Privacy versus scalability in radio frequency identification systems

Computer Communications

Volumn 33, Issue 18, 2010, Pages 2155-2163

  Alomair, Basel ^a,b   Poovendran, Radha ^a  

^a UNIVERSITY OF WASHINGTON   (United States)

^b KING SAUD UNIVERSITY   (Saudi Arabia)

Author keywords

Active; Passive; Privacy; Radio frequency identification (RFID); Scalability

Indexed keywords

ACTIVE; FUNCTIONAL COMPONENTS; INTERACTIVE PROTOCOLS; LINE-OF-SIGHT PATHS; PASSIVE; PRIVACY; PRIVACY PRESERVING; RADIO FREQUENCY IDENTIFICATION SYSTEMS; RADIOFREQUENCY IDENTIFICATION TAGS; RFID READERS; RFID SYSTEMS; RFID TECHNOLOGY; TAG IDENTIFICATION; WIRELESS MEDIUM;

COMPUTATIONAL EFFICIENCY; INFORMATION RETRIEVAL; RADIO WAVES; SCALABILITY;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 78049383154     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comcom.2010.08.006     Document Type: Review

References (81)

1. K. Albrecht, L. McIntyre, Consumers against supermarket privacy invasion and numbering - CASPIAN, .
2. B. Alomair, A. Clark, J. Cuellar, and R. Poovendran Scalable RFID systems: a privacy-preserving protocol with constant-time identification The 40th Annual IEEE/IFIP International Conference on Dependable Systems and Networks - DSN'10 2010 IEEE Chicago, Illinois, USA
3. B. Alomair, L. Lazos, and R. Poovendran Securing low-cost RFID systems: an unconditionally secure approach Journal of Computer Security 2010 Special Issue on RFID System Security
4. G. Avoine. Adversary Model for Radio Frequency Identification, Technical Report LASEC-REPORT-2005-001, Swiss Federal Institute of Technology (EPFL), Security and Cryptography Laboratory (LASEC), Lausanne, Switzerland, September 2005.
5. G. Avoine, E. Dysli, and P. Oechslin Reducing time complexity in RFID systems Selected Areas in Cryptography - SAC 3897 2005 291 306
6. G. Avoine, P. Oechslin, A scalable and provably secure hash based RFID protocol, in: International Workshop on Pervasive Computing and Communication Security - PerSec 2005, Kauai Island, Hawaii, USA, March 2005, pp. 110-114.
7. G. Avoine, and P. Oechslin RFID traceability: a multilayer problem Financial cryptography - FC'05 A. Patrick, M. Yung, Lecture Notes in Computer Science 2005 Springer Roseau, The Commonwealth Of Dominica, IFCA 125 140
8. M. Bellare, C. Namprempre, Authenticated encryption: relations among notions and analysis of the generic composition paradigm, in: Proceedings of the Sixth International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology-ASIACRYPT, 2000, pp. 531-545.
9. C. Berbain, O. Billet, J. Etrog, and H. Gilbert An efficient forward private RFID protocol E. Al-Shaer, S. Jha, A.D. Keromytis, 16th ACM Conference on Computer and Communications Security - CCS'09 2009 ACM Press Chicago, Illinois, USA 43 53
10. A. Bogdanov, L.R. Knudsen, G. Leander, C. Paar, A. Poschmann, M.J. Robshaw, Y. Seurin, and C. Vikkelsoe PRESENT: an ultra-lightweight block cipher workshop on cryptographic hardware and embedded systems - CHES 2007 P. Paillier, I. Verbauwhede, Lecture Notes in Computer Science 4727 2007 Springer-Verlag Vienna, Austria 450 466
11. L. Bolotnyy, G. Robins, Randomized pseudo-random function tree walking algorithm for secure radio frequency identification, in: Proceedings of IEEE Workshop on Automatic Identification Advanced Technologies (Auto-ID), 2005, pp. 43-48.
12. J. Bringer, H. Chabanne, and T. Icart Improved privacy of the tree-based hash protocols using physically unclonable function Proceedings of the Sixth International Conference on Security and Cryptography for Networks - SCN'08 R. Ostrovsky, R.D. Prisco, I. Visconti, Lecture Notes in Computer Science vol. 5229 2008 Springer Amalfi, Italy 77 91
