Security flaws in a recent RFID delegation protocol

Personal and Ubiquitous Computing

Volumn 16, Issue 3, 2012, Pages 337-349

  Erguler, Imran ^a   Anarim, Emin ^b  

^a SCIENTIFIC AND TECHNOLOGICAL RESEARCH COUNCIL OF TURKEY   (Turkey)

^b BOGAZICI UNIVERSITY   (Turkey)

Author keywords

Authentication; Delegation; RFID; Security

Indexed keywords

BACK-END SERVERS; COMPUTATIONAL LOADS; DELEGATION; DESYNCHRONIZATION ATTACK; IMPERSONATION ATTACK; NETWORK CONNECTIVITY; RADIOFREQUENCY IDENTIFICATION TAGS; SECURITY; SECURITY FLAWS; SECURITY POLICY; SECURITY PROPERTIES;

AUTHENTICATION; COMPUTER CRIME; NETWORK ARCHITECTURE;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 84860888306     PISSN: 16174909     EISSN: None     Source Type: Journal    
DOI: 10.1007/s00779-011-0393-1     Document Type: Article

References (29)

1. Ohkubo M, Suzuki K, Kinoshita S (2003) Cryptographic approach to "privacy-friendly" tags. In: RFID privacy workshop. MIT, MA
2. Henrici D, Müller P (2004) Hash-based enhancement of location privacy for radio-frequency identification devices using varying identifiers. In: International workshop on pervasive computing and communication security-PerSec 2004. IEEE Computer Society, Florida, USA, p 149-153
3. Molnar D, Wagner D (2004) Privacy and security in Library RFID: issues, practices, and architectures. In: Conference on computer and communications security. ACM CCS, Washington DC, USA, p 210-219 (Pubitemid 40338202)
4. Rhee K, Kwak J, Kim S, Won D (2005) Challenge-response based RFID authentication protocol for distributed databaseenvironment. In: International conference on security in pervasive computing-SPC 2005. Lecture Notes in Computer Science, Springer-Verlag 3450:70-84 (Pubitemid 41274193)
5. Dimitriou T (2005) A lightweight RFID protocol to protect against traceability and cloning attacks. In: Conference on security and privacy for emerging areas in communication networks-securecomm, Athens, Greece
6. Karthikeyan S, Nesterenko N (2005) RFID security without extensive cryptography. In: Workshop on security of Ad Hoc and sensor networks-SASN'05. Alexandria, Virginia, USA, p 63-67 (Pubitemid 44059931)
7. Duc DN, Park J, Lee H, Kim K (2006) Enhancing security of EPCglobal Gen-2 RFID tag against traceability and cloning. In: Symposium on cryptography and information security. Hiroshima, Japan
8. Chien H, Chen C (2007) Mutual authentication protocol for RFID conforming to EPC class 1 generation 2 standards. Comput Stand Interfaces 29(2):254-259 (Pubitemid 44829930)
9. Ha JC, Moon SJ, Nieto JMG, Boyd C (2007) Low-cost and strong-security RFID authentication protocol. In: EUC workshops. Lecture Notes in Computer Science, Springer-Verlag 4809:795-807
10. Tsudik G (2007) A family of dunces: trivial RFID identification and authentication protocols. Cryptology ePrint Archive, Report 2006/015
11. Song B, Mitchell CJ (2008) RFID authentication protocol for low-cost tags. In: ACM conference on wireless network security-WiSec'08. ACM Press, Virginia, USA, p 140-147
12. Shaoying C, Li Y, Li T, Deng R (2009) Attacks and improvements to an RFID mutual authentication protocol and its extensions. In: Proceedings of the second ACM conference on wireless network security-WiSec'09. Zurich, Switzerland
13. Avoine G (2010) RFID security & privacy lounge. http://www.avoine. net/rfid
14. Zhang Y, Kitsos P (2009) Security in RFID and sensor networks. Auerbach Publications, MA
15. Song B, Mitchell CJ (2011) Scalable RFID security protocols supporting tag ownership transfer. Comput Commun 34:556-566
16. Fouladgar S, Afifi H (2007) An efficient delegation and transfer of ownership protocol for RFID tags. In: First international EURASIP workshop on RFID technology. Vienna, Austria
17. Molnar D, Soppera A, Wagner D (2005) A scalable, delegatable pseudonym protocol enabling ownership transfer of RFID tags. In: Selected areas in cryptography-SAC 2005. Lecture Notes in Computer Science, Springer-Verlag 3897:276-290 (Pubitemid 43986800)
18. Lim C, Kwon T (2006) Strong and robust RFID authentication enabling perfect ownership transfer. In: Conference on information and communications security-ICICS'06. Lecture Notes in Computer Science, Springer-Verlag 4307:1-20
19. Fouladgar S, Afifi H (2007) A simple privacy protecting scheme enabling delegation and ownership transfer for RFID tags. J Commun 2(6):6-13
20. Avoine G, Lauradoux C, Martin T (2009) When compromised readers meet RFID. In: Workshop on information security applications-WISA'09. Lecture Notes in Computer Science, Springer-Verlag 5932:36-50
21. Avoine G, Oechslin P (2005) RFID traceability: a multilayer problem. In: Financial cryptography-FC'05. Lecture Notes in Computer Science, Springer-Verlag 3570:125-140 (Pubitemid 41425471)
22. Karygiannis A., Phillips T, Tsibertzopoulos A (2006) RFID security: a taxonomy of risk. In: Proceedings of the 1st international conference on communications and networking in China-ChinaCom'06, October 2006, Beijing, China, p 1-7
23. Burmester M, de Medeiros B (2007) RFID security: attacks, countermeasures and challenges. In: Proceedings of the 5th RFID academic convocation. The RFID Journal Conference
24. van Deursen T, Radomirovic S (2009) Attacks on RFID protocols. Cryptology ePrint Archive, Report 2008/310
25. Mitrokotsa A, Rieback MR, Tanenbaum AS (2010) Classifying RFID attacks and defenses. Inf Syst Frontiers 12(5):491-505
26. Avoine G (2005) Adversarial model for radio frequency identification. Cryptology ePrint Archieve, Report 2005/049
27. Vaudenay S (2007) On privacy models for RFID. In Advances in Cryptology - ASIACRYPT 2007. Lecture Notes in Computer Science, Springer-Verlag 4833:68-87
28. Juels A, Weis S, (2007) Defining strong privacy for RFID. In: Proceedings of IEEE PerCom'07, p 342-347 (Pubitemid 47214235)
29. Ouafi K, Phan RC-W, (2008) Traceable privacy of recent provably-secure RFID protocols, In: Proceedings of the 6th international conference on applied cryptography and network security. New York, NY, USA, p 479-489