Efficient Hardware Implementation of KMAP+: An Ultralightweight Mutual Authentication Protocol

This paper reviews weaknesses highlighted in existing proposals for a family of mutual authentication protocols belonging to the ultra-lightweight class, which are designed for low-cost RFID systems. This family is suitable for systems where authenticating parties already share secrets, which are updated in each authentication round to counter tracking of the tag. We propose a new ultra-lightweight authentication protocol that builds on the strengths of existing schemes yet incorporates countermeasures to overcome previous weaknesses. Significantly our protocol uses lower resources than previous proposals.

Radio Frequency IDentification (RFID) technology successfully integrates radio transmitter and receiver, small size memory space and control circuitry to remotely store and retrieve data via wireless RF transceiver. As low-cost RFID tag can be massively manufactured by semiconductor industry, new applications associated with RFID technology have emerged rapidly such as inventory tracking, book storage and management, and airport baggage handling. Generally an RFID system is composed of many RFID tags (or tagged objects), at least one RFID reader, and one backend application system with database. An RFID tag gains its operation energy from query signals that are radio waves transmitted by RFID reader. Once a tag responds the query with its stored information to RFID reader, usually a unique identity number or string, the RFID system can recognize the tag carrier and perform required business logic operation. As RFID technique is widely used in supply chain management, the corresponding RFID application systems are expected to process and manage large amount of tagged objects at a predefined period of time regularly. Therefore, for large-scaled RFID applications, tag reading throughput is very critical since it will affect the total data processing time. To measure tag reading throughput of a RFID system, two performance criteria are usually adopted: tag reading delay and reader energy consumption [5]. As RFID reader and tag always communicate over a shared wireless channel, it is very easy to have signal collisions during a normal tag identification process when multiple tags exist in reader’s interrogation area. Signal collision results in query or data retransmission and eventually increases communication overhead and time delay of tag identification. Hence, an efficient tag collision arbitration mechanism is very important and critical for RFID systems to achieve effective performance. Existing RFID tag identification schemes can be classified into aloha-based solutions [3, 10, 12-13, 16, 21, 23-24] and tree-based solutions [1, 2, 4, 6-9, 14-15, 17-20, 22]. In aloha-based schemes, a reader estimates the number of tags in its interrogation area and broadcasts the total number of timeslots to each tag. Then each RFID tag randomly selects its own timeslot to transmit its ID without knowing which timeslots have been selected by other tags. By distributing tag responses to distinct timeslots instead of getting all tag responses at the same time, aloha-based schemes effectively reduce the probability of signal collision. However, aloha-based schemes have tag starvation problem in which certain tags may not

The Internet of Things is an emerging paradigm, which is used to link physical objects with Internet. One of the most common ways of communicating and identifying objects on Internet of Things is using Radio Frequency IDentification (RFID) systems between different objects. Researchers have focused on developing improvements of RFID authentication protocols that stave off privacy threats and well‐known security problems. Recently, Khoret al.have proposed a new authentication protocol that conforms to the Electronic Product Code Class‐1 Generation‐2 standard (ISO/IEC 18000‐6C for RFID systems). In this paper, we show the vulnerabilities of this authentication protocol concerning to full disclosure, impersonation, traceability, de‐synchronization, and Denial‐of‐Service attacks. These attacks make the protocol unfeasible to introduce it with an adequate security and sufficient privacy protection level. Finally, we present a new protocol, calledFingerprint+protocol, which is based on ISO/IEC 9798‐2 and ISO/IEC 18000‐6C and whose security is formally verified using BAN logic. Copyright © 2014 John Wiley & Sons, Ltd.

In this paper, we analyze the security vulnerabilities of SSL-MAP, an ultra-lightweight RFID mutual authentication protocol recently proposed by Rama N, Suganya R. We present two effective attacks, a de-synchronization attack and a full-disclosure attack, against this protocol. The former permanently disables the authentication capability of a RFID tag by destroying synchronization between the tag and the RFID reader. The latter completely threats a tag by extracting all the secret information that are stored in the tag. The de-synchronization attack can be carried out in three round of interaction in SSL-MAP while the full-disclosure attack is accomplished across several runs of SSL-MAP. We also discuss ways to counter the attacks.

Nowadays, the internet of things (IOT) has attracted the attention of the researchers. As a key technology of the Internet of Things, RFID (Radio Frequency Identification) has also attracted the interest of industry and academia. One of the most important issues for the applications of the IOT based on RFID is security. In order to promote the development of IOT based on RFID, first of all, we briefly introduce the IOT system components and work process based on RFID, and then we deeply analyze the security threats in the IOT based on RFID, by the means of these analysis we discuss the current countermeasures for the security threats of RFID. Aiming at the RFID system, the corresponding technologies are raised such as Tag killing, Tag sleeping and blocker Tag; and the authentication based on HASH is the main method aiming at the communication process.