13. L. Buttyán, T. Holczer, I. Vajda, Optimal key-trees for tree-based private authentication, in: Workshop on Privacy Enhancing Technologies - PET, 2006, Cambridge, UK.
14. C. Chatmon, T. van Le, M. Burmester, Secure Anonymous RFID Authentication Protocols. Florida State University, Department of Computer Science, Technical Report, 2006.
15. W. Che, H. Deng, X. Tan, and J. Wang Scheme of truly random number generator application in RFID tag Networked RFID Systems and Lightweight Cryptography Raising Barriers to Product Counterfeiting 2007 Springer
16. J.H. Cheon, J. Hong, G. Tsudik, Reducing RFID Reader Load with the Meet-in-the-Middle Strategy, Cryptology ePrint Archive, Report 2009/092, 2009.
17. H.-Y. Chien SASI: a new ultralightweight RFID authentication protocol providing strong authentication and strong integrity IEEE Transactions on Dependable and Secure Computing 4 4 2007 337 340
18. H.-Y. Chien, and C.-W. Huang A lightweight RFID protocol using substring Embedded and Ubiquitous Computing - EUC'07 Lecture Notes in Computer Science 4808 2007 Springer Taipei, Taiwan 422 431
19. W. Choi, and B.-h. Roh Backward channel protection method for RFID security schemes based on tree-walking algorithms International conference on computational science and its applications - ICCSA 2006 proceedings, part IV M.L. Gavrilova, O. Gervasi, V. Kumar, C.J.K. Tan, D. Taniar, A. Lagana, Y. Mun, H. Choo, Lecture Notes in Computer Science 3983 2006 Springer-Verlag Glasgow, Scotland 279 287
20. M. Conti, R. Di Pietro, L.V. Mancini, and A. Spognardi FastRIPP: RFID privacy-preserving protocol with forward secrecy and fast resynchronization 33th Annual Conference of the IEEE Industrial Electronics Society (IEEE IECON 07) 2007 IEEE Computer Society Taipei, Taiwan 52 57
21. M. Conti, R.D. Pietro, L.V. Mancini, and A. Spognardi RIPP-FS: an RFID identification, privacy-preserving protocol with forward secrecy International Workshop on Pervasive Computing and Communication Security - PerSec 2007 2007 IEEE Computer Society Press New York City, New York, USA 229 234
22. T. Dimitriou A Lightweight RFID Protocol to protect against Traceability and Cloning attacks Conference on Security and Privacy for Emerging Areas in Communication Networks - SecureComm 2005 IEEE Athens, Greece
23. M. Feldhofer, S. Dominikus, and J. Wolkerstorfer Strong Authentication for RFID Systems using the AES Algorithm Workshop on Cryptographic Hardware and Embedded Systems - CHES 2004 M. Joye, J.-J. Quisquater, Lecture Notes in Computer Science 3156 2004 Springer-Verlag Boston, Massachusetts, USA 357 370
24. M. Feldhofer, S. Dominikus, and J. Wolkerstorfer Strong authentication for RFID systems using the AES algorithm Workshop on cryptographic hardware and embedded systems - CHES 2004 M. Joye, J.-J. Quisquater, Lecture Notes in Computer Science vol. 3156 2004 Springer-Verlag Boston, Massachusetts, USA, 357 370
25. M. Feldhofer, J. Wolkerstorfer, and V. Rijmen AES Implementation on a Grain of Sand IEE Proceedings - Information Security 152 1 2005 13 20
26. C. Floerkemeier, R. Schneider, M. Langheinrich, Scanning with a purpose-supporting the fair information principles in RFID protocols, in: Second International Symposium on Ubiquitous Computing Systems, Tokyo, Japan, 2004.
27. S. Garfinkel, A. Juels, and R. Pappu RFID privacy: an overview of problems and proposed solutions IEEE Security & Privacy 2005 34 43
28. F. Gosset, F. Standaert, J. Quisquater, FPGA implementation of SQUASH, in: Proceedings of the 29th Symposium on Information Theory in the Benelux, 2008.
29. M. Hellman A cryptanalytic time-memory trade-off IEEE Transactions on Information Theory 26 4 1980 401 406
