Radio Frequency Identification Security Research Articles

Formal Security Analysis of ECC-Based RFID in Logic of Events Theory

Radio frequency identification (RFID) is a crucial component of the Internet of Things (IoT), and RFID using elliptic curve Cryptography (ECC) is a public key cryptosystem authentication approach that tackles the problem of electronic tag data encryption in RFID systems. The commercialisation and large-scale deployment of RFID systems has raised a number of security-related issues that suggest the need for security protocols. Logic of events theory (LoET) is a formal method for constructing and reasoning about distributed systems and protocols involving security concepts. This paper proposes three event classes, Compute, Retrieve, and Generate, and related axioms and inference rules to formally abstract the ECC session key generation function and formally institute the authentication process of both parties, and the ex-tended LoET is used to analyse the security properties of ECC-based RFID security protocols. Under reasonable assumptions, an ECC-based RFID mutual authentication scheme is shown to satisfy the strong mutual authentication feature. It is shown that extended logic of events theory may be used to prove the security properties of this class of ECC-based RFID protocols.

VASERP: An Adaptive, Lightweight, Secure, and Efficient RFID-Based Authentication Scheme for IoV.

With the rapid growth in wireless communication and IoT technologies, Radio Frequency Identification (RFID) is applied to the Internet of Vehicles (IoV) to ensure the security of private data and the accuracy of identification and tracking. However, in traffic congestion scenarios, frequent mutual authentication increases the overall computing and communication overhead of the network. For this reason, in this work, we propose a lightweight RFID security fast authentication protocol for traffic congestion scenarios, designing an ownership transfer protocol to transfer access rights to vehicle tags in non-congestion scenarios. The edge server is used for authentication, and the elliptic curve cryptography (ECC) algorithm and the hash function are combined to ensure the security of vehicles' private data. The Scyther tool is used for the formal analysis of the proposed scheme, and this analysis shows that the proposed scheme can resist typical attacks in mobile communication of the IoV. Experimental results show that, compared to other RFID authentication protocols, the calculation and communication overheads of the tags proposed in this work are reduced by 66.35% in congested scenarios and 66.67% in non-congested scenarios, while the lowest are reduced by 32.71% and 50%, respectively. The results of this study demonstrate a significant reduction in the computational and communication overhead of tags while ensuring security.

ESRAS: An efficient and secure ultra-lightweight RFID authentication scheme for low-cost tags

Internet of Things (IoT) technologies rapidly evolve and are used in many real-life applications. One of the core technologies used in various IoT applications is Radio Frequency IDentification (RFID) technology. RFID wirelessly and uniquely identifies the tagged objects without a direct line of sight. However, the research community had reported privacy and security-related concerns in RFID systems, where an adversary may tamper, eavesdrop, add, delete, or even modify the transmitted messages over an insecure communication channel.To address the issues mentioned above, we propose an Efficient, Secure, and practical ultra-lightweight RFID Authentication Scheme (ESRAS), which uses rank operation for low-cost tags. We utilize a simplistic bitwise exclusive-OR, circular left rotation, and a newly proposed ultra-lightweight rank operation to provide high security at low cost. The analysis of ESRAS concerning its security and performance shows that it effectively resists several known attacks and is relatively superior to the existing schemes regarding the computational and storage costs. Moreover, ESRAS shows more suitability for low-cost RFID tags and can be executed in a multimedia big data environment.

Novel lightweight RFID authentication protocols for inexpensive tags

Radio-frequency identification (RFID) systems represent a support technology employed for the internet of things (IoT). Since RFID systems are now used extensively, it would be a mistake to disregard security problems and user privacy protection. However, constraints on computing power and storage resources in inexpensive tags of RFID have made the execution of security issues difficult. In other words, a persistent formidable challenge to RFID security is to design ultra-lightweight authentication protocols for RFID systems in acceptable compatibility with EPC Class-1 Generation-2 standards. Xiao et al. has recently proposed an appropriate lightweight authentication protocol for inexpensive tags by benefiting from the lightweight block cipher algorithm. They have claimed that their proposed protocol is resistant to all of the known attacks which may occur in RFID systems. In this paper, we show that the LRSAS protocol is vulnerable to replay, reader impersonation, tag tracking, and desynchronization attacks. We demonstrate that the use of fixed messages in the communication between the tag and the reader is led to these attacks. To improve the LRSAS protocol, We propose three lightweight protocols LRSAS+, LRARP, and LRARP+. We analyze the security level of the proposed protocols and prove the security of the proposed design using Gong–Needham–Yahalom logic (GNY logic). We also formally confirmed the security of the proposal using the Scyther simulation tool. According to security analysis, we can observe that these protocols have a high level of security. Furthermore, the performance of the proposed protocols is analyzed. A comparison of the performance of these three protocols with similar protocols shows that these protocols are at a better level than similar protocols in terms of computational costs, storage costs, and communication costs.

