Cryptanalysis of a novel authentication protocol conforming to EPC-C1G2 standard

Computer Standards and Interfaces

Volumn 31, Issue 2, 2009, Pages 372-380

  Peris Lopez, Pedro ^a   Hernandez Castro, Julio Cesar ^a   Estevez Tapiador, Juan M ^a   Ribagorda, Arturo ^a  

^a UNIVERSIDAD CARLOS III DE MADRID   (Spain)

Author keywords

Authentication; Cryptanalysis; EPC C1G2; RFID; Security

Indexed keywords

ACCESS CONTROL; COMPUTER CRIME; CRYPTOGRAPHY; DATABASE SYSTEMS; DIFFRACTIVE OPTICAL ELEMENTS; RADIO NAVIGATION; STANDARDS;

AUTHENTICATION PROTOCOLS; CRYPTANALYSIS; DOS ATTACKS; EPC-C1G2; EPCGLOBAL; FORWARD SECURITIES; LOCATION PRIVACIES; MUTUAL AUTHENTICATION PROTOCOLS; RFID; RFID TAGS; RFID TECHNOLOGIES; SECURITY; SECURITY FLAWS; SECURITY LEVELS; SECURITY MEASURES; SHORT-COMINGS;

AUTHENTICATION;

EID: 55749092929     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2008.05.012     Document Type: Article

References (31)

1. Philips and Texas Instruments join forces to accelerate EPC Gen-2 RFID deployment (2005). http://www.nxp.com/news/content/file1171.html http://www.nxp.com/news/content/file1171.html
2. Anarchriz. CRC and how to reverse it (1999). http://www.woodmann.com/fravia/crctut1.htm http://www.woodmann.com/fravia/crctut1.htm
3. Bailey D., and Juels A. Shoehorning security into the EPC standard (2006) Manuscript in submission
4. Bono S., Greem M., Stubblefield A., Juels A., Rubin A., and Syzdlo M. Security analysis of a cryptographically-enabled device. Proc. of SSYM'05 (2005), Usenix Association
5. Chien H.-Y., and Chen C.-H. Mutual authentication protocol for RFID conforming to EPC class-1 generation-2 standards. Computer Standards & Interfaces vol. 29 (February 2007), Elsevier Science Publishers 254-259 (2)
6. Choi E.Y., Lee S.M., and Lee D.H. Efficient RFID authentication protocol for ubiquitous computing environment. Proc. of SECUBIQ'05 (2005), LNCS
7. Dimitriou T. A lightweight RFID protocol to protect against traceability and cloning attacks. In Proc. of SECURECOMM'05 (2005)
8. Class-1 Generation-2 UHF air interface protocol standard version 1.0.9: "Gen 2" (January 2005). http://www.epcglobalinc.org/ http://www.epcglobalinc.org/
9. EPC Generation-1 tag data standards version 1.1 (May 2005). http://www.epcglobalinc.org/ http://www.epcglobalinc.org/
10. Ha J., Moon S.J., Gonzlez Nieto J.M., and Boyd C. Low-cost and strong- security RFID authentication protocol. Proc. of EUC Workshops. LNCS vol. 4809 (2007), Springer 795-807
11. Henrici D., and Müller P. Hash-based enhancement of location privacy for radio-frequency identification devices using varying identifiers. Proc. of PERSEC'04 (2004), IEEE Computer Society 149-153
12. Juels A. RFID security and privacy: a research survey. Manuscript (September 2005)
13. Juels A. Strengthening EPC tags against cloning. Manuscript (March 2005)
14. N. Karten and H. Pltz. Mifare little security, despite obscurity. http://events.ccc.de/congress/2007/Fahrplan/events/2378.en.html.
15. Karthikeyan S., and Nesterenko M. RFID security without extensive cryptography. Proc. of SASN '05 (2005), ACM 63-67
16. Konidala D.M., and Kim K. RFID tag-reader mutual authentication scheme utilizing tag's access. Auto-ID Labs White Paper WP-HARDWARE-033 (2007)
17. Lim T.L., and Li T. Addressing the weakness in a lightweight RFID tag-reader mutual authentication scheme. Proc. of GLOBECOM'07 (2007)
18. Nguyen Duc D., Park J., Lee H., and Kim K. Enhancing security of EPCglobal Gen-2 RFID tag against traceability and cloning. Proc. of Symposium on Cryptography and Information Security (2006)
19. Nohl K., and Evans D. Feasible privacy for lightweight RFID systems (2007). http://www.cs.virginia.edu/evans/talks/spar07 http://www.cs.virginia.edu/evans/talks/spar07
20. Peris-Lopez P., Hernandez-Castro J.C., Estevez-Tapiador J.M., and Ribagorda A. An efficient authentication protocol in RFID systems resistant to active attacks. Proc. of SecUbiq'06. LNCS vol. 4809 (2007), Springer-Verlag 781-794
21. Peris-Lopez P., Hernandez-Castro J.C., Estevez-Tapiador J.M., and Rib- agorda A. RFID systems: A survey on security threats and proposed solutions. Proc. of PWC06. LNCS vol. 4217 (2006) 159-170
22. Piramuthu S. Protocols for RFID tag/reader authentication. Decis. support syst. 43 3 (2007) 897-914
23. Ranasinghe D.C. Networked RFID Systems and Lightweight Cryptography, chapter Lightweight Cryptography for Low Cost RFID (2007), Springer 311-346
24. Ranasinghe D.C., and Cole P.H. Confronting security and privacy threats in modern RFID systems. Proc. of ACSSC '06 (2006) 2058-2064
25. Sarma S., Weis S., and Engels D. RFID systems and security and privacy implications. Proc. of CHES'02. LNCS vol. 2523 (2002) 454-470
26. A. Shamir. SQUASH - a new MAC with provable security properties for highly constrained devices such as RFID tags. In Proc. of FSE'08, volume In Press of LNCS. Springer-Verlag, in press.
27. Stigge M., Pltz H., Mller W., and Redlich J.-P. Reversing CRC theory and practice. Technical Report SAR-PR-2006-05 (2006), Humboldt-Universitat, Berlin
28. Tanenbaum A.S. Computer Networks. 3rd edition (1996), Prentice-Hall International, Inc
29. Weis S., Sarma S., Rivest R., and Engels D. Security and privacy aspects of low-cost radio frequency identification systems. Proc. of SPC'03. LNCS vol. 2802 (2003) 454-469
30. Westerbaan B. Reversing CRC (2005). http://blog.w-nz.com/archives/2005/07/15/reversing-crc/ http://blog.w-nz.com/archives/2005/07/15/reversing-crc/
31. Yang J., Park J., Lee H., Ren K., and Kim K. Mutual authentication protocol for low-cost RFID. Ecrypt Workshop on RFID and Lightweight Crypto (2005)