30. D. Henrici, P. Müller, Hash-based enhancement of location privacy for radio-frequency identification devices using varying identifiers, in: International Workshop on Pervasive Computing and Communication Security - PerSec 2004, R. Sandhu, R. Thomas, 2004, IEEE Computer Society, Orlando, Florida, USA, pp. 149-153.
31. D. Holcom, W. Burleson, K. Fu, Initial SRAM state as a fingerprint and source of true random numbers for RFID tags, in: Workshop on RFID Security - RFIDSec'07, Malaga, Spain, July 2007.
32. X. Huang. Quantifying information leakage in RFID systems, in: 10th International Conference on Advanced Communication Technology, Citeseer, 2008.
33. S. Jain, S. Das, Collision avoidance in a dense RFID network, in: Proceedings of the First International Workshop on Wireless Network Testbeds, Experimental Evaluation & Characterization, ACM, 2006, p. 56
34. A. Juel RFID security and privacy: a research survey IEEE Journal on Selected Areas in Communications 24 2 2006 381 394
35. A. Juels, J. Brainard, Soft blocking: flexible blocker tags on the cheap, in: S. De Capitani di Vimercati, P. Syverson, Workshop on Privacy in the Electronic Society - WPES, 2004, ACM Press, Washington, DC, USA, pp.1-7.
36. A. Juels, R. Rivest, and M. Szydlo The blocker tag: selective blocking of RFID tags for consumer privacy Proceedings of the 10th ACM conference on Computer and communications security 2003 ACM New York, NY, USA 103 111
37. A. Juels, P. Syverson, D. Bailey. High-power proxies for enhancing RFID privacy and utility, in: Proceedings of the Fifth Workshop on Privacy Enhancing Technologies, 2005.
38. A. Juels, and S. Weis Defining strong privacy for RFID International Conference on Pervasive Computing and Communications - PerCom 2007 2007 IEEE Computer Society Press New York City, New York, USA 342 347
39. G. Khandelwal, K. Lee, A. Yener, and S. Serbetli ASAP: a MAC protocol for dense and time-constrained RFID systems EURASIP Journal on Wireless Communications and Networking 2007
40. M. Kodialam, and T. Nandagopal Fast and reliable estimation schemes in RFID systems Proceedings of the 12th Annual International Conference on Mobile Computing and Networking, MobiCom 2006 ACM
41. H. Krawczyk The order of encryption and authentication for protecting communications(or: How secure is SSL?) Advances in Cryptology-CRYPTO 2001 2001 310 331
42. T.V. Le, M. Burmester, B. de Medeiros, Universally composable and forward-secure RFID authentication and authenticated key exchange, in: F. Bao, S. Miller, ACM Symposium on Information, Computer and Communications Security - ASIACCS 2007, ACM Press Singapore Republic of Singapore, 2007, pp. 242-252.
43. M. Lehtonen, T. Staake, F. Michahelles, E. Fleisch. From Identification to Authentication - A Review of RFID Product Authentication Techniques, in: Workshop on RFID Security - RFIDSec'06, Ecrypt, Graz, Austria, July 2006.
44. Y. Li, and X. Ding Protecting RFID communications in supply chains Proceedings of the 2nd ACM Symposium on Information, Computer and Communications Security 2007 ACM New York, NY, USA 234 241
45. T. Lim, T. Li, Y. Li. A Security and Performance Evaluation of Hash-Based RFID Protocols, in: Fourth International Conferences on Information Security and Cryptology-Inscrypt'08, 2008, pp. 406-424.
46. Z. Liu, and D. Peng True Random Number Generator in RFID Systems Against Traceability IEEE Consumer Communications and Networking Conference - CCNS 1 2006 IEEE Las Vegas, Nevada, USA 620 624
47. L. Lu, J. Han, L. Hu, Y. Liu, L. Ni, Dynamic Key-Updating: Privacy-Preserving Authentication for RFID Systems, in: Proceedings of the Fifth IEEE International Conference on Pervasive Computing and Communications, 2007, pp. 13-22.
