Distance bounding: A practical security solution for real-time location systems

IEEE Transactions on Industrial Informatics

Volumn 9, Issue 1, 2013, Pages 16-27

  Abu Mahfouz, Adnan ^a   Hancke, Gerhard P ^b  

^a UNIVERSITY OF PRETORIA   (South Africa)

^b UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

Distance bounding; proximity authentication; real time location; RFID; secure neighbor detection (SND); secure ranging; wireless

Indexed keywords

CHALLENGE-RESPONSE PAIR; DETECTION METHODS; DISTANCE-BOUNDING; PERFORMANCE TRADE-OFF; PHYSICAL PROXIMITY; PRACTICAL IMPLEMENTATION; REAL-TIME COMMUNICATION; REAL-TIME LOCATION; RESEARCH CHALLENGES; RESOURCE REQUIREMENTS; ROUND-TRIP TIME; SECURE NEIGHBOR DETECTION (SND); SECURITY SERVICES; SECURITY SOLUTIONS; UPPER BOUND; WIRELESS ENVIRONMENT;

CRYPTOGRAPHY; INDUSTRIAL APPLICATIONS; RADIO; RADIO FREQUENCY IDENTIFICATION (RFID);

TELECOMMUNICATION NETWORKS;

EID: 84871797848     PISSN: 15513203     EISSN: None     Source Type: Journal    
DOI: 10.1109/TII.2012.2218252     Document Type: Article

References (71)

