Analyses of Security and Privacy Issues in Ultra-weight RFID Protocol

The explosion in recent interest in radio-frequency identification (RFID) tags stems primarily from advances in information processing in supply chain management. Given their processing power and memory capabilities, RFID tags can be used in a wide range of applications including those where barcodes can and cannot be used. Although the potential exists, it is hampered by the relatively high unit cost of implementation and issues related to privacy and security. As with any technology, unit cost of RFID tags and their related systems is bound to come down. As for security and privacy issues, the main impediments are limited processing power, memory, and external power to operate these tags. In spite of these resource constraints, recent years have seen a plethora of new authentication protocols that promise to alleviate security and privacy concerns associated with the use of RFID tags. We evaluate a few protocols that have been suggested for use in passive RFID-tagged systems and identify vulnerabilities that may be present. When appropriate, we present modifications of existing protocols to prevent identified vulnerabilities.

Radio Frequency IDentification (RFID) technology successfully integrates radio transmitter and receiver, small size memory space and control circuitry to remotely store and retrieve data via wireless RF transceiver. As low-cost RFID tag can be massively manufactured by semiconductor industry, new applications associated with RFID technology have emerged rapidly such as inventory tracking, book storage and management, and airport baggage handling. Generally an RFID system is composed of many RFID tags (or tagged objects), at least one RFID reader, and one backend application system with database. An RFID tag gains its operation energy from query signals that are radio waves transmitted by RFID reader. Once a tag responds the query with its stored information to RFID reader, usually a unique identity number or string, the RFID system can recognize the tag carrier and perform required business logic operation. As RFID technique is widely used in supply chain management, the corresponding RFID application systems are expected to process and manage large amount of tagged objects at a predefined period of time regularly. Therefore, for large-scaled RFID applications, tag reading throughput is very critical since it will affect the total data processing time. To measure tag reading throughput of a RFID system, two performance criteria are usually adopted: tag reading delay and reader energy consumption [5]. As RFID reader and tag always communicate over a shared wireless channel, it is very easy to have signal collisions during a normal tag identification process when multiple tags exist in reader’s interrogation area. Signal collision results in query or data retransmission and eventually increases communication overhead and time delay of tag identification. Hence, an efficient tag collision arbitration mechanism is very important and critical for RFID systems to achieve effective performance. Existing RFID tag identification schemes can be classified into aloha-based solutions [3, 10, 12-13, 16, 21, 23-24] and tree-based solutions [1, 2, 4, 6-9, 14-15, 17-20, 22]. In aloha-based schemes, a reader estimates the number of tags in its interrogation area and broadcasts the total number of timeslots to each tag. Then each RFID tag randomly selects its own timeslot to transmit its ID without knowing which timeslots have been selected by other tags. By distributing tag responses to distinct timeslots instead of getting all tag responses at the same time, aloha-based schemes effectively reduce the probability of signal collision. However, aloha-based schemes have tag starvation problem in which certain tags may not

In the last decade, many articles have been pub­lished that demonstrate the susceptibility of cryptographic devices against implementation attacks. Usually, such devices draw their energy from a contact-based power supply. This power-supply connection is often exploited to extract the secret key by applying fault-injection methods and power-analysis attacks. In this article, we present implementation attacks on Radio Frequency Identification (RFID) tags which are usually powered contactlessly by an electromagnetic field. We describe a contact-based measurement setup that allows both injection of faults and measuring of the power consumption of passive RFID tags. Furthermore, we demonstrate the applicability of our setup by providing practical results of attacks on commercially available HF and UHF RFID tags. The results have led us to the conclusion that RFID tags are as susceptible to such attacks as contact-based powered devices. Appropriate countermeasures are needed to thwart these attacks.

The paper focuses on the environmental burden created by Radio Frequency Identification (RFID) tags in the Slovak Republic (SR). In order to determine the burden there, a model example was created to calculate electronic waste produced by households in the SR by placing RFID tags into municipal waste. The paper presents a legislative regulatory approach towards the environmental impacts from using RFID tags in the SR, as well as an analysis of the environmental burden of using RFID tags throughout the world. The core of the paper is focused on the research conducted in order to calculate the environmental burden of a model household in the SR, where the number of used RFID tags per year was observed; then, the volume of e-waste produced by households of the Slovak Republic per year was determined. In the conclusion, we provide the results of the research presented and discuss including our own proposal for solving the problems connected with the environmental burden of RFID technology.