Even invented and applied initially during the World War II, RFID (Radio Frequency IDentification) technologies [1] have attracted much attention recently. Precisely speaking, RFID technologies have been applied very widely in some proprietary or closed systems, for example, animal control [2], portal control (access badges), etc. in last decades. The main advantages of RFID application are, storing item data in an electronic way even for further update, data access by electromagnetic wave in a wireless manner, and allowing quick multiple accesses to RFID tags. Based on the diverse applications, different spectrum bands are allocated, for example, LF (125 134.2 kHz and 140 148.5 kHz) for animal control, HF (13.56MHz) for electronic ticket, and UHF (868 MHz-928 MHz) for logistics, etc. Most of the frequencies are located in the ISM (Industrial, Scientific and Medical) bands [1]. However, RFID was emphasized again mainly because of the need of supply chain [3]. By proposing a standard for the format of electronic data used for goods items, of which EPC (Electronic Product Code) [4] is an example, the products can be registered at once when they are shipped out from the factories in one country, and be released when they are checked out at the counter of a supermarket in the other country in the world. These products might have been transferred through Customs of many countries and carried by different traffic means. When being through these check points, the related data stored in the tags are updated. This is called “product tracking” and is to be carried out in an “Internet of Thing (IOT)” [5]. This Chapter is to have a review on the technology theme – how to provide low-cost RFID Tags, when RFID technology is to be applied into the logistics area where the RFID tags are supposed to be not re-usable and to be as “zero-cost” as possible. Generally speaking, there are three major parts composing a RFID Tag’s total cost, namely, antenna, chip and assembly for them. The cost of antenna, in addition to the design phase, is mainly dependent on the manufacturing process. Therefore, manufacturing process should be focused if antenna’s cost, then the tag, is concerned. This is the theme of this Chapter. Not like the other antenna applications, for example, wireless LAN or mobile phone, in which antennas need to be compliant to the end products’ appearance by following the market trend. In the tag antenna industry, on the contrary, it does not need to design or modify the tag antenna often. The tag antenna just needs to electrically match the chip used in the beginning of design. It is not necessary for tag providers to prepare a wide product spectrum in the market. Again, not like the mobile phone industry, RFID tag’s players just

A framework for enhancing the performance of Internet of Things applications based on RFID and WSNs

Radio Frequency Identification (RFID) systems represent a key technology for ubiquitous computing and for the deployment of the Internet of Things (IoT). In RFID technology, authentication protocols are often necessary in order to confirm the identity of the parties involved (i.e. RFID readers, RFID tags and/or database servers). In this article, we analyze the security of a mutual authentication protocol proposed by Wang and Ma. Our security analysis clearly shows major security pitfalls in this protocol. Firstly, we show two approaches that an adversary may use to mislead an honest reader into thinking that it is communicating with a legitimate database. Secondly, we show how an adversary that has compromised some tags can impersonate an RFID reader to a legitimate database. Furthermore, we present a new adversary model, which pays heed on cases missed by previous proposals. In contrast to previous models where the communication between an RFID reader and a back-end server is through a secure channel, our model facilitates the security analysis of more general schemes where this communication channel (RFID reader-to-server) is insecure. This model determines whether the compromise of RFID tags has any impact on the security of the reader-to-server communication or vice versa. In a secure protocol, the possible compromise of RFID tags should not affect the RFID reader-server communication. In this paper, we show that compromising of RFID tags in Wang and Ma protocol has a direct impact on the reader-server security. Finally, we propose a new authentication protocol that offers an adequate security level and is resistant against the mentioned security risks. The security proofs of the proposed protocol are supported with Gong-Needham-Yahalom (GNY) logic and Scyther tool, which are formal methods to evaluate the security of a cryptographic protocol.

Evaluation of design alternatives of End-Of-Life products using internet of things

The EPCglobal organization found a RFID information architecture named ‘EPC Network’ was based on EPC (Electronic Product code). The concept of EPC Network is ‘Internet of things’, every object was given a unique identification code stored at RFID tag, using mature internet architecture to reach “Internet of Physical Objects”. With EPC Network, we can connecting every object and create the vision of “Identify any object anywhere automatically”. lthough the standards of EPC Network have not been completed by EPCglobal organization, but the functions of core services were defined and having done several specifications and documents. This study of exploring EPC Network architecture planning in car bumper supply chain, and extend the researches by Zeng(2005)、Liu(2006). Three phases of this study： 1.Phase one：Collection the current RFID applications in automobile industry and use these applications as references to planning a EPC Network based of car bumper supply chain. 2.Phase two： Study the combination、materials flow、issues、RFID implementation point and RFID implementation values between OEM Market and After Market in car bumper supply chain. 3.Phase three：Drill into the RFID information architecture after RFID data capture equipments were implemented, such as information function、core components needed for each supply chain member、data structure、data transfer type、interoperation between members. Keyword：RFID、EPC Network、Supply Chain、Electronic Pedigree