1. P. Papadimitratos, M. Poturalski, P. Schaller, P. Lafourcade, D. Basin, S. Capkun, and J. P. Hubaux, "Secure neighborhood discovery: A fundamental element for mobile ad hoc networking, " IEEE Commun. Mag., vol. 46, no. 10, pp. 132-139, Oct. 2008.
2. S. S. Saad and Z. S. Nakadv, "A standalone RFID indoor positioning system using passive tags, " IEEE Trans. Ind. Electron., vol. 58, no. 5, pp. 1961-1970, Jul. 2010.
3. G. M. Gaukler, "Item-level RFID in a retail supply chain with stock-out-based substitution, " IEEE Trans. Ind. Inf., vol. 7, no. 2, pp. 362-370, May. 2011.
4. S. Han, H.-S. Lim, and J.-M. Lee, "An efficient localization scheme for a differential-driving mobile robot based on RFID system, " IEEE Trans. Ind. Electron., vol. 54, no. 6, pp. 3362-3369, Nov. 2007.
5. M. Henseler, M. Rossberg, and G. Schaefer, "Credential management for automatic identification solutions in supply chain management, " IEEE Trans. Ind. Inf., vol. 4, no. 4, pp. 303-314, Nov. 2008.
6. A. Soylemezoglu, M. J. Zawodniok, and S. Jagannathan, "RFID-Based smart freezer, " IEEE Trans. Ind. Electron., vol. 56, no. 7, pp. 2347-2356, 2009.
7. S. Park and S. Hashimoto, "Autonomousmobile robot navigation using passive RFID in indoor environment, " IEEE Trans. Ind. Electron., vol. 56, no. 7, pp. 2366-2373, 2009.
8. G. P. Hancke, K. E. Mayes, and K. Markantonakis, "Confidence in smart token proximity: Relay attacks revisited, "Comput. Security, vol. 28, pp. 615-627, 2009.
9. D. Lui, M.-C. Lee, and D. Wu, "A node-to-node location verification method, " IEEE Trans. Ind. Electron., vol. 57, no. 5, pp. 1526-1537, May 2010.
10. S. Brands and D. Chaum, "Distance-bounding protocols, " in Advances in Cryptology-EUROCRYPT '93, T. Helleseth, Ed. Berlin, Germany: Springer, 1994, pp. 344-359.
11. G. P. Hancke and M. G. Kuhn, "An RFID distance bounding protocol, " in Proc. 1st Int. Conf. Security Privacy for Emerging Areas inCommun., Athens, Greece, 2005, pp. 67-73.
12. J. Munilla and A. Peinado, "Distance bounding protocols for RFID enhanced by using void-challenges and analysis in noisy channels, " WirelessCommun. MobileComputing, vol. 8, pp. 1227-1232, 2008.
13. C. Tang, D. O. Wu, T. Syst, and L. Oswego, "Distance-bounding based defense against relay attacks in wireless networks, " IEEE Trans. WirelessCommun., vol. 6, no. 11, pp. 4071-4078, Nov. 2007. (Pubitemid 350121756)
14. L. Hu and D. Evans, "Using directional antennas to prevent wormhole attacks, " in Proc. 11th Network Distrib. Syst. Security Symp., San Diego, CA, 2004, pp. 131-141.
15. Z. Li, W. Trappe, Y. Zhang, and B. Nath, "Robust statistical methods for securing wireless localization in sensor networks, " in Proc. 4th IEEE In. Symp. Inf. Process. Sensor Networks, Los Angeles, CA, 2005, pp. 91-98. (Pubitemid 43841219)
16. R. Maheshwari, J. Gao, and S. R. Das, "Detecting wormhole attacks in wireless networks using connectivity information, " in Proc. 26th IEEE Int. Conf.Comput.Commun., Anchorage, AL, 2007, pp. 107-115. (Pubitemid 47334221)
17. K. B. Rasmussen and S. Capkun, "Implications of radio fingerprinting on the security of sensor networks, " in Proc. 3rd IEEE Int. Conf. Security PrivacyCommun. Networks, Nice, France, 2007, pp. 331-340.
18. A. Boukerche, H. Oliveira, E. F. Nakamura, and A. A. Loureiro, "Secure localization algorithms for wireless sensor networks, " IEEE Commun. Mag., vol. 46, pp. 96-101, 2008. (Pubitemid 351593414)
19. S. Capkun and J. P. Hubaux, "Secure positioning inwireless networks, " IEEE J. Sel. AreasCommun., vol. 24, no. 2, pp. 221-232, Feb. 2006.
20. G. Avoine, M. A. Bingol, S. Kardas, C. Lauradoux, and B. Martin, "A framework for analyzing RFID distance bounding protocols, " J.Comput. Security, vol. 19, no. 2, pp. 289-317, Apr. 2011.
21. G. P. Hancke, "Security of proximity identification systems" Ph. D. dissertation,Comput. Lab., Univ. of Cambridge, Cambridge, U. K., Feb. 2008 [Online]. Available: http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-752.pdf
22. Y. Desmedt, C. Goutier, and S. Bengio, "Special uses and abuses of the fiat-shamir passport protocol, " in Advances in Cryptology-CRYPTO '87, C. Pomerance, Ed. Berlin, Germany: Springer, 1988, pp. 21-39.
23. Y. C. Hu, A. Perrig, andD. B. Johnson, "Rushing attacks and defense in wireless ad hoc network routing protocols, " in Pro. 2ndACMWorkshop Wireless Security, San Diego, CA, 2003, pp. 30-40.
24. Y. Desmedt, "Major security problems with the " unforgeable" (feige)-Fiat-Shamir proofs of identity and how to overcome them, " in Proc. 6th Worldwide CongressComput.Commun. Security Protection, 1988, pp. 147-159.
