Survivable RFID systems: Issues, challenges, and techniques

IEEE Transactions on Systems, Man and Cybernetics Part C: Applications and Reviews

Volumn 40, Issue 4, 2010, Pages 406-418

  Zuo, Yanjun ^a  

^a UNIVERSITY OF NORTH DAKOTA   (United States)

Author keywords

Attack; radio frequency identification (RFID); recovery; survivability

Indexed keywords

ATTACK; ESSENTIAL SERVICES; HIGH MOBILITY; INVENTORY TRACKING; ISSUES AND CHALLENGES; MALICIOUS ATTACK; MOBILE OBJECTS; NATIONAL DEFENSE; RESEARCH DIRECTIONS; RF-ID TAGS; RFID SYSTEMS; SYSTEM FAILURES; VARIOUS ATTACKS;

MOBILE PHONES; NETWORK SECURITY; RADIO NAVIGATION; RADIO WAVES; SYSTEMS ENGINEERING;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 77953725595     PISSN: 10946977     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSMCC.2010.2043949     Document Type: Article

References (58)

1. Y. Li and X. Ding, "Protecting RFID communications in supply chains," presented at the 2nd ACM Symp. Inf., Comput. Commun. Security, Singapore, 2007.
2. M. Rieback, B. Crispo, and A. Tanenbaum, "Is your cat infected with a computer virus?" in Proc. 4th Annu. IEEE Int. Conf. Pervasive Comput. Commun., Pisa, Italy, 2006, pp. 179-189.
3. S. Garfinkel, A. Juels, and R. Pappu, "RFID privacy: An overview of problems and proposed solutions," IEEE Security Privacy, vol.3, no.3, p. 34-43, May/Jun. 2005.
4. J. Yang, J. Park, H. Lee, K. Ren, and K. Kim, "Mutual authentication protocol for low-cost RFID," presented at the Handout Ecrypt Workshop RFID Lightweight Crypto, Graz, Austria, Jul. 14-15, 2005.
5. R. Ellison, D. Fisher, R. Linger, H. Lipson, T. Longstaff, and N. Mead, "Survivable network systems: An emerging discipline," Software Engineering Institute, Carnegie Mellon University, Tech. Rep. CMU/SEI-97- TR-013, 1997.
6. J. Knight, E. Strunk, and K. Sullivan, "Towards a rigorous definition of information system survivability," presented at the DARPA Inf. Survivability Conf. Expo., Washington, DC, 2003.
7. M. Hiltunen, R. Schlichting, C. Ugarte, and G. Wong, "Survivability through customization and adaptability: The cactus approach," in Proc. DARPA Inf. Survivability Conf. Expo., 2000, pp. 294-307.
8. M. Deutsch and R. Willis, Software Quality Engineering: A Total Technical and Management Approach. Englewood Cliffs, NJ: Prentice-Hall, 1988.
9. B. Thuraisingham and J. Maurer, "Information survivability for evolvable and adaptable real-time command and control systems," IEEE Trans. Knowl. Data Eng., vol.11, no.1, pp. 228-238, Jan. 1999.
10. E. Strunk and J.Knight, "Dependability through assured reconfiguration in embedded systems software," IEEE Trans. Dependable Secure Comput., vol.3, no.3, pp. 172-187, Jul. 2006.
11. A. Snow, U. Varshney, and A. Malloy, "Reliability and survivability of wireless and mobile networks," IEEE Comput., vol.33, no.7, pp. 49-55, Jul. 2000.
12. Y. Jin, "Research on the survivability of embedded real-time system," Int. J. Intell. Syst. Technol., vol.3, no.4, pp. 208-214, 2008.
13. W. Yurcik, D. Doss, and H. Kruse, "Survivability-over-security: Providing whole system assurance," in Proc. IEEE/SEI/CERT Inf. Survivability Workshop, Las Alamitos, CA, 2000, pp. 201-204.
14. P. Pal, J. Loyall, R. Schantz, J. Zinky, and F. Webber, "Open implementation toolkit for building survivable applications," in Proc. DARPA Inf. Survivability Conf. Expo., Hilton Head, SC, 2000, pp. 197-200.
15. T. Karygiannis, B. Eydt, G. Barber, L. Bunn, and T. Phillips. (2007). Guidelines for Securing Radio Frequency Identification (RFID) Systems, Special Publication 800-898, Gaithersburg, MD: National Institute of Standards and Technology, [Online]. Available: http://csrc.nist.gov/ publications/nistpubs
16. G. Avoine. (2005). Adversarial model for radio frequency identification, Tech. Rep. 2005/049. [Online]. Available: http://eprint.iacr.org/2005/ 049.pdf
