A Secure ECC-Based RFID Authentication Scheme Using Hybrid Protocols

Radio Frequency IDentification (RFID) technology successfully integrates radio transmitter and receiver, small size memory space and control circuitry to remotely store and retrieve data via wireless RF transceiver. As low-cost RFID tag can be massively manufactured by semiconductor industry, new applications associated with RFID technology have emerged rapidly such as inventory tracking, book storage and management, and airport baggage handling. Generally an RFID system is composed of many RFID tags (or tagged objects), at least one RFID reader, and one backend application system with database. An RFID tag gains its operation energy from query signals that are radio waves transmitted by RFID reader. Once a tag responds the query with its stored information to RFID reader, usually a unique identity number or string, the RFID system can recognize the tag carrier and perform required business logic operation. As RFID technique is widely used in supply chain management, the corresponding RFID application systems are expected to process and manage large amount of tagged objects at a predefined period of time regularly. Therefore, for large-scaled RFID applications, tag reading throughput is very critical since it will affect the total data processing time. To measure tag reading throughput of a RFID system, two performance criteria are usually adopted: tag reading delay and reader energy consumption [5]. As RFID reader and tag always communicate over a shared wireless channel, it is very easy to have signal collisions during a normal tag identification process when multiple tags exist in reader’s interrogation area. Signal collision results in query or data retransmission and eventually increases communication overhead and time delay of tag identification. Hence, an efficient tag collision arbitration mechanism is very important and critical for RFID systems to achieve effective performance. Existing RFID tag identification schemes can be classified into aloha-based solutions [3, 10, 12-13, 16, 21, 23-24] and tree-based solutions [1, 2, 4, 6-9, 14-15, 17-20, 22]. In aloha-based schemes, a reader estimates the number of tags in its interrogation area and broadcasts the total number of timeslots to each tag. Then each RFID tag randomly selects its own timeslot to transmit its ID without knowing which timeslots have been selected by other tags. By distributing tag responses to distinct timeslots instead of getting all tag responses at the same time, aloha-based schemes effectively reduce the probability of signal collision. However, aloha-based schemes have tag starvation problem in which certain tags may not

The explosion in recent interest in radio-frequency identification (RFID) tags stems primarily from advances in information processing in supply chain management. Given their processing power and memory capabilities, RFID tags can be used in a wide range of applications including those where barcodes can and cannot be used. Although the potential exists, it is hampered by the relatively high unit cost of implementation and issues related to privacy and security. As with any technology, unit cost of RFID tags and their related systems is bound to come down. As for security and privacy issues, the main impediments are limited processing power, memory, and external power to operate these tags. In spite of these resource constraints, recent years have seen a plethora of new authentication protocols that promise to alleviate security and privacy concerns associated with the use of RFID tags. We evaluate a few protocols that have been suggested for use in passive RFID-tagged systems and identify vulnerabilities that may be present. When appropriate, we present modifications of existing protocols to prevent identified vulnerabilities.

Authentication is an essential issue for any organization. Previously, automated authentication was present using punch cards system, but it had security issues. Now days, organizations prefer to have biometrics based authentication. But using biometrics applications is very costly and time consuming. We can derive a time and cost effective solution for this problem using RFID (Radio Frequency Identification). Using feature provided by RFID to detect multiple individuals with very short amount of time and provide security with image pattern matching algorithm. To implement this system, we will interface camera with RFID enabled system which will use Low Frequency (LF) RFID tags. On every detection the camera will capture photograph. Then authentication is processed by using image pattern matching algorithm. Such system will be cost and time effective. Radio Frequency Identification (RFID) is old technology but more widely used in location tracing and tracking applications, due to wider reading ranges, and larger memory capacities, making it a key contributor to the growth of the radio technology industry. Many large corporations are interested in research and development within the field of RFID due to potential growth in various RFID applications. The people management system is an application where masses data needs to be collected and managed in a short duration. But due to authentication issues with this technology makes it less effective. RFID is an automated data collection technology in which radio communication for data transfer across two entities: a reader and a tag. The tag has two sections: one for radio communication and other for data storage. The tags are broadly classified into 3 categories namely active, passive and semi passive. The active tags have an internal power source e.g. a battery, which limits the life time. A passive tag doesn't have a power source and obtain the energy from the magnetic field of the reader. These types of tags are smaller, cheaper and can be used for long time. The scope of the paper is limited to passive tags. The functionality of RFID Passive tags is very simple. When a tag comes in the vicinity of the reader, it detects the radio signals generated by the reader and start to transmit the data stored in the memory. The radio signal generated by the reader offers the power needed to function and the synchronization data for communication between two entities. RFID has emerged as a key technology for automatic data collection. Using this, one can speed up authentication process. Every individual having RFID enabled identity can be detected in very short amount of time. But problem of secured authentication comes into the picture here. One way is proceeding with camera and matching the pattern for individual's photograph.

