

Attacks on and Countermeasures for Two RFID Protocols

Radio Frequency Identification (RFID) technology is expected to play a key role in the Internet of Things (IoT) and has applications in a wide variety of domains ranging from automation to healthcare systems. Therefore, the security and privacy of RFID communication is critical. In this paper, we analyze two recent RFID protocols proposed by researchers. Specifically we show that the ownership transfer protocol proposed by Wang et al., is vulnerable to tracing attacks while the mutual authentication protocol proposed by Cho et al. is vulnerable to key disclosure and backward traceable attacks. We propose secure improvements to these protocols to address the vulnerabilities, and improve the scalability of these schemes making them suitable for large-scale deployments.

CDTA

The Internet of Things (IoT) is transforming the way we live and work by increasing the connectedness of people and things on a scale that was once unimaginable. However, the vulnerabilities in the IoT supply chain have raised serious concerns about the security and trustworthiness of IoT devices and components within them. Testing for device provenance, detection of counterfeit integrated circuits (ICs) and systems, and traceability of IoT devices are challenging issues to address. In this article, we develop a novel radio-frequency identification (RFID)-based system suitable for counterfeit detection, traceability, and authentication in the IoT supply chain called CDTA . CDTA is composed of different types of on-chip sensors and in-system structures that collect necessary information to detect multiple counterfeit IC types (recycled, cloned, etc.), track and trace IoT devices, and verify the overall system authenticity. Central to CDTA is an RFID tag employed as storage and a channel to read the information from different types of chips on the printed circuit board (PCB) in both power-on and power-off scenarios. CDTA sensor data can also be sent to the remote server for authentication via an encrypted Ethernet channel when the IoT device is deployed in the field. A novel board ID generator is implemented by combining outputs of physical unclonable functions (PUFs) embedded in the RFID tag and different chips on the PCB. A light-weight RFID protocol is proposed to enable mutual authentication between RFID readers and tags. We also implement a secure interchip communication on the PCB. Simulations and experimental results using Spartan 3E FPGAs demonstrate the effectiveness of this system. The efficiency of the radio-frequency (RF) communication has also been verified via a PCB prototype with a printed slot antenna.