Academicians and industry professionals have demonstrated the use of Radio Frequency Identification (RFID) Tags in construction applications in the past few years. Recently building information modelling (BIM) technology is emerging as the industry standard in the architecture, engineering and construction (AEC) sector. This paper combines the two technologies to monitor the movement of RFID tags in a BIM environment. Real-time monitoring of RFID tags in a building information model is an improvement over other methods of tracking construction workers, equipment and materials on the jobsite. Strategies for combining the two technologies are explored. This method of monitoring can be used to improve the safety and productivity of construction workers on a construction jobsite. This technique of monitoring RFID tags can also be used to track equipment and construction materials on a job-site. Autodesk Revit BIM software environment was used for tracking RFID tags. The paper includes discussion about the choice of RFID tags available for this method of tracking.

Radio Frequency Identification (RFID) systems represent a key technology for ubiquitous computing and for the deployment of the Internet of Things (IoT). In RFID technology, authentication protocols are often necessary in order to confirm the identity of the parties involved (i.e. RFID readers, RFID tags and/or database servers). In this article, we analyze the security of a mutual authentication protocol proposed by Wang and Ma. Our security analysis clearly shows major security pitfalls in this protocol. Firstly, we show two approaches that an adversary may use to mislead an honest reader into thinking that it is communicating with a legitimate database. Secondly, we show how an adversary that has compromised some tags can impersonate an RFID reader to a legitimate database. Furthermore, we present a new adversary model, which pays heed on cases missed by previous proposals. In contrast to previous models where the communication between an RFID reader and a back-end server is through a secure channel, our model facilitates the security analysis of more general schemes where this communication channel (RFID reader-to-server) is insecure. This model determines whether the compromise of RFID tags has any impact on the security of the reader-to-server communication or vice versa. In a secure protocol, the possible compromise of RFID tags should not affect the RFID reader-server communication. In this paper, we show that compromising of RFID tags in Wang and Ma protocol has a direct impact on the reader-server security. Finally, we propose a new authentication protocol that offers an adequate security level and is resistant against the mentioned security risks. The security proofs of the proposed protocol are supported with Gong-Needham-Yahalom (GNY) logic and Scyther tool, which are formal methods to evaluate the security of a cryptographic protocol.

In this paper, we focus on configuring a low cost RFID (Radio Frequency IDentification) system with less RFID readers and low density RFID tag textiles for stable and accurate self-localization for an omni-directional mobile robot. An RFID system using multiple RFID readers and high density RFID tags has already been applied to an indoor mobile robot self-localization. However, the system production cost is relatively high. To reduce the production cost of the system while maintaining the self-localization performance, we redesign two new RFID systems configured with 20 RFID readers and 5 RFID readers enlarging the size of an RFID reader antenna. Particularly, a new likelihood function of the tag detection with the redesigned large size RFID reader antenna is proposed for Monte Carlo Localization (MCL). Furthermore, we come up with a novel arrangement of RFID tags installed in a hexagon pattern. The new arrangement of ID tags enables both low cost ID tag installation and high performance of self-localization. We examine the performances of robot self-localization with less RFID readers and lower density RFID tags installed on the floor based on MCL(Monte Carlo localization). The simulation demonstrates the validity of our proposed configuration of the RFID based self-localization.

New mutual agreement protocol to secure mobile RFID-enabled devices

RFID (Radio Frequency IDentification) tags need to include security functions, yet at the same time their resources are extremely limited. Moreover, to provide privacy, authentication and protection against tracking of RFID tags without loosing the system scalability, a public-key based approach is inevitable, which is shown by M. Burmester et al. In this paper, we present an architecture of a state-of-the-art processor for RFID tags with an Elliptic Curve (EC) processor over GF(2^163). It shows the plausibility of meeting both security and efficiency requirements even in a passive RFID tag. The proposed processor is able to perform EC scalar multiplications as well as general modular arithmetic (additions and multiplications) which are needed for the cryptographic protocols. As we work with large numbers, the register file is the most critical component in the architecture. By combining several techniques, we are able to reduce the number of registers from 9 to 6 resulting in EC processor of 10.1K gates. To obtain an efficient modulo arithmetic, we introduce a redundant modular operation. Moreover the proposed architecture can support multiple cryptographic protocols. The synthesis results with a 0.13 um CMOS technology show that the gate area of the most compact version is 12.5K gates.

SummaryIn the fifth generation mobile networks (in short, 5G), radio frequency identification (RFID) tags are embedded in a growing number of personal items, especially in smartphones. The RFID authentication protocols in 5G should be anti‐scanning and privacy‐enhancing, because RFID tags in smartphones often suffer from leaking private trace of mobile users. However, majorities of existing RFID protocols are vulnerable to location‐tracking threats, and to distributed denial of service (DDoS) attacks on back‐end servers. To eliminate these threats, we propose a hash‐based mutual authentication protocol for smartphones in 5G. This protocol protects individuals' location privacy against malicious hidden scanning in public places. By the authentication of RFID readers via hash values, the proposed protocol is robust against the aforementioned threats. Additionally, our authentication efficiency on the tag side is 2H (two hash calculations), which outperforms most of previously reported solutions based on hash, and the tag stores only two vectors (one is k‐bit and the other j‐bit). Copyright © 2015 John Wiley & Sons, Ltd.

