SHARDIS: A privacy-enhanced discovery service for RFID-based product information

IEEE Transactions on Industrial Informatics

Volumn 8, Issue 3, 2012, Pages 707-718

  Fabian, Benjamin ^a   Ermakova, Tatiana ^a   Muller, Cristian ^a  

^a HUMBOLDT UNIVERSITY   (Germany)

Author keywords

Discovery service; privacy; RFID; supply chain

Indexed keywords

APPLICATION AREA; CLIENT PRIVACY; DISCOVERY SERVICE; DISTRIBUTED SERVICE; ELECTRONIC PRODUCT CODES; EPCGLOBAL NETWORK; GLOBAL INFORMATIONS; LOOKUPS; PEER-TO-PEER PARADIGM; PERFORMANCE EXPERIMENT; PLANETLAB; PRIVACY MECHANISMS; PROBABILISTIC ANALYSIS; PRODUCT INFORMATION; RADIO FREQUENCIES; REAL-WORLD OBJECTS; RESEARCH PLATFORMS; RF-ID TAGS;

DATA PRIVACY; KNOWLEDGE MANAGEMENT; RADIO FREQUENCY IDENTIFICATION (RFID);

SUPPLY CHAINS;

EID: 84862274466     PISSN: 15513203     EISSN: None     Source Type: Journal    
DOI: 10.1109/TII.2011.2166783     Document Type: Article

References (63)