17. D. Molnar and D. Wagner, "Privacy and security in library RFID issues, practices, and architectures," presented at the ACM Conf. Comput. Commun. Security, Washington, DC, 2004.
18. L. Batina, J. Guajardo, T. Kerins, N. Mentens, P. Tuyls, and I. Verbauwhede, "An elliptic curve processor suitable for RFID-tags," IEEE Trans. Comput., vol.57, no.11, pp. 1514-1527, Aug. 22, 2008.
19. M. Feldhofer, S. Dominikus, and J.Wolkerstorfer, "Strong authentication for RFID systems using the AES algorithm," in Cryptographic Hardware and Embedded Systems (Lecture Notes in Computer Science, vol. 3156). New York: Springer-Verlag, 2004, pp. 357-370.
20. M. Feldhofer and C. Rechberger, "A case against currently used hash functions in RFID protocols," presented at the 1st Int. Workshop Inf. Security, Montpellier, France, 2006.
21. M. O'Neil, "Low-cost SHA-1 hash function architecture for RFID tags," presented at the Workshop RFID Security, Budapest, Hungary, 2008.
22. P. Israsena and S. Wongnamkum, "Hardware implementation of a TEAbased lightweight encryption for RFID security," in RFID Security. New York: Springer-Verlag, 2009, pp. 417-433.
23. J.Wolkerstorfer, "Scaling ECC hardware to a minimum," presented at the Workshop Cryptographic Adv. Secure Hardware, Leuven, Belgium, Sep. 6-7, 2005.
24. P. Tuyls and L. Batina, "RFID-tags for anti-counterfeiting," presented at the Topics Cryptography-CT-RSA 2006, Lecture Notes Comput. Sci., San Jose, CA, Feb. 13-17, 2006.
25. R. Falk, F. Kohlmayer, A. Kopf, M. Braun, H. Seuschek, and M. Li, "Application of passive asymmetric RFID tags in a high-assurance avionics multi-domain RFID processing system," presented at the 4th Eur. Workshop RFID Syst. Technol., Freiburg, Germany, Jun. 2008.
26. M. Burmester and J.Munilla, "A flyweight RFID authentication protocol," presented at theWorkshop RFID Security, Leuven, Belgium, Jun. 30-Jul. 2, 2009.
27. B. Song and C. Mitchell, "Scalable RFID authentication protocol," presented at the 3rd Int. Conf. Netw. Syst. Security, Gold Coast, Australia, Oct. 19-21, 2009.
28. C. Kim and G. Avoine, "RFID distance bounding protocol with mixed challenges to prevent replay attacks," presented at the 8th Int. Conf. Cryptography Netw. Security, Kanazawa, Ishikawa, Japan, Dec. 12-14, 2009.
29. T. Halevi, N. Saxena, and S. Halevi, "Using HB family of protocols for privacy-preserving authentication of RFID tags in a population," presented at the Workshop RFID Security, Leuven, Belgium, 2009.
30. H. Chien, "SASI: A new ultralightweight RFID authentication protocol providing strong authentication and strong integrity," IEEE Trans. Dependable Secure Comput., vol.4, no.4, pp. 337-340, Oct.-Dec. 2007.
31. R. Phan, "Cryptanalysis of a new ultralightweight RFID authentication protocol-SASI," IEEE Trans. Dependable Secure Comput., vol.6, no.4, pp. 316-320, Jun. 19, 2008.
32. H. Sun, W. Ting, and K. Wang, "On the security of Chien's ultralightweight RFID authentication protocol," IEEE Trans. Dependable Secure Comput., vol.99, no.1, p. 1, Jul. 22, 2009.
33. T. Cao, E. Bertino, and H. Lei, "Security analysis of the SASI protocol," IEEE Trans. Dependable Secure Comput., vol.6, no.2, pp. 73-77, Jan.- Mar. 2009.
34. T. Deursen and S. Radomirovic, "Security of an RFID protocol for supply chains," in Proc. 2008 IEEE Int. Conf. e-Bus. Eng., 2008, pp. 568-573.
35. S. Cai and Y. Li, "Attacks and improvements to an RFID mutual authentication protocol and its extensions," presented at the 2nd ACM Conf. Wireless Netw. Security, Zurich, Switzerland, Mar. 16-18, 2009.
36. P. Peris-Lopez, J. Hernandez-Castro, J. Estevez-Tapiador, T. Li, and J. Van Der Lubbe, "Weaknesses in two recent lightweight RFID authentication protocols," presented at the Workshop RFID Security, Leuven, Belgium, Jun. 30-Jul. 2, 2009.
37. PUF Based RFIDs. (2010). [Online]. Available: www.verayo.com/ product/pufrfid.html