Ultralightweight Cryptography for passive RFID systems

RFID (Radio Frequency Identification) is one of the most growing technologies among the pervasive systems. Non line of sight capability makes RFID systems much faster than its other contending systems such as barcodes and magnetic taps etc. But there are some allied security apprehensions with RFID systems. RFID security has been acquired a lot of attention in last few years as evinced by the large number of publications (over 3000). In this paper, a brief survey of eminent ultralightweight authentication protocols has been presented & then a four-layer security model, which comprises of various passive and active attacks, has been proposed. Finally, Cryptanalysis of these protocols has also been performed under the implications of the proposed security model.

A new RFID ultra-lightweight authentication protocol for medical privacy protection in smart living

The widespread application of Radio Frequency Identification (RFID) technology in smart living, especially in smart healthcare, has greatly facilitated patient management, reduced the labor cost of medical services, and provided patients with better medical services. However, improper use of RFID tags is highly likely to threaten the safety and privacy of hospitals and even patients, which may not only cause physical and mental harm to patients but also damage the reputation of hospitals. Medical monitoring system based on RFID technology plays a significant role in guaranteeing the security of medical records as well as the privacy of patients. Nevertheless, due to the resource constraint of RFID tags/readers, it is also challenging to design an efficient and effective authentication protocol for RFID medical monitoring system. Aiming to reduce the resource overhead and meet security requirements of the RFID system, in this paper, we propose an ultra-lightweight RFID security authentication protocol utilizing a cloud server named CRUSAP, which is based on Bit-Crossing XOR rearrangement operations that can effectively resist forgery attacks, replay attacks, desynchronization attacks, and denial of service attacks while certifying the cloud server. The formal logic of BAN proves the safety and feasibility of the protocol. Additionally, the security analysis and experimental results show that the proposed authentication protocol can realize higher security goals at a lower cost and is more suitable for scaling to large-scale authentication.

A Blockchain-Based Secure Radio Frequency Identification Ownership Transfer Protocol

Supply chain management (SCM) governance is the streamline of the IoT product life cycle from its production to delivery. Integrating blockchain with supply chain management is essential to ensure end-to-end tracking, trustiness between manufacturers and customers, fraud and counterfeit elimination, and customizing administrative costs and paperwork. This paper proposes an RFID ownership transfer protocol with the help of zk-SNARKs (Zero Knowledge-Succinct Noninteractive Arguments of Knowledge) using Ethereum blockchain. When the owner performs RFID transfer, the transferred information will be recorded on the blockchain using smart contracts. When using a smart contract to transfer ownership on the Ethereum blockchain, because the content on the blockchain will not be tampered with, all accounts in the Ethereum can view the transfer results and verify them. The privacy of the supply chain is attained by generating the proof of product code via zk-SNARKs algorithm. This algorithm also enhances the scalability of the supply chain system by creating a trusted setup in off-chain mode.

Feature Selection and Cross Validation for Physical-Layer RFID Counterfeit Tag Identification

Since radio frequency identification (RFID) tags are easily cloned, tag anti-counterfeit is an important issue for RFID security. Physic-layer identification is a feasible method for the anti-counterfeit, and it introduces machine learning to train classification on tag physic-lay signals. However, there are still some problems further investigated for the method, such as features of tag and cross-validation. For that, this paper proposes a new learning method, which extracts time and frequency-domain statistics not only from the raw tag responding signal but also from its expected, noise and normalized signals, and adopts feature selection to classify authentic and counterfeit tags. In addition, this paper also proposes a new cross-validation to objectively test the performance of the physic-layer method. This experiment uses a software-defined radio to collect data from 140 tags of 7 classes from 3 manufacturers. The results show that the classification accuracy of this new method is 4-5 percent higher than that of the traditional method. Besides, under the new cross-validation, the classification accuracy of all of the physical layer methods will drop by 8-10 percent. From this, we get an important conclusion that the performance of the physic-layer methods will depend on whether a training set has attacking tag data.