An 8-bit chipless radio-frequency identification (RFID) tag with a compact structure is proposed in this paper. Designing a RFID tag with a compact size is highly demanded in RFID technology. The original RFID tag is composed of 8 octagonal rings. In order to minimize its dimensions, the tag is divided in two equal parts. One part is completely omitted with its substrate. A grounded wall is placed in front of the remaining part to compensate the effects of the removed part and generate an image of it. Comparing a radar cross-section (RCS) of the compact and normal structure implies that by minimizing the tag, the RCS response of the structure is approximately similar with that of the normal tag. An equivalent circuit model for the RFID tag is presented, which shows a reasonable agreement with its full-wave result. The presented tag exhibits an RCS of σ = −26 dBsm from 2 to 7 GHz with an overall size of 15 × 30 mm2. Through using the aforementioned method, a 50% reduction in the overall area of the structure is observed.

One of the most important limitations for people with visual impairment is the inability of unassisted navigation and orientation in unfamiliar buildings. An low-cost indoor navigation system, which is based on mobile terminals, supporting technology Near Field Communication (NFC), and Java program access to Radio Frequency Identification (RFID) tags, is developed. The proposed navigation system enables users to imagine the map of the rooms (dimensions, relative position of points of interest). This information is stored in RFID tags in WAP Binary eXtensible Markup Language (WBXML) format. The system allows leaving audio messages that are recorded in RFID tags in Adaptive Multi Rate (AMR) format. Voice enabled navigation, that is familiar to users with visual disabilities, is used.

In this paper, Commercial of the Shelf (COTS) Radio Frequency Identification (RFID) tags are embedded into Kevlar fiber reinforced epoxy (KFRP). The purpose was to determine if the RFID tags would survive the manufacturing process for the KFRP and to determine the mechanical impact of the RFID tag on the KFRP’s structure. All materials were manufactured using a hand layup method and tested for electronic read distance and mechanical integrity. Subsets of the material were tested using compression testing to determine if the inclusion of the RFID tag caused a defect in the KFRP while other sets of the material were tested using a three point shear test to see how the inclusion of the RFID tag affected the interlaminar shear strength of the KFRP. The concluded results showed that the read distances were negatively affected by the Kevlar and that the compression and shear strengths of the material were also affected by the RFID tags.

Radio Frequency Identification (RFID) is a modern wireless data transmission and reception technique for applications including automatic identification, asset tracking and security surveillance. As barcodes and other means of identification and asset tracking are inadequate for recent demands, RFID technology has attracted interest for applications such as logistics, supply chain management, asset tracking, and security access control. However, the cost of RFID limits their potential for the replacement of trillions of barcodes each year. The only possible solution is a fully printable chipless RFID tag. A novel RFID system comprised of a chipless RFID tag and an associated reader is reported in the thesis. The chipless tag is a fully-passive microwave circuit and uses spectral signatures for data encoding. The tag consists of a multi-resonator coupled to transmitting and receiving antennas. To accommodate multiple bits, the tag operates over the ultra wideband (UWB) frequency spectrum. UWB antennas are used to receive the interrogation signal sent from the reader and transmit the signal back to the reader after performing modulation of the frequency spectra with the multi-resonator. Modulation is performed in both amplitude and phase of the spectrum. A chipless tag up to 35 bits which operate over 3-7 GHz band has been designed. After the successful design of the chipless tag, three prototype readers have been developed. The Gen1 reader was designed to validate the chipless RFID concept using 6-bit chipless tag reading based on amplitude-only detection in S-band; the Gen2 reader is an upgraded version of Gen1 with both amplitude and phase detection capability; and the third generation reader is a UWB reader capable of reading up to 35-bits in the UWB band. The integrated reader is a complete system with analog RF and digital control sections loaded with graphical user interface (GUI) and software protocol. Both the hardware and software design of the RFID reader and field trials of the designed chipless RFID system have been validated in the real world environment. An investigation into antenna systems in order to enhance reading range up to 70 cm has also been performed. The unique features of the developed chipless RFID system are: (i) a low cost, fully printable tag and (ii) secure, remote and non-line-of-sight operability. The importance of this concept lies in the fact that chipless RFID tags become comparable to barcodes in terms of the substrate material used and the cost of fabrication. The main application of this chipless RFID system is in short-range tagging of extremely low cost items such as the Australian polymer banknote.

Wireless Indoor Localization Using Passive RFID Tags