1. GS1/EPCglobal. [Online]. Available: http://www.gs1.org/epcglobal/
2. K. Traub et al., "The EPCglobal architecture framework," ver. 1.4, Dec. 2010. [Online]. Available: http://www.gs1.org/gsmp/kc/epcglobal/ar- chitecture/
3. S. F. Wamba and H. Boeck, "Enhancing information flow in a retail supply chain using RFID and the EPC network: A proof-of-concept approach," J. Theor. Appl. Electron. Commerce Res., vol. 3, no. 1, pp. 92-105, Apr. 2008.
4. F. Thiesse and C. Condea, "RFID data sharing in supply chains: What is the value of the EPC network?," Int. J. Electron. Business, vol. 7, no. 1, pp. 21-43, 2009.
5. S. Evdokimov, B. Fabian, S. Kunz, and N. Schoenemann, "Comparison of discovery service architectures for the internet of things," in Proc. IEEE Int. Conf. Sensor Networks, Ubiquitous, and Trustworthy Computing (SUTC'10), Newport Beach, CA, 2010, pp. 237-244.
6. EPCglobal, "Object naming service (ONS) 1.0.1," May 2008. [Online]. Available: http://www.gs1.org/gsmp/kc/epcglobal/ons/
7. S. Evdokimov, B. Fabian, and O. Günther, "Multipolarity for the object naming service," in Internet of Things (IOT'08), Zurich, 2008, ser. LNCS. New York: Springer, 2008, vol. 4952, pp. 1-18.
8. B. Fabian and O. Günther, "Security challenges of the EPCglobal network," Commun. ACM, vol. 52, no. 7, pp. 121-125, 2009.
9. S. Garfinkel, A. Juels, and R. Pappu, "RFID privacy: An overview of problems and proposed solutions," IEEE Security and Privacy, vol. 3, no. 3, pp. 34-43, May-Jun. 2005.
10. A. Juels, "RFID security and privacy: A research survey," IEEE J. Sel. Areas Commun., vol. 24, no. 2, pp. 381-394, Feb. 2006.
11. European Data Protection Supervisor, "Opinion of the european data protection supervisor on promoting trust in the information society by fostering data protection and privacy," 2010. [Online]. Available: http://www.edps.europa.eu/
12. PlanetLab Website. [Online]. Available: http://www.planet-lab.org/
13. A. Rezafard, "Extensible supply-chain discovery service problem statement," IETF, Internet-Draft, 2008 [Online]. Available: http://tools.ietf.org/html/draft-rezafard-esds-problem-statement-03
14. BRIDGE, "High level design for discovery services," Aug. 2007. [Online]. Available: http://www.bridge-project.eu/
15. C. Kürschner, C. Condea, O. Kasten, and F. Thiesse, "Discovery service design in the EPCglobal network - Towards full supply chain visibility," in Internet of Things (IOT 2008), Zurich, 2008, ser. LNCS. New York: Springer, 2008, vol. 4952, pp. 19-34.
16. M. Young, "Extensible supply-chain discovery service concepts," IETF, Internet-Draft, Aug. 29, 2008, draft-young-esds-concepts-04 [Online]. Available: http://tools.ietf.org/html/draft-young-esds-con-cepts-04
17. J. Müller, J. Oberst, S. Wehrmeyer, J. Witt, A. Zeier, and H. Plattner, "An aggregating discovery service for the EPCglobal network," in Proc. 43rd Int. Conf. Syst. Sci., Hawaii, 2010.
18. H. Balakrishnan, M. F. Kaashoek, D. R. Karger, R. Morris, and I. Stoica, "Looking up data in P2P systems," Commun. ACM, vol. 46, no. 2, pp. 43-48, 2003.
19. R. Cox, A. Muthitacharoen, and R. Morris, "Serving DNS using a peer-to-peer lookup service," in Proc. 1st Int. Workshop on Peer-to-Peer Systems (IPTPS '01), 2002, vol. 2429, pp. 155-165, ser. LNCS, Springer.
20. V. Ramasubramanian and E. G. Sirer, "The design and implementation of a next generation name service for the internet," in Proc. ACM SIG-COMM'04, Portland, 2004, pp. 331-342.
21. Y. Doi, "DNS meets DHT: Treating massive ID resolution using DNS over DHT," in Proc. Symp. Appl. Internet (SAINT'05), 2005, pp. 9-15.
22. L. Huang, "Distributed DNS implementation in IPv6," Internet Draft, Apr. 2007. [Online]. Available: http://tools.ietf.org/html/draft-lican- huang-dnsop-distributeddns-03
23. I. Stoica, R. Morris, D. Liben-Nowell, D. R. Karger, M. F. Kaashoek, F. Dabek, and H. Balakrishnan, "Chord: A scalable peer-to-peer lookup protocol for internet applications," IEEE/ACM Trans. Networking, vol. 11, no. 1, pp. 17-32, 2003.
24. K. Park, V. S. Pai, L. Peterson, and Z. Wang, "CoDNS: Improving DNS performance and reliability via cooperative lookups," in Proc. 6th Symp. Oper. Syst. Design and Implementation (OSDI'04), San Francisco, CA, 2004, pp. 199-214.
25. L. Poole and V. S. Pai, "ConfiDNS: Leveraging scale and history to improve DNS security," in Proc. 3rd Workshop on Real, Large Distrib. Syst. (WORLDS'06), Seattle, WA, 2006.
26. H. Balakrishnan, K. Lakshminarayanan, S. Ratnasamy, S. Shenker, I. Stoica, and M. Walfish, "A layered naming architecture for the internet," in Proc. ACM SIGCOMM'04, New York, 2004, pp. 343-352.
27. B. Fabian and O. Günther, "Distributed ONS and its impact on privacy," in Proc. IEEE Int. Conf. Commun. (ICC'07), Glasgow, U.K., 2007, pp. 1223-1228.
28. S. Rhea, D. Geels, T. Roscoe, and J. Kubiatowicz, "Handling churn in a DHT," in Proc. USENIX Annu. Tech. Conf. (ATEC'04), 2004, pp. 127-140.
29. B. Fabian, "Implementing secure P2P-ONS," in Proc. IEEE Int. Conf. Commun. (ICC'09), Dresden, Germany, 2009.
30. D. Huang, M. Verma, A. Ramachandran, and Z. Zhou, "A distributed ePedigree architecture," in Proc. 11th Int. Workshop on Future Trends of Distrib. Comput. Syst. (FTDCS'07), 2007.