38. G. Hammouri and B. Sunar, "PUF-HB: A tamper-resilient HB based authentication protocol," in Proc. Appl. Cryptography Netw. Security, New York, 2008, pp. 346-365.
39. A. Jules and S. Weis, "Authentication pervasive devices with human protocols," presented at the 25th Int. Cryptol. Conf., Santa Barbara, CA, Aug. 14-18.
40. J. Bringer, H. Chabanne, and T. Icart, "Improved privacy of the tree-based hash protocols using physically unclonable function," in Proc. 6th Conf. Security Cryptography Netw., Amalfi, Italy, Sep. 10-12, 2008, pp. 77-91.
41. Y. Oren and A. Shamir, "Remote password extraction from RFID tags," IEEE Trans. Comput., vol.56, no.9, pp. 1292-1296, Sep. 2007.
42. F. Stajano and R. Anderson, "The resurrecting duckling: Security issues for ad-hoc wireless networks," in Proc. 7th Int. Workshop Security Protocols, Cambridge, U.K., 1999, pp. 172-194.
43. C. Floerkemeier, R. Schneider, and M. Langheinrich, "Scanning with a purpose-Supporting the fair information principles in RFID protocols," presented at the 2nd Int. Symp. Ubiquitous Comput. Syst., Tokyo, Japan, Nov. 8-9, 2004.
44. A. Juels, R. Rivest, andM. Szydlo, "The blocker tag: selective blocking of RFID tags for consumer privacy," in Proc. ACM Conf. Comput. Commun. Security, Washington, DC, 2003, pp. 103-111.
45. K. Fishkin and S. Roy, "Enhancing RFID privacy via antenna energy analysis," presented at the MIT RFID Privacy Workshop, Boston, MA, 2003.
46. A. Juels, P. Syverson, and D. Bailey, "High-power proxies for enhancing RFID privacy and utility," presented at the Workshop Privacy Enhancing Technol. (PET), Dubrovnik, Croatia, 2005.
47. M. Rieback, B. Crispo, and A. Tanenbaum, "RFID guardian: A batterypowered mobile device for RFID privacy management," in Proc. Australian Conf. Inf. Security Privacy, Brisbane, Australia, Jul. 2005, pp. 184- 194.
48. D. Molnar, A. Soppera, and D. Wagner, "A scalable, delegatable pseudonym protocol enabling ownership transfer of RFID tags," Lecture Notes Comput. Sci., vol.3897, pp. 276-290, 2006.
49. Y. Zuo, Secure and private search protocols for RFID systems. Inf. Syst. Front.: J. Res. Innov. [Online]. Available: http://www.springerlink.com/ content/b66r8r0465r89614/
50. S. Canard and I. Coisel, "Data synchronization in privacy-preserving RFID authentication schemes," presented at theWorkshop RFID Security, Budapest, Hungary, Jul. 9-11, 2008.
51. T. Dimitriou, "A lightweight RFID protocol to protect against traceability and cloning attacks," presented at the 1st Int. Conf. Security Privacy Emerg. Areas Commun. Netw., Athens, Greece, Sep. 5-9, 2005.
52. G. Avoine and P. Oechslin, "A scalable and provably secure hash-based RFID protocol," presented at the 2nd IEEE Int.Workshop Pervasive Comput. Commun. Security, Kauai Island, HI, Mar. 8, 2005.
53. T. Li and G. Wang, "Security analysis of two ultra-lightweight RFID authentication protocols," in Proc. IFIP Int. Inf. Secur. Conf., Sandton, Gauteng, South Africa, May 14-16, 2007.
54. A. Juels, "RFID security and privacy: A research survey," IEEE J. Sel. Areas Commun., vol.24, no.2, pp. 381-395, Feb. 2006.
55. C. Hsin and M. Liu, "A distributed monitoring mechanism for wireless sensor networks," presented at the ACM Workshop Wireless Security, Atlanta, GA, Sep. 2002.
56. S. Doumit andD.Agrawal, "Self-organized criticality and stochastic learning based intrusion detection system for wireless sensor networks," presented at the Military Commun. Conf., Monterey, CA, Oct. 13-16, 2003.
57. Y. Zuo, "RFID survivability quantification and attack modeling," presented at the 3rd ACMConf.Wireless Netw. Security, Hoboken, NJ, Mar. 22-24, 2010.
58. C. Lim and T. Kwon, "Strong and robust RFID authentication enabling perfect ownership transfer," presented at the 8th Conf. Inf. Commun. Security, Raleigh, NC, Dec. 4-7, 2006.