One key technique in Internet of Things(IoT) is localization, which has been an indispensable context for most of the applications in IoT. In this paper, we introduce an indoor location detecting platform based on the passive RFID (Radio Frequency Identification) technology. The major advantage of our platform is that it can be adopted to meet different detection granularity requirement based on the flexible RFID antenna design. Second, the only thing for a user to carry with is a tiny RFID tag on his/her shoes which is light weight and no charging power problems. Thirdly it will be shown that our design is easy to be augmented into normal artifacts in an unobtrusive way for the indoor environment. Two versions of the RFID-based location detection systems are introduced. One is called U-tile (Ubiquitous tile), in which passive RFID reader is embedded into the tiles. Another improved version is called Indoor-tracer, which adopts anti-collision RFID and more light weight comparing with the previous version U-tile so that it can embedded into various artifacts like bags and drawers. The performances of both two prototype systems were evaluated and the mutual-aware applications for remote family based on IoT were developed by using the platform.

In recent years, RFID (radio-frequency identification) systems are widely used in many applications. One of the most important applications for this technology is the Internet of things (IoT). Therefore, researchers have proposed several authentication protocols that can be employed in RFID-based IoT systems, and they have claimed that their protocols can satisfy all security requirements of these systems. However, in RFID-based IoT systems we have mobile readers that can be compromised by the adversary. Due to this attack, the adversary can compromise a legitimate reader and obtain its secrets. So, the protocol designers must consider the security of their proposals even in the reader compromised scenario. In this paper, we consider the security of the ultra-lightweight RFID mutual authentication (ULRMAPC) protocol recently proposed by Fan et al. They claimed that their protocol could be applied in the IoT systems and provide strong security. However, in this paper we show that their protocol is vulnerable to denial of service, reader and tag impersonation and de-synchronization attacks. To provide a solution, we present a new authentication protocol, which is more secure than the ULRMAPC protocol and also can be employed in RFID-based IoT systems.

The Internet of Things (IoT) envisions an ecosystem where smart and interconnected objects can sense surrounding changes, communicate with each other, process information and take active roles in decision making. Optimizing supply chain performance is a primary concern of manufacturing and logistics organizations. Radio Frequency Identification (RFID) is helping organizations to build automated and interconnected smart environment by object identification and tracking, motivating the first step towards an IoT-enabled world. This chapter attempts to understand extant literature studying applications of RFID in implementing the IoT in supply chain management. We categorize extant literature, firstly, based on research methodology and secondly, based on supply chain processes. We find that presently academic activity is around conceptualizing the usability of RFID in the IoT with limited analytical and empirical evidence. Supply chain processes such as demand planning, procurement, retail shelf space management and product returns are prospective areas for interesting future research.

Upcoming 5th-generation (5G) systems incorporate physical objects (referred to as things), which sense the presence of components such as gears, gadgets, and sensors. They may transmit many kinds of states in the smart city context, such as new deals at malls, safe distances on roads, patient heart rhythms (especially in hospitals), and logistic control at aerodromes and seaports around the world. These serve to form the so-called future internet of things (IoT). From this futuristic perspective, everything should have its own identity. In this context, radio frequency identification (RFID) plays a specific role, which provides wireless communications in a secure manner. Passive RFID tags carry out work using the energy harvested among massive systems. RFID has been habitually realized as a prerequisite for IoT, the combination of which is called IoT RFID (I-RFID). For the current scenario, such tags should be productive, low-profile, compact, easily mountable, and have eco-friendly features. The presently available tags are not cost-effective and have not been proven as green tags for environmentally friendly IoT in 5G systems nor are they suitable for long-range communications in 5G systems. The proposed I-RFID tag uses the meandering angle technique (MAT) to construct a design that satisfies the features of a lower-cost printed antenna over the worldwide UHF RFID band standard (860–960 MHz). In our research, tag MAT antennas are fabricated on paper-based Korsnäs by screen- and flexo-printing, which have lowest simulated effective outcomes with dielectric variation due to humidity and have a plausible read range (RR) for European (EU; 866–868 MHz) and North American (NA; 902–928 MHz) UHF band standards. The I-RFID tag size is reduced by 36% to 38% w.r.t. a previously published case, the tag gain has been improved by 23.6% to 33.12%, and its read range has been enhanced by 50.9% and 59.6% for EU and NA UHF bands, respectively. It provides impressive performance on some platforms (e.g., plastic, paper, and glass), thereby providing a new state-of-the-art I-RFID tag with better qualities in 5G systems.

A double PUF-based RFID identity authentication protocol in service-centric internet of things environments