Formal verification of privacy for RFID systems

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2010, Pages 75-88

  Bruśo, Mayla ^a   Chatzikokolakis, Konstantinos ^a   Den Hartog, Jerry ^a  

^a EINDHOVEN UNIVERSITY OF TECHNOLOGY   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

APPLIED PI CALCULUS; ELECTRONIC PASSPORTS; FORMAL MODEL; FORMAL VERIFICATIONS; GENERIC CLASS; IDENTIFICATION PROTOCOL; PRIVACY CONCERNS; RF-ID TAGS; RFID SYSTEMS; SUFFICIENT AND NECESSARY CONDITION; UNLINKABILITY;

RADIO NAVIGATION; SECURITY SYSTEMS;

SECURITY OF DATA;

EID: 77957584097     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2010.13     Document Type: Conference Paper

References (22)

1. M. Ohkubo, K. Suzuki, and S. Kinoshita, "Cryptographic approach to "privacy-friendly" tags, " in RFID Privacy Workshop, MIT, Massachusetts, USA, November 2003.
2. M. Brusó, K. Chatzikokolakis, and J. den Hartog, "Formal verification of privacy for rfid systems, " Tech. Rep., 2009, available at http://www.win.tue.nl/-kostas/.
3. M. Abadi and C. Fournet, "Mobile values, new names, and secure communication, " in POPL, 2001, pp. 104-115.
4. R. Milner, J. Parrow, and D. Walker, "A calculus of mobile processes, " I and II. Information and Computation, vol. 100, 1989.
5. C. Chatmon, T. van Le, and M. Burmester, "Secure anonymous RFID authentication protocols, " Florida State University, Department of Computer Science, Tallahassee, Florida, USA, Technical Report TR-060112, 2006.
6. T. van Deursen, S. Mauw, and S. Radomirovic, "Untraceability of rfid protocols, " in Information Security Theory and Practices. Smart Devices, Convergence and Next Generation Networks, ser. Lecture Notes in Computer Science, vol. 5019. 5019. Springer, 2008, p. 115.
7. M. Arapinis, T. Chothia, E. Ritter, and M. Ryan, "Untraceability in the applied pi calculus, " in proceedings of the 1st Int. Workshop on RFID Security and Cryptography., 2009, to appear.
8. K. Nohl and D. Evans, "Privacy through noise: a design space for private identification, " in Annual Computer Security Applications Conference (ACSAC 2009), 2009.
9. A. Juels and S. Weis, "Defining strong privacy for RFID, " in International Conference on Pervasive Computing and Communications - PerCom 2007, IEEE. New York City, New York, USA: IEEE Computer Society Press, March 2007, pp. 342-347.
10. G. Avoine, "Adversary model for radio frequency identification, " Swiss Federal Institute of Technology (EPFL), Security and Cryptography Laboratory (LASEC), Lausanne, Switzerland, Technical Report LASEC-REPORT-2005- 001, September 2005.
11. K. Ouafi and R. C.-W. Phan, "Privacy of recent RFID authentication protocols, " in 4th International Conference on Information Security Practice and Experience - ISPEC 2008, ser. Lecture Notes in Computer Science, vol. 4991. Sydney, Australia: Springer, April 2008, pp. 263-277.
12. S. Delaune, S. Kremer, and M. Ryan, "Verifying privacytype properties of electronic voting protocols, " Journal of Computer Security, vol. 17, no. 4, pp. 435-487, 2009.
13. S. Weis, S. Sarma, R. Rivest, and D. Engels, "Security and privacy aspects of low-cost radio frequency identification systems, " in International Conference on Security in Pervasive Computing - SPC 2003, ser. Lecture Notes in Computer Science, D. Hutter, G. Müller, W. Stephan, and M. Ullmann, Eds., vol. 2802. Boppard, Germany: Springer-Verlag, March 2003, pp. 454-469.
14. B. Blanchet, "An efficient cryptographic protocol verifier based on prolog rules, " in CSFW. IEEE Computer Society, 2001, pp. 82-96.
15. -, "Automatic proof of strong secrecy for security protocols, " in IEEE Symposium on Security and Privacy. IEEE Computer Society, 2004, pp. 86-100.
16. G. Avoine, "Cryptography in radio frequency identification and fair exchange protocols, " Ph.D. dissertation, EPFL, Lausanne, Switzerland, Dec. 2005.
17. M. Burmester, T. v. Le, and B. d. Medeiros, "Provably secure ubiquitous systems: universally composable RFID authentication protocols, " in Conference on Security and Privacy for Emerging Areas in Communication Networks - SecureComm. Baltimore, Maryland, USA: IEEE, August-September 2006.
18. S. Vaudenay, "On privacy models for RFID, " in Advances in Cryptology - Asiacrypt 2007, ser. Lecture Notes in Computer Science, vol. 4833. Kuching, Malaysia: Springer-Verlag, December 2007, pp. 68-87.
19. M. Arapinis, T. Chothia, E. Ritter, and M. Ryan, "Analysing unlinkability and anonymity using the applied pi calculus, " in proceedings of CSF 2010, 2010, to appear.
20. X. Li, Y. Zhang, and Y. Deng, "Verifying anonymous credential systems in applied pi calculus, " in CANS '09: Proceedings of the 8th International Conference on Cryptology and Network Security. Berlin, Heidelberg: Springer-Verlag, 2009, pp. 209-225.
21. M. Backes, M. Maffei, and D. Unruh, "Zero-knowledge in the applied pi-calculus and automated verification of the direct anonymous attestation protocol, " in SP '08: Proceedings of the 2008 IEEE Symposium on Security and Privacy. Washington, DC, USA: IEEE Computer Society, 2008, pp. 202- 215.
22. F. D. Garcia and P. van Rossum, "Modeling privacy for off-line RFID systems, " in Workshop on RFID Security - RFIDSec'09, Leuven, Belgium, July 2009.