48. L. Lu, J. Han, R. Xiao, Y. Liu, ACTION: breaking the privacy barrier for RFID systems, in: INFOCOM 2009. The 28th IEEE Conference on Computer Communications, 2009.
49. J. Melia-Segui, J. Garcia-Alfaro, and J. Herrera-Joancomarti Analysis and Improvement of a Pseudorandom Number Generator for EPC Gen2 Tags 1st International Workshop on Lightweight Cryptography for Resource-Constrained Devices - WLC'10 Lecture Notes in Computer Science 2010 Springer Tenerife, Canary Islands, Spain
50. A. Menezes, P. Van Oorschot, and S. Vanstone Handbook of applied cryptography 1997 CRC press
51. D. Molnar, A. Soppera, and D. Wagner A Scalable, Delegatable Pseudonym Protocol Enabling Ownership Transfer of RFID Tags Selected Areas in Cryptography - SAC 2005 B. Preneel, S. Tavares, Lecture Notes in Computer Science 3897 2005 Springer-Verlag Kingston, Canada 276 290
52. D. Molnar, D. Wagner. Privacy and security in library RFID: issues, practices, and architectures, in: Proceedings of the 11th ACM Conference on Computer and Communications Security, 2004, pp. 210-219.
53. J. Myung, and W. Lee An adaptive memoryless tag anti-collision protocol for RFID networks IEEE Infocom 2005
54. K. Nohl, and D. Evans Quantifying information leakage in tree-based hash protocols Conference on information and communications security - ICICS'06 Lecture Notes in Computer Science 4307 2006 Springer-Verlag Raleigh, North Carolina, USA 228 237
55. P. Oechslin Making a faster cryptanalytic time-memory trade-off Advances in Cryptology-CRYPTO 3 2003 Springer 617 630
56. M. Ohkubo, K. Suzuki, S. Kinoshita. Cryptographic Approach to "Privacy-Friendly" Tags. In RFID Privacy Workshop, MIT, MA, USA, November 2003.
57. M. Ohkubo, K. Suzuki, S. Kinoshita, Efficient Hash-Chain Based RFID Privacy Protection Scheme, in: International Conference on Ubiquitous Computing - Ubicomp, Workshop Privacy: Current Status and Future Directions, Nottingham, England, September 2004.
58. R.-I. Paise, and S. Vaudenay Mutual authentication in RFID: security and privacy Proceedings of the Third ACM Symposium on Information, Computer and Communications Security - ASIACCS'08 2008 ACM Press Tokyo, Japan 292 299
59. P. Peris-Lopez, J.C. Hernandez-Castro, J. Estevez-Tapiador, A. Ribagorda. LMAP: A real lightweight mutual authentication protocol for low-cost RFID tags, in: Printed handout of Workshop on RFID Security - RFIDSec 06, July 2006.
60. P. Peris-Lopez, J.C. Hernandez-Castro, J. Estevez-Tapiador, and A. Ribagorda M2AP: A minimalist mutual authentication protocol for low-cost RFID tags International conference on ubiquitous intelligence and computing - UIC 06 Lecture Notes in Computer Science 4159 2006 Springer-Verlag 912 923 (Pubitemid 44577871)
61. P. Peris-Lopez, J.C. Hernandez-Castro, J. Estevez-Tapiador, and A. Ribagorda RFID systems: a survey on security threats and proposed solutions 11th IFIP international conference on personal wireless communications - PWC'06 Lecture Notes in Computer Science vol. 4217 2006 Springer-Verlag Albacete, Spain 159 170
62. P. Peris-Lopez, J.C. Hernandez-Castro, J.M. Estevez-Tapiador, and A. Ribagorda EMAP: An efficient mutual authentication protocol for low-cost RFID tags OTM federated conferences and workshop: is workshop - IS'06 Lecture Notes in Computer Science 4277 2006 Springer-Verlag 352 361 (Pubitemid 44891824)
63. P. Peris-Lopez, J.C. Hernandez-Castro, J.M. Estevez-Tapiador, and A. Ribagorda Advances in Ultralightweight Cryptography for Low-cost RFID Tags: Gossamer Protocol Workshop on Information Security Applications Lecture Notes in Computer Science 2008 Springer-Verlag Jeju Island, Korea
64. M. Rieback, B. Crispo, A. Tanenbaum. RFID Guardian: a battery powered mobile device for RFID privacy management, in: Proceedings of 10th Australasian Conference on Information Security and Privacy, ACISP 2005, vol. 3574, 2004, pp. 184-194