Radio frequency identification (RFID) is a generic term that is used to describe a system that transmits the identity (in the form of a unique serial number) of an object or person wirelessly, using radio waves. However, there are security threats in the RFID system related to its technical components. For example, illegal RFID tag readers can read tag ID and recognize most RFID Readers, a security threat that needs in-depth attention. Previous studies show some ideas on how to minimize these security threats like studying the security protocols between tag, reader and Back-end DB. In this research, the team proposes an RFID Tag ID Subdivision Scheme to authenticate the permitted tag only in USN (Ubiquitous Sensor Network). Using the proposed scheme, the Back-end DB authenticates selected tags only to minimize security threats like eavesdropping and decreasing traffic in Back-end DB.

An agent-based English auction protocol using Elliptic Curve Cryptosystem for mobile commerce

Radio Frequency Identification (RFID) is name given to technology that uses tags, readers and backend servers to form a system that has numerous applications in many areas, much discovered and rest are to be explored. Before implementing RFID system security issues must be considered carefully, taking not care of security issues could lead to severe consequences. This paper is overview of Introduction to RFID, RFID Fundamentals, basic structure of a RFID system, some of its numerous applications, security issues and their remedies.

Radio frequency identification (RFID) tags are cheap and simple devices that can store unique identification information and perform simple computation to keep better inventory of packages. Security protocol for RFID tags is needed to ensure privacy and authentication between each tag and their reader. In order to accomplish this, in this paper, we analyzed a lightweight privacy and authentication protocol for passive RFID tags.

Radio frequency identification (RFID) is a relatively new technology widely deployed in many applications. Due to several advantages of the technology including decreased costs and increased speed, different organizations and industries show interest in it, and its application range is gradually developing. Some of the main problems of RFID are security and privacy. The implementation of authentication protocols is a flexible and effective way to solve these problems. Several authentication protocols of RFID are based on hash functions or symmetric cryptography. According to the small size of the key, efficient computations, and high security in the elliptic curve cryptography (ECC), its use has increased. Recently some certain ECC-based authentication protocols have been represented. In this paper, a RFID authentication protocol is presented using ECC for mutual authentication to overcome weaknesses of the existing authentication protocols. It has been shown that the proposed protocol satisfies security requirements of RFID authentication protocol and prevents different attacks on RFID systems. Also, the proposed authentication protocol has been analyzed in terms of computational costs, communication costs, and storage requirements. The results revealed that the proposed authentication protocol is an appropriate model for RFID tags with limited resources.

Radio Frequency IDentification (RFID) is a dedicated short range communication (DSRC) technology that enables a physically linked world where every object is identified, catalogued, and tracked through the use of a RFID tag, comprised of an IC (Integrated Circuit) chip and antenna that sends information to the RFID reader in response to a wireless probe. In contrast to barcodes, RFID does not require line of sight or contact between readers (also known as interrogators) and tagged objects. The main advantages of RFID systems are price efficiency and accuracy of stock management. In addition to emerging applications in retail and distribution, RFID has gradually been adopted and deployed in other service industries, including aircraft maintenance; baggage handling; laboratory procedures; security; and healthcare. Although RFID technology has obvious advantages, including increased visibility and fast identification, there are still some problems, including limitation of RFID tag's hardware storage and memory; threat of counterfeiting; and other security and privacy issues This study focuses on the counterfeiting problem of RFID technology in supply chain management (SCM). This problem appears as RFID tag cloning and fraud attacks (Gao et.al, 2004) that lead to financial losses and loss of trust and confidence. The RFID tag cloning and fraud attacks can hinder the adoption and acceptance of RFID technology (Choi et.al, 2008; Lehtonen, 2007). Therefore trust management plays an important role as an instrument of decision making whether a system is worthwhile to be used with a minimal risk The tradeoff of trust is considered against risk handling, security and privacy management. The significance of trust in the new emerging ubiquitous technology in a context of RFID is critical. Supply chain involves open network connectivities, physical products transportation, and transaction management, where trust counts in the selection of partners; the selection of software and hardware infrastructure; as well as the adoption of communication systems (Derakshan et.al, 2007). Public acceptance of RFID implications systems is still an open question due to its current limitations and vulnerabilities, (Lehtonen, 2007). In our previous work Our seven-layer trust framework provides an approach to establish trustworthiness of large scale tracking systems and www.intechopen.com