25. L. Bussard and W. Bagga, "Distance-bounding proof of knowledge to avoid real-time attacks, " in Security and Privacy in the Age of UbiquitousComputing, R. Sasaki, S. Qing, E. Okamoto, and H. Yoshiura, Eds. Berlin, Germany: Springer, 2005, pp. 223-238.
26. J. Hightower and G. Borriello, "Location systems for ubiquitouscomputing, " IEEE Computer, vol. 34, pp. 57-66, 2001.
27. J. Clulow, G. P. Hancke, M. G. Kuhn, and T. Moore, "So near and yet so far: Distance-bounding attacks in wireless networks, " in Security and Privacy in Ad-Hoc and Sensor Networks, L. Buttyan, V. Gligor, and D. Westhoff, Eds. Berlin, Germany: Springer, 2006, pp. 83-97.
28. B. Waters and E. Felten, "Secure, Private Proofs of Location, " Princeton Univ., Tech. Rep. TR-667-03, 2003.
29. J. Reid, J. M. G. Nieto, T. Tang, and B. Senadji, "Detecting relay attacks with timing-based protocols, " in Proc. 2nd ACM Symp. Inf.,Comput.Commun. Security, Singapore, 2007, pp. 204-213. (Pubitemid 47479240)
30. Y. J. Tu and S. Piramuthu, "RFID distance bounding protocols, " in Proc. 1st Int. EURASIP Workshop RFID Technology, Vienna, Austria, 2007.
31. C. H. Kim and G. Avoine, "RFID distance bounding protocol with mixed challenges to prevent relay attacks, " in Cryptology and Network Security-CANS '09, J. A. Garay, A. Miyaji, and A. Otsuka, Eds. Berlin, Germany: Springer, 2009, pp. 119-133.
32. C. H. Kim, G. Avoine, F. Koeune, F. X. Standaert, and O. Pereira, "The swiss-knife RFID distance bounding protocol, " in Information Security and Cryptology-ICISC 2008, P. J. Lee and J. H. Cheon, Eds. Berlin, Germany: Springer, 2009, pp. 98-115.
33. C. Meadows, P. Syverson, and L. W. Chang, "Towards more efficient distance bounding protocols for use in sensor networks, " in Proc. 2nd Int. Conf. Security PrivacyCommun. Networks, Baltimore, MD, 2006, pp. 1-5.
34. G. Avoine, C. Floerkemeier, and B. Martin, "RFID distance bounding multistate enhancement, " in Progress in Cryptology-INDOCRYPT '09, B. Roy and N. Sendrier, Eds. Berlin, Germany: Springer, 2009, pp. 290-307.
35. G. Avoine and A. Tchamkerten, "An efficient distance bounding RFID authentication protocol: Balancing false-acceptance rate and memory requirement, " in Information Security, P. Samarati, M. Yung, F. Martinelli, and C. A. Ardagna, Eds. Berlin, Germany: Springer, 2009, pp. 250-261.
36. P. Peris-Lopez, J. C. Hernandez-Castro, J. M. E. Tapiador, and J. C. A. van der Lubbe, "Shedding Some Light on RFID Distance Bounding Protocols and Terrorist Attacks, " Jun. 20, 2010. [Online]. Available: http://arxiv.org/PS-cache/arxiv/pdf/0906/0906. 4618v2.pdf
37. W. Granzer, F. Praus, andW. Kastner, "Security in building automation systems, " IEEE Trans. Ind. Electron., vol. 57, no. 11, pp. 3622-3630, Nov. 2011.
38. M. Cheminod, A. Pironti, and R. Sisto, "Formal vulnerability analysis of a security system for remote fieldbus access, " IEEE Trans. Ind. Inf., vol. 7, no. 1, pp. 30-40, Feb. 2011.
39. B. Zhao, H. Aydin, and D. Zhu, "On maximizing reliability of real-time embedded applications under hard energy constraint, " IEEE Trans. Ind. Inf., vol. 6, no. 3, pp. 316-328, Aug. 2010.
40. Y. Yang, Y. Xu, X. Li, and C. Chen, "A loss inference algorithm for wireless sensor networks to improve data reliability of digital ecosystems, " IEEE Trans. Ind. Electron., vol. 58, no. 6, pp. 2126-2137, Jun. 2011.
41. Y. Wu, G. Buttazzo, E. Bini, and A. Cervin, "Parameter selection for real-time controllers in resource-constrained systems, " IEEE Trans. Ind. Inf., vol. 6, no. 4, pp. 610-620, Nov. 2010.
42. Y.-J. Huang, C.-C. Yuan, M.-K. Chen, W.-C. Lin, and H.-C. Teng, "Hardware implementation of RFID mutual authentication protocol, " IEEE Trans. Ind. Electron., vol. 57, no. 5, pp. 1573-1582, May 2010.
43. J. Ploennigs, V. Vasyutynskyy, and K. Kabitzsch, "Comparative study of energy-efficient sampling approaches for wireless control networks, " IEEE Trans. Ind. Inf., vol. 6, no. 3, pp. 416-424, Aug. 2010.
44. J.-W. Lee, B.-S. Choi, and J.-J. Lee, "Energy-efficient coverage of wireless sensor networks using ant colony optimization with three types of pheromones, " IEEE Trans. Ind. Inf., vol. 7, no. 3, pp. 419-427, Aug. 2011.
45. M. Cereia, I. Cibrario-Bertolotti, and S. Scanzio, "Performance of a real-time EtherCAT master under Linux, " IEEE Trans. Ind. Inf., vol. 7, no. 4, pp. 679-687, Nov. 2011.
46. Y.-S. Chen, C.-Y. Yang, and T.-W. Kuo, "Energy-efficient task synchronization for real-time systems, " IEEE Trans. Ind. Inf., vol. 6, no. 3, pp. 287-301, Aug. 2010.