65. S. Sarma, S. Weis, and D. Engels Radio-frequency identification: security risks and challenges Cryptobytes, RSA Laboratories 6 1 2003 2 9
66. N. Saxena, J. Voris, We can remember it for you wholesale: implications of data remanence on the use of RAM for true random number generation on RFID tags, in: Proceedings of Workshop on Radio Frequency Identification Security (RFIDsec'09), July 2009.
67. Y. Seo, and K. Kim Scalable and untraceable authentication protocol for RFID International workshop on security in ubiquitous computing systems - SecUbiq 2006 Lecture Notes in Computer Science 2006 Springer-Verlag Seoul, Korea
68. A. Shamir, Squash: a new one-way hash function with provable security properties for highly constrained devices such as RFID tags, in: International Workshop on RFID Security (RFIDSec'07), 2007.
69. D. Shih, C. Lin, and B. Lin RFID tags: privacy and security aspects International Journal of Mobile Communications 3 3 2005 214 230
70. B. Song, and C.J. Mitchell RFID authentication protocol for low-cost tags V.D. Gligor, J. Hubaux, R. Poovendran, ACM Conference on Wireless Network Security, WiSec'08 2008 ACM Press Alexandria, Virginia, USA 140 147
71. B. Song, and C.J. Mitchell Scalable RFID authentication protocol Third International Conference on Network & System Security - NSS 2009 2009 IEEE Computer Society Gold Coast, Australia 216 224
72. D. Stinson Cryptography: Theory and Practice 2002 CRC Press
73. G. Tsudik YA-TRAP: yet another trivial RFID authentication protocol International Conference on Pervasive Computing and Communications - PerCom 2006 2006 IEEE Computer Society Press Pisa, Italy
74. G. Tsudik, A family of dunces: trivial RFID identification and authentication protocols, in: Privacy Enhancing Technologies Seventh International Symposium PET 2007, June 20-22, Revised Selected Papers, vol. 4776, Springer, Ottawa, Canada, p. 45.
75. J. Voris, N. Saxena, We can remember it for you wholesale: implications of data remanence on the use of RAM for true random number generation on RFID Tags, in: Workshop on RFID Security - RFIDSec'09, Leuven, Belgium, July 2009.
76. W. Wang, Y. Li, L. Hu, L. Lu, Storage-Awareness: RFID Private Authentication based on Sparse Tree, in: Third International Workshop on Security, Privacy and Trust in Pervasive and Ubiquitous Computing, SECPerU 2007, 2007, pp. 61-66.
77. S. Weis, S. Sarma, R. Rivest, and D. Engels Security and privacy aspects of low-cost radio frequency identification systems International conference on security in pervasive computing - SPC 2003 D. Hutter, G. Müller, W. Stephan, M. Ullmann, Lecture Notes in Computer Science vol. 2802 2003 Springer-Verlag Boppard, Germany 454 469
78. S. Weis, S. Sarma, R. Rivest, and D. Engels Security and privacy aspects of low-cost radio frequency identification systems International conference on security in pervasive computing - SPC 2003 D. Hutter, G. Müller, W. Stephan, M. Ullmann, Lecture Notes in Computer Science 2802 2003 Springer-Verlag Boppard, Germany 454 469
79. J. Wu, D.R. Stinson. A Highly scalable RFID authentication protocol. in: Proceedings of the 14th Austrialasian Conference on Information Security and Privacy - ACISP'09, Brisbane, Australia, July 2009.
80. Q. Yao, Y. Qi, J. Han, J. Zhao, X. Li, and Y. Liu Randomizing RFID private authentication IEEE International Conference on Pervasive Computing and Communications-PerCom'09 2009 IEEE Computer Society 1 10
81. Y. Yousuf, V. Potdar. A survey of RFID authentication protocols, in: 22nd International Conference on Advanced Information Networking and Applications-Workshops, AINAW 2008, March 2008, pp. 1346-1350.