Security Of RFID Systems Research Articles

HAKECC: Highly efficient authentication and key agreement scheme based on ECDH for RFID in IOT environment

The ever-increasing internet usage has led to creation of Internet of Things. RFID is one of the most common tracking tools for objects in Internet of Things, which has many different usages in navigation, medicine, military, smart cities, and smart homes. Therefore, researchers have presented various schemes to provide security of RFID systems. Based on our study results, most of proposed schemes have some weaknesses, such as vulnerability to some security attacks. Moreover, any proposed scheme should consider limitation of IoT systems in storage and power. This paper presents a secure and efficient protocol using elliptic curve cryptography for authentication and key agreement between RFID tag and reader. We evaluated security of our proposed scheme (HAKECC) by the Scyther tool, ROR model and BAN logic. The results show high security of HAKECC against different attacks. Later on, HAKECC was compared to other similar schemes based on communication cost (bits) and computation cost (ms); which shows considerably better performance compared to other similar schemes.

Research on RFID Security Evaluation Method in smart meter

People pay more attention to the security of RFID of smart meter, this paper establishes the evaluation index framework of RFID security. Then according to these indexes for the evaluation of the RFID system security which is based on fuzzy synthetic evaluation model, all of this is to evaluate the security of RFID system.

The Automatic Door Lock to Enhance Security in RFID System

This paper presents an automatic door lock as the classroom security system in the Electrical Engineering Department. This system use the ID Card (RFID) as the security key that connect to the server. ID Card as the input to trigger the microcontroller and send the data processing to the server. The server will give the instruction to the microcontroller as the input to the magnetic lock door. The aims of this study are to keep the security of the classroom based on arduino mega and verify the effectiveness of the classroom security door. The research method of this study are study of literature review, designing of the device and testing the system. The result show that the RFID card of classroom security door in Politeknik Negeri Sriwijaya based on arduino mega help the lectures improve the security, comfortability and the analysis descriptively found that the device can run effectively.

A Cross Layer Protocol for Fast Identification of Blocked Tags in Large-scale RFID Systems

Blocker tag attack is one of the denial-of-service (DoS) attacks that threatens the privacy and security of RFID systems. The attacker interferes with the blocked tag by simulating a fake tag with the same ID, thus causing a collision of message replies. In many practical scenarios, the number of blocked tags may vary, or even be small. For example, the attacker may only block the important customers or high-value items. To avoid the disclosure of privacy and economic losses, it is of great importance to fast pinpoint these blocked ones. However, existing works do not take into account the impact of the number of blocked tags on the execution time and suffer from incomplete identification of blocked tags, long identification time or privacy leakage. To overcome these limits, we propose a cross layer blocked tag identification protocol (CLBI). CLBI consists of multiple rounds, in which it enables multiple unblocked tags to select one time slot and concurrently verify them by using tag estimation in physical layer. Benefiting from the utilization of most collision slots, the execution time can be greatly reduced. Furthermore, for efficient identification of blocked tags under different proportions, we propose a hybrid protocol named adaptive cross layer blocked tag identification protocol (A-CLBI), which estimates the remaining blocked tag in each round and adjusts the identification strategy accordingly. Extensive simulations show that our protocol outperforms state-of-the-art blocked tags identification protocol.

Research on optimization schemes about physical layer security of RFID system with multiple antennas

Research on optimization schemes about physical layer security of RFID system with multiple antennas

SLAP: Succinct and Lightweight Authentication Protocol for low-cost RFID system

Data security is crucial for a RFID system. Since the existing RFID mutual authentication protocols encounter the challenges such as security risks, poor performance, an ultra-lightweight authentication protocol named Succinct and Lightweight Authentication Protocol (SLAP) is proposed. SLAP is only composed of bitwise operations like XOR, left rotation and conversion which is easy to implement on a passive tag. The proposed conversion operation as the main security component guarantees the security of RFID system with the properties such as irreversibility, sensibility, full confusion and low complexity, which better performed or even absent in other previous protocols. Security analysis shows that SLAP guarantees the functionalities of mutual authentication as well as resistance to various attacks such as de-synchronization attack, replay attack and traceability attack, etc. Furthermore, performance evaluation also indicates that the proposed scheme outperforms the existing protocols in terms of less computation requirement and fewer communication messages during authentication process.

A multi authentication scheme for RFID systems

Abstract. In this paper, a new design and robust security in RFID system is proposed which is based on hidden data synchronization. Scheme prepare multi authentication that authenticate tag and reader to server and server for tag and reader, unlike the study protocol was doing. It means that the relationship between Tag- reader and reader-server are both unsafe assumptions. Hash functions used in the project are limited and some Hash values already stored by the server on tag, until the tag will have to be calculated every time the query is computed only once we hash in tag. TAG ID in any way change the query that is used to securely synchronize done and makes the protocol attacks such as eavesdropping, relay, tracking and DOS is resistant. We have used PRNG function to generate pseudo-random numbers. Security analysis relevant to this project shows that the proposed scheme is robust against attacks.