Control Ports Authorities’ Equipment Based on RFID and SQL Security System

Equipment surveillance or tracking is a hard-to-accomplish mission for a multi-locations company. This study examines a complete security system in Alexandria and EL-Dekheila ports of Egypt, as case study, to track equipment location. The system uses RFID (radio frequency identification) and Arduino kit as hardware to detect equipment motion, and visual studio and SQL (structured query language) as software to produce reports. The original place of equipment is saved as a reference. IR and RFID sensors are used at every department’s gate for IT access and for detecting and decoding the received equipment’s RFID card and ID data. Visual studio and SQL help in issuing the report on each equipment’s location and movement time. The system sends instant email messages and cellular phone messages to the control room.

A Secure and reliable RFID authentication protocol using digital schnorr cryptosystem for IoT-enabled healthcare in COVID-19 scenario.

The Internet of Things (IoT) plays an important role in various healthcare applications. Radio Frequency IDentification (RFID) is widely used as a leading identification technology in a variety of IoT-health applications. In 2020, the number of cases of novel Corona Virus Disease 2019 (COVID-19) was increased rapidly throughout the world. Herein, IoT-Health enables the more convenient ways to access remotely and efficiently the medical services for the patients, also provides health monitoring by the doctors, physicians, and nurses over the Internet. However, security and privacy are considered key concerns in RFID-based IoT-health systems due to wireless communication over the channel. There could be huge risks of leakage of the patient’s sensitive information, medical data, privacy of the patients, and so forth. To overcome these shortcomings, we have put forward a secure and reliable RFID authentication protocol using Digital Schnorr Cryptosystem for IoT-Health in COVID-19 patients care named SAP-DSC. Compared with the similar existing protocols, the security analysis followed by the performance evaluation of our proposed protocol demonstrates the minimal computation overheads and also provides resistance to various well-known security attacks. The AVISPA and Scyther simulation results confirm that the proposed protocol is safe under active and passive attacks. The overall analysis shows that the SAP-DSC is relatively superior to the other similar existing protocols.

RFID Applications and Security Review

Radio frequency identification (RFID) is widely used in several contexts, such as logistics, supply chains, asset tracking, and health, among others, therefore drawing the attention of many researchers. This paper presents a review of the most cited topics regarding RFID focused on applications, security, and privacy. A total of 62,685 records were downloaded from the Web of Science (WoS) and Scopus core databases and processed, reconciling the datasets to remove duplicates, resulting in 40,677 unique elements. Fundamental indicators were extracted and are presented, such as the citation number, average growth rate, and average number of documents per year. We extracted the top topics and reviewed the relevant indicators using a free Python tool, ScientoPy. The results are discussed in the following sections: the first is the Applications Section, whose subsections are the Internet of Things (IoT), Supply Chain Management, Localization, Traceability, Logistics, Ubiquitous Computing, Healthcare, and Access Control; the second is the Security and Privacy section, whose subsections are Authentication, Privacy, and Ownership Transfer; finally, we present the Discussion section. This paper intends to provide the reader with a global view of the current status of trending RFID topics and present different analyses from different perspectives depending on motivations or background.

RFID-based Authentication System for Agriculture Application

This article proposes a design of smart and secure system topology for login using a RFID technology. Proposed technology ensures better safety, security and protection of your valuable data. The valuable information has been protected for computer hardware system and hence it is protected with login password. The more passwords for various data access such as laptops, IOT devices and to access cloud information. The very important application related to password protection and access data cloud field is agriculture. Due many hackers and IOT devices are enabled by many users hence its not safe to type and reuse password in many place led to leave of password. The proposed system develops safe and secure Radio-frequency identification (RFID) technique apply to IOT cloud architecture for enabling device and access the data to login and password device to share and open data yourself in a secured manner. The proposed device is plug-in concept device in IOT device so that system will require authenticate corresponds to operate the drive. If any misuse of that device face automation is enable hence to share safe data all around related to field of agriculture..