31. A. I. T. Rowstron and P. Druschel, "Pastry: Scalable, decentralized object location, and routing for large-scale peer-to-peer systems," in Proc. IFIP/ACM Int. Conf. Distrib. Syst. Platforms, Heidelberg, Germany, 2001, vol. 2218, pp. 329-350, ser. LNCS, Springer.
32. FreePastry Website [Online]. Available: http://www.freepastry.org/
33. N. Schönemann, K. Fischbach, and D. Schoder, "P2P architecture for ubiquitous supply chains," in Proc. 17th Eur. Conf. Inform. Syst. (ECIS'09), Verona, Italy, 2009.
34. M. Dias De Amorim, S. Fdida, N. Mitton, L. Schmidt, and D. S. Ryl, Anglais distributed planetary object name service: Issues and design principles INRIA, Res. Rep. RR-7042, 2009. [Online]. Available: http://hal.inria.fr/inria- 00419496/PDF/RR-7042.pdf
35. S. Shrestha, D. S. Kim, S. Lee, and J. S. Park, "A peer-to-peer RFID resolution framework for supply chain network," in Proc. 2nd Int. Conf. Future Networks, 2010, pp. 318-322.
36. P. Manzanares-Lopez, J. P. Muñoz-Gea, J. Malgosa-Sanahuja, and J. C. Sanchez-Aarnoutse, "An efficient distributed discovery service for EPCglobal network in nested package scenarios," J. Network Comput. Appl., vol. 34, no. 3, pp. 925-937, May 2011.
37. G. R. Blakley, "Safeguarding cryptographic keys," in Proc. National Comput. Conf. (NCC), AFIPS, 1979, pp. 313-317.
38. M. Rabin, "Efficient dispersal of information for security, load balancing, and fault tolerance," J. ACM, vol. 36, pp. 335-348, 1989.
39. B. Chor, S. Goldwasser, S. Micali, and B. Awerbuch, "Verifiable secret sharing and achieving simultaneity in the presence of faults," in Proc. 26th Annu. Symp. Foundations Comput. Sci. (SFCS'85), 1985, pp. 383-395, IEEE Computer Society.
40. B. Schoenmakers, "A simple publicly verifiable secret sharing scheme and its application to electronic voting," in Proc. Advances in Cryptology - CRYPTO'99, 1999, vol. 1666, pp. 148-164, ser. LNCS, Springer.
41. P. Feldman, "A practical scheme for non-interactive verifiable secret sharing," in Proc. Annu. IEEE Symp. Foundations Comput. Sci., 1987, pp. 427-438, IEEE Computer Society.
42. M. Langheinrich and R. Marti, "Practical minimalist cryptography for RFID privacy," IEEE Syst. J., Special Issue on RFID Technology, vol. 1, no. 2, pp. 115-128, Dec. 2007.
43. B. N. Mills and T. Znati, "Increasing DHT data security by scattering data," in Proc. 17th Int. Conf. Comput. Commun. Networks (ICCCN '08) (Invited Paper), St. Thomas, Virgin Islands, 2008, pp. 430-434.
44. R. Geambasu, T. Kohno, A. A. Levy, and H. M. Levy, "Vanish: Increasing data privacy with self-destructing data," in Proc. 18th Usenix Security Symp., Montreal, Canada, 2009.
45. S. Wolchok et al., "Defeating Vanish with low-cost Sybil attacks against large DHTs," in Proc. 17th Annu. Network Distrib. Syst. Security Symp., 2010.
46. EPCglobal, "EPC tag data standards," ver. 1.5, Aug. 2010. [Online]. Available: http://www.gs1.org/gsmp/kc/epcglobal/tds/
47. D. Karger, E. Lehman, T. Leighton, R. Panigrahy, M. Levine, and D. Lewin, "Consistent hashing and random trees," in Proc. 29th Annu. ACM Symp. Theory Comput. (STOC'97), El Paso, TX, 1997, pp. 654-663.
48. A. Shamir, "How to share a secret," Commun. ACM, vol. 22, no. 11, pp. 612-613, 1979.
49. W. Stallings, Cryptography and Network Security: Principles and Practice, 4th ed. Englewood Cliffs, NJ: Prentice-Hall, 2006.
50. B.A. Forouzan, Cryptography and Network Security. New York: McGraw Hill, 2007, vol. 721.
51. D. Eastlake and P. Jones, "US secure hash algorithm 1 (SHA1)," RFC 3174, 2001. [Online]. Available: http://www.ietf.org/rfc/rfc3174.txt
52. G. C. Dorner, J. M. Ferrard, and H. Lemberg, "Visual Mathematics," in Illustrated by the TI-92 and the TI-89. New York: Springer, 2000.
53. J. Buchmann, Einführung in die Kryptographie, 4th ed. New York: Springer, 2008.
54. SSSS Website, [Online]. Available: http://point-at-infinity.org/ssss/
55. N. Herrmann, Höhere Mathematik Für Ingenieure, Physiker und Mathematiker. Munich, Germany: Oldenbourg Wissenschaftsverlag, 2007.
56. Image Processing and Communications Challenges 2, ser. Advances in Intelligent and Soft Computing, R. S. Choras, Ed. Berlin-Heidelberg: Springer, 2010.
57. T. Rabin and M. Ben-Or, "Verifiable secret sharing and multiparty protocols with honest majority," in Proc. 21st Annu. ACM Symp. Theory Comput., 1989, pp. 73-85.
58. J. R. Douceur, "The Sybil attack," in Proc. 1st Int. Workshop on Peer-to-Peer Syst. (IPTPS '01), Berlin, Germany, 2002, vol. 2429, pp. 251-260, LNCS, Springer.
59. G. Danezis, C. Lesniewski-Laas, M. F. Kaashoek, and R. Anderson, "Sybil-resistant DHT routing," in Proc. ESORICS 2005, 2005, vol. 3679, pp. 305-318, sers. LNCS, Springer.
60. G. Urdaneta, G. Pierre, and M. V. Steen, "A survey of DHT security techniques," ACM Comput. Surveys, vol. 43, pp. 8:1-8:49, 2011.
61. T. Dierks and E. Rescorla, "The transport layer security (TLS) protocol," RFC 4346, 2006. [Online]. Available: http://www.ietf.org/rfc/ rfc4346.txt
62. N. Spring, L. Peterson, A. Bavier, and V. Pai, "Using PlanetLab for network research: Myths, realities, and best practices," SIGOPS Oper. Syst. Rev., vol. 40, no. 1, pp. 17-24, 2006.
63. F. Dabek, J. Li, E. Sit, J. Robertson, M. Kaashoek, and R. Morris, "Designing a DHT for low latency and high throughput," in Proc. 1st USENIX Symp. Networked Syst. Design Implementation (NSDI'04), 2004, pp. 85-98.