Security Evaluation for RFID System: Security Evaluation Index Architecture and Evaluation Model

With the rapid development and application of RFID system, people would pay more attention to the security of RFID, which is the essential issue and key technology in RFID system. This paper establishes the evaluation index architecture of RFID security, then according to these indexes for the evaluation of the RFID system security which based on fuzzy synthetic evaluation model, this paper proposes a AHP (The Analytic Hierarchy Process) for weighs, and then applies fuzzy comprehensive evaluation method for more accurate and effective evaluation results, which is used to evaluate the security of RFID system. Our security evaluation index architecture and evaluation model with RFID system is very practical and effective in the real life. DOI : http://dx.doi.org/10.11591/telkomnika.v12i6.5401 Full Text: PDF

A lightweight authenticated encryption algorithm for RFID systems

Security of RFID systems is a very important issue with the increasing of their applications. To achieve secure communications between a reader and a tag in RFID systems, encryption of the communication data is usually performed. However, in case of low-cost RFID tags, it is difficult for them to adopt the well-known encryption algorithms because the tags have very limited resources to implement the encryption algorithms. Therefore, in this paper, we propose a new lightweight authenticated symmetric key encryption algorithm for RFID systems which use low-cost tags. To achieve a secure message authentication in the proposed algorithm, redundant bits are contained in a ciphertext. Even though the proposed algorithm uses very lightweight operations for the encryption/decryption, it provides confidentiality, authentication, and integrity.

The Security Evaluation Index Architecture and Evaluation Model with RFID System

People pay more attention to the security of RFID, this paper establishes the evaluation index architecture of RFID security, Then according to these indexes for the evaluation of the RFID system security which based on fuzzy synthetic evaluation model, all of this is to evaluate the security of RFID system.

Research on Multiple Security Authentication Protocol in RFID System

Weak security of RFID system is concerned by more and more people because of the fast development of internet of things. Some existing RFID authentications protocols begin to be analyzed, such as Mutual three-pass authentication, randomized Hash-Lock, which has some problem of being difficult to resist a variety of network attacks such as forgery tag attacks and a new bidirectional security authentication protocol,A multiple security authentication protocol is proposed to overcome the disadvantage of being vulnerable to cyber attacks. Analysis shows that this approach is of good security and privacy, low cost, and high efficiency.

A New Hash-Based Authentication Protocol for RFID Using Varying Identifiers

This article proposed a new security protocol with satisfying the lightweight requirements of the security of RFID system. Using varying identifiers, the protocol can resist Forward attack, Traffic analysis and Tracking attack, Replay attack. The Back-end Server holds the new identifier and last identifier for every Tag can keep database synchronization. Each Tag store a unique Key that is the secret information which also store in the Back-end Server. Use the Key, the protocol can implement mutual authentication between Back-end Server and Tag. Then the paper compared the proposed protocol with the typical protocols in security, effective and cost. The results demonstrate that the protocol can effectively solve the security problem of RFID systems.

ACSP: A novel security protocol against counting attack for UHF RFID systems

Current research on UHF RFID system security mainly focus on protecting communication safety and information privacy between a pair of specific tags and its corresponding interrogation reader. However, instead of stealing detailed private information of tags, adversaries may just want to estimate the cardinality of tags, which is named counting attack. Unfortunately, most existing protocols are vulnerable to counting attack. To defend against this attack, in this paper we propose ACSP, a novel Anti-Counting Security Protocol. ACSP employs session identifier and provides a corresponding authentication metric to verify the commands sent by the reader. To handle counting attack, ACSP periodically updates the session identifier, and securely identifies tags with encryption. We evaluate the performance of ACSP through theoretical analysis and qualitative comparison. Results show that ACSP can efficiently withstand counting attack as well as defending against regular security threats as existing protocols.

An optimal probabilistic solution for information confinement, privacy, and security in RFID systems

In this paper, we provide the following contributions to enhance the security of RFID based systems. First, we assume that among multiple servers storing the information related to the tags some of them can be compromised. For this new threat scenario, we devise a technique to make RFID identification server dependent, providing a different unique secret key shared by a tag and a server. The solution proposed requires the tag to store just a single key, thus fitting the constraints on tag's memory. Second, we provide a probabilistic tag identification scheme that requires the server to perform just bitwise operations and simple list manipulation primitives, thus speeding up the identification process. The tag identification protocol assures privacy, security and resilience to DoS attacks thanks to its stateless nature. Moreover, we extend the tag identification protocol to achieve mutual authentication and resilience to replay attacks. The proposed identification protocol, unlike other probabilistic protocols, never rejects a legitimate tag. Furthermore, the identification protocol requires the reader to access the local database (DB) of tags’ keys O( n) times—where n is the number of tags in the system—while it has been shown in the literature that a privacy preserving identification protocol requires a reader to access Θ ( n ) times this DB. In this sense, our protocol is optimal. Finally, the three features suggested in this paper, namely, reader-dependent key management, tag identification, and mutual authentication, can be independently adopted to build alternative solutions.

Collaborative RFID intrusion detection with an artificial immune system

The current RFID systems are fragile to external attacks, due to the limitations of encryption authentication and physical protection methods used in implementation of RFID security systems. In this paper, we propose a collaborative RFID intrusion detection method that is based on an artificial immune system (AIS). The new method can enhance the security of RFID systems without need to amend the existing technical standards of RFID. Mimicking the immune cell collaboration in biological immune systems, RFID operations are defined as self and nonself antigens, representing legal and illegal RFID operations, respectively. Data models are defined for antigens' epitopes. Known RFID attacks are defined as danger signals represented by nonself antigens. We propose a method to collect RFID data for antigens and danger signals. With the antigen and danger signal data available, we use a negative selection algorithm to generate adaptive detectors for self antigens as RFID legal operations. We use an immune based clustering algorithm aiNet to generate collaborative detectors for danger signals of RFID intrusions. Simulation results have shown that the new RFID intrusion detection method has effectively reduced the false detection rate. The detection rate on known types of attacks was 98% and the detection rate on unknown type of attacks was 93%.

A Framework for Assessing RFID System Security and Privacy Risks

This framework for evaluating security and privacy risks in RFID systems focuses on key application domains, assessing risk levels for each on the basis of RFID-specific criteria.