Low-Cost RFID Authentication Protocol Based on Elliptic Curve Algorithm

Radio frequency identification (RFID) is the fastest growing technology in the world today. Thus, wireless communication between tags and readers became an integral part of retail products, library books, personal identifications, and healthcare. The RFID system can provide security features to the data transferred along the network to maintain data privacy, integrity, and confidentiality. Elliptic curve cryptography (ECC) is widely used in RFID authentication protocols to improve communication security. Zhao proposed an RFID authentication protocol using ECC where a unique access list for tags is generated with the reader identifier to elevate the security level. Although Zhao's protocol can withstand most of the RFID security attacks, it has a very high computation cost. The authors improve Zhao protocol and propose a new RFID authentication protocol by reducing the computation cost almost to the half of that in Zhao. The proposed protocol shows a significant improvement in the computation cost.

A provably secure RFID authentication protocol based on ECQV for the medical internet of things

Radio Frequency Identification (RFID) is an emerging technology that is used for the unique identification of objects. RFID can be used in different application domains, including Health-care systems, where the safety of patient-sensitive data is a primary concern. Since the RFID technology is used in various medicine sectors, particularly real-time patient monitoring, patient medicine Information, medical emergency, and drug administration system, the use of RFID raises severe security and privacy concerns. In order to cope with these security issues, we propose an Elliptic curve based authentication protocol for RFID. The proposed model uses an implicit certificate concept to secure health-care data. We prove this claim for secure communication using the formal security analysis, i.e., BAN logic, security analysis based on the mathematical model, i.e., ROR model, formal verification using AVISPA tool, and informal security analysis. We review some of the RFID authentication schemes based on ECC in terms of performance and security. Our analysis indicates that the proposed protocol provides mobility, scalability, security, and privacy in the health care environment.

Double security system with RFID and password based on Arduino Mega 2560 and PLC

This research focuses on the use of RFID (Radio Frequency Identification) systems that are used as personal identification cards in the room access system. This system is intended to maintain the security and privacy of the room from someone who does not have the authority to enter the room. This security system uses a two-tier security system, namely through an RFID identity card and security code. The design and implementation of this system, an electric key work system is evaluated based on the solenoid component and the password used when accessing the room. RFID tags used in this system are in the form of “Mifare RFID Card 13.56 Mhz” cards and store unique codes used as personal identification. This code is read by the RFID reader in validating its authority with Arduino Mega 2560 to regulate the system of electric locks and passwords used to open the door. From the test results, 100% RFID tags can be recognized by the RFID reader, 100% RFID tag and password reading system is successfully used to access the room.

A comprehensive taxonomy of security and privacy issues in RFID

Internet of things (IoT) is made up of many devices like sensors, tags, actuators, mobile devices, and many more. These devices interact with each other without human interaction. Radio-frequency identification (RFID) devices are used to track people, assets, objects, etc. Along with the small memory capacity and low-power battery issues, these devices suffer from various security-related issues. These security threats include attacks such as replay, disclosure, tracking, offline guessing, denial of service attacks, and many more. In the last few decades, the researchers have suggested various security approaches to overcome these vulnerabilities. Hence, this paper discusses various possible attacks that can occur on an RFID system, and several security schemes that have been proposed to handle these attacks. First, the works presents the architecture of IoT in detail. Second, all possible attacks are described by categorizing them into confidentiality, integrity, and availability. Then, taxonomy of various security schemes, to deal with these attacks, is discussed under the criteria cryptography approaches, privacy, authentication, authorization, and availability. Finally, the paper describes various issues and challenges to have a better understanding of scope of the future research in the field of RFID security.

A Systematic Mapping Study on Radio Frequency Identification Security

Background: Radio frequency identification (RFID) technology can be applied in identification, security and tracking system platforms due to its flexible and low-cost implementation. The sensing ability of this technology can also be used to monitor real-life environmental changes and physical phenomena. RFID is designed to work in open wireless communication. Therefore, this system can be attacked by different malware. Enhancing RFID with new security and privacy features isimportant at present. Objective: The current work is a systematic mapping study on RFID security. The types, contributions, facets and activities of research on RFID security were plotted. Methods: The systematic mapping for a specific search are was done by identifying the number of RQs. These RQs help researchers obtain comprehensive related studies. The RQs must be selected carefully because they determine the research direction and help rapidly obtain the required information and studies. Results: We gathered 2133 relevant studies and retained 92 primary papers after four filtering processes. We classified them into three facets. Results provide researchers and readers an overview of existing relevant studies and help them identify the properties in the focus area. Conclusion: The systematic mapping study used to report the design, execution, tool, application and results of a Radio frequency identification (RFID). We systematically chose and deeply analyzed all concepts related (RFID) techniques and implementation methods which provide a complete about the (RFID) state and environment of studies.