In this chapter, we discuss the business implications, as well as security and privacy issues, of the widespread deployment of radio frequency identification (RFID) systems. We first describe, in more detail, the components that make up an RFID system to facilitate better understanding of the implications of each, and then review the commercial applications of the RFID. We then discuss the security and privacy issues for RFID systems and what mechanisms have been proposed to safeguard these. The topics discussed in this chapter highlight the benefits of using RFIDs for user convenience in ubiquitous and pervasive commercial services and e-businesses, while maintaining the integrity of such systems against malicious attacks on the users’ security and privacy. This is vital for a business establishment to coexist with peers and remain competitively attractive to customers.

Comparative performance analysis of various artificial immune networks applied to RFID reader-to-reader collision avoidance

Radio frequency identification (RFID) and Real Time Location Systems (RTLS) provide a wireless means to identify, locate, monitor, and track assets and people. RFID technology can be used for resource and patient location, to reduce costs, improve inventory accuracy, and improve patient safety. A number of pilot deployments of RFID and RTLS technology have yielded promising results, reduced costs, and improved patient care. However, there are three major issues facing RFID and RTLS systems, privacy, security, and location accuracy. As described in this chapter the privacy and security issues can be easily addressed by employing standard security measures. Location accuracy issues are physics-related and new advances continue to improve this accuracy. However, in hospital applications accuracy to the room level is sufficient.

Radio frequency identification (RFID) applications have the potential to increase the reliability of healthcare environments. However, there are obvious security and privacy concerns with regard to storing personal and medical data in RFID tags, and the lack of secure authentication systems in healthcare environments remains as a challenge the further use of this technology, one that touches on issues of confidentiality, unforgeability, location privacy, and scalability. This study proposes a novel mutual authentication protocol that considers all of these issues and solves the tradeoff between location privacy and scalability in healthcare environments. A formal proof and analysis is demonstrated to prove the effectiveness of the proposed scheme, and that high reliability has and can be easily deployed and managed. This study also provides a scenario example that applied proposed protocol in the newborn care and management. The result shows that the proposed scheme solves the related tradeoff problem, and is capable of providing both location privacy and scalability. To apply the authentication scheme proposed in this work would be able to increase confidence in future implementations of RFID systems in healthcare environments.

The primary defect of current authentication schemes for Radio Frequency Identification (RFID) tags lies in that in order to identify only one single tag they require a linear computational complexity on the server side. We propose a secure RFID mutual authentication scheme in this paper. It not only provides confidentiality, untraceability and mutual authentication, but also have efficiency in terms of time complexity, space complexity and communication cost which are very important for practical large scale RFID applications.

Radio Frequency IDentification (RFID) is a leading ubiquitous computing technology for the future. However, the rapid deployment of low-cost RFID tags in large scale raises significant personal privacy threats. Low-cost tags are extremely resource-constrained devices. Hence it is easy to corrupt a low-cost RFID tag to obtain useful information, trace its history and discover its identity. Therefore it is important to provide forward privacy for low-cost tags. Many of the forward private authentication schemes proposed to date cannot meet the demands of low-cost tags due to their expensive hardware cost. In addition, they provide limited forward privacy with the assumption that denial-of-service is not a threat. In this paper, an improved forward privacy framework is described based on the general unpredictable privacy notion. A novel low-cost forward private authentication scheme under the proposed forward privacy framework is proposed. It is composed of a LPN problem and a pseudo random number generator, both of which can be efficiently implemented. Finally, a security proof of the proposed authentication scheme is provided under the standard model.