47. E. Barker and A. Roginsky, "Recommendation for the transitioning of cryptographic algorithms and key sizes, " CiteSeerx. USA, Jan. 2010. [Online]. Available: http://csrc. nist. gov/publications/drafts/800-131/draft- 800-131-transition-paper.pdf
48. G. P. Hancke and M. G. Kuhn, "Attacks on time-of-flight distance bounding channels, " in Proc. 1st ACM Conf. Wireless Network Security, Alexandria, VA, 2008, pp. 194-202.
49. D. Singelée and B. Preneel, "Distance bounding in noisy environments, " in Security and Privacy in Ad-Hoc and Sensor Networks, F. Stajano, C. Meadows, S. Capkun, and T. Moore, Eds. Berlin, Germany: Springer, 2007, pp. 101-115.
50. J. Munilla and A. Peinado, "Attacks on a distance bounding protocol, "ComputerCommun., vol. 33, pp. 884-889, 2010.
51. G. P. Hancke, "RFID and Contactless Technology, " in Smart Cards, Tokens, Security and Applications, Mayes and Markantonakis, Eds. Berlin, Germany: Springer, 2008.
52. Z. Moghadam, I. Rostami, A. S. Tanhatalab, andM. R. Ferdowsi, "Designing a random number generator with novel parallel LFSR substructure for key stream ciphers, " in Proc. Int. Conf.Comput. Design Applic., Jun. 2010, pp. 598-601.
53. G. P. Hancke, "Design of a secure distance-bounding channel for RFID, " J. NetworkComput. Applic., vol. 34, pp. 877-887, 2011.
54. S. Drimer and S. J. Murdoch, "Keep your enemies close: Distance bounding against Smartcard relay attacks, " in Proc. 16th USENIX Security Symp., Boston, MA, 2007, pp. 87-102.
55. N. O. Tippenhauer and S. Capkun, "ID-based secure distance bounding and localization, " in Proc.Computer Security-ESORICS, 2009, pp. 621-636.
56. M. Flury, M. Poturalski, P. Papadimitratos, J. P. Hubaux, and J. Y. Le Boudec, "Effectiveness of distance-decreasing attacks against impulse radio ranging, " in Proc. 3rd ACM Conf. Wireless Network Security, Hoboken, NJ, 2010, pp. 117-128.
57. I. D'Souza, M. Wei, and C. Notobartolo, "Real-time location systems for hospital emergency response, " IEEE IT Professional, vol. 13, no. 2, pp. 37-43, April 2011.
58. N. O. Tippenhauer, K. B. Rasmussen, C. Pöpper, and S. Capkun, "Attacks on public WLAN-based positioning systems, " in Proc. ACM/Usenix Conf. Mobile Syst., Applic. and Services (MobiSys), Jun. 2009, pp. 29-40.
59. A. Francillon, B. Danev, and S. Capkun, "Relay attacks on passive keyless entry and start systems in modern cars, " in Proc. Network Distrib. Syst. Security Symp., Feb. 2011.
60. L. Francis, G. P. Hancke, K. E. Mayes, and K. Markantonakis, "Practical relay attack on contactless transactions by using NFC mobile phones, " Cryptology ePrint Archive, Report 2011/618, Nov. 2011.
61. Y. Zang and L. Wu, "Application of RFID and RTLS technology in supply chain enterprise, " in Proc. WirelessCommun. Networking MobileComputing, Sep. 2010, pp. 1-4.
62. M. Poturalski, M. Flury, P. Papadimitratos, J.-P. Hubaux, and J.-Y. Le Boudec, "Distance bounding with IEEE 802. 15. 4a: Attacks and countermeasures, " IEEE Trans. WirelessCommun., vol. 10, no. 4, pp. 1334-1344, Apr. 2011.
63. K. B. Rasmussen and S. Capkun, "Realization of RF distance bounding, " in Proc. USENIX Security Symp., 2010.
64. M. Kuhn, H. Luecken, and N. O. Tippenhauer, "UWB impulse radio based distance bounding, " in Proc. Workshop Positioning, NavigationCommun., 2010.
65. S. Apkun, L. Buttyán, and J. P. Hubaux, "SECTOR: Secure tracking of node encounters in multi-hop wireless networks, " in Proc. 1st ACM Workshop Security of Ad-Hoc and Sensor Network, Fairfax, VA, 2003, pp. 21-32.
66. G. P. Hancke, "Practical eavesdropping and skimming attacks on high-frequency RFID tokens, " J.Comput. Security, vol. 19, no. 2, pp. 259-288, January 2011.
67. A. M. Abu-Mahfouz and G. P. Hancke, "An efficient distributed localization algorithm for wireless sensor networks: Based on smart reference-selection method, " Intersci. J. Sensor Networks, 2012.
68. S. Lee, B. Kim, H. Kim, R. Ha, and H. Cha, "Inertial sensor-based indoor pedestrian localization with minimum 802. 15. 4a configuration, " IEEE Trans. Ind. Inf., vol. 7, no. 3, pp. 455-466, Aug. 2011.
69. S. Ivanov and E. Nett, "Localization-based radio model calibration for fault-tolerant wireless mesh networks, " IEEE Trans. Ind. Inf., vol. PP, no. 99, 2012.
70. B. Wang and M. MaAn, "Server independent authentication scheme for RFID systems, " IEEE Trans. Ind. Inf., vol. PP, no. 99, 2012.
71. T. Beth and Y. Desmedt, "Identification tokens-or: Solving the chess grandmaster problem, " in Proc. Adv. Cryptol., Aug. 1990, pp. 169-177.