An enhanced scalable and secure RFID authentication protocol for WBAN within an IoT environment

Nowadays, Internet of Things (IoT)-based E-healthcare represents an emergent research field due to the fast development of wireless technologies and cloud computing. Radio Frequency Identification (RFID) is an integral technology in IoT thanks to its low cost and autonomous data collection and transfer. These features made it useful in Wireless Body Area Network (WBAN) for healthcare applications. However, data security and patient privacy remain major challenges in WBANs. In this context, many authentication protocols have been designed trying to satisfy both security and implementation requirements. Most recently, Naeem et al. have proposed an RFID authentication scheme for IoT which is claimed to be secure and provides scalability. Unfortunately, we have found that their protocol does not provide authentication and anonymity and it is vulnerable to numerous attacks. To overcome these security issues, we propose, in this paper, an efficient extended and improved IoT-based RFID authentication scheme for WBANs. Our proposed protocol could resist to various attacks and ensure mutual authentication from the tag to the medical server, in addition to patients data security. For this, elliptic curve cryptography (ECC) encryption mechanism and elliptic curve digital signature with message recovery (ECDSMR) have been adopted. Formal and informal analysis have proved that our proposed protocol succeeded to provide many security features and offer reliable data security with a considerably small computational and storage cost compared to existing schemes.

Security and Threats of RFID and WSNs: Comparative Study

The Internet of Things (IoT) has garnered significant attention from people with growing changes in human life over the last few years. IoT is a network of a group of smart devices that use sensors to collect information and conduct events in their environments. The information can then be shared on the Internet. IoT uses a range of technologies and finds various applications such as smart homes, environmental monitoring, and healthcare. In this paper, we conducted a comparative study to analyze the difference between two technologies—Wireless Sensor Networks (WSNs) and Radio Frequency Identification (RFID). It is pertinent to note that these technologies would not be effective without incorporating security aspects due to a potential number of threats and attacks on the network. This paper provides a comprehensive review of the recent approaches to securing RFID and WSNs. We have carefully chosen most of these studies to investigate only the recent technique from 2017 to 2020. The paper also highlights common attacks on RFID and WSNs and the secure authentication mechanisms on these technologies. It further provides a different way of detecting varying attacks in RFID and WSNs.

RFID Authentication Scheme Based on Hyperelliptic Curve Signcryption

The implementation of efficient security mechanisms for Radio Frequency Identification (RFID) system has always been a continuous challenge due to its limited computing resources. Previously, hash-based, symmetric-key cryptography-based and elliptic curve cryptography based security protocols were proposed for RFID system. However, these protocols are not suitable because some of them failed to fulfil the RFID security requirements, and some of them produce high computational overhead. Recently researchers have focused on developing an efficient security mechanism based on Hyper Elliptic Curve Cryptography (HECC) which provides high security with 80 bits lower-key size. In this paper, we propose an efficient RFID authentication scheme (RFID-AS) based on hyperelliptic curve Signcryption. The proposed RFID-AS provides the required security features for the RFID system as well as security from potential attacks. We validated the security of proposed RFID-AS by using formal security analysis techniques, such as the Real-Or-Random (ROR) model and Automated Validation of Internet Security Protocols and Applications (AVISPA). Furthermore, the results reveal that the computational, communication and storage overheads of the proposed RFID-AS is much less than the other recently proposed schemes. Compared to the most recently published work based on ECC Signcryption, our scheme is 70% efficient in terms of computational overhead, 42.7% efficient in terms of communication overhead, and 57.7% efficient in terms of storage overhead. Therefore, the proposed RFID-AS is more efficient as compared to the recently published work in this domain. Hence, it is an attractive solution for resource-limited devices like RFID tags.