An Analysis of RFID Authentication Schemes for Internet of Things in Healthcare Environment Using Elliptic Curve Cryptography

IEEE Internet of Things Journal

Volumn 2, Issue 1, 2015, Pages 72-83

  He, Debiao ^a   Zeadally, Sherali ^b  

^a WUHAN UNIVERSITY   (China)

^b UNIVERSITY OF KENTUCKY   (United States)

Author keywords

Authentication; Elliptic curve cryptography; Internet of Things; Performance; Radio Frequency indentification; Security

Indexed keywords

AUTHENTICATION; CRYPTOGRAPHY; GEOMETRY; HEALTH CARE; INFORMATION MANAGEMENT; INTERNET; PUBLIC KEY CRYPTOGRAPHY; RADIO FREQUENCY IDENTIFICATION (RFID); RADIO WAVES; RISK MANAGEMENT;

ELLIPTIC CURVE CRYPTOGRAPHY; ELLIPTIC CURVE CRYPTOGRAPHY(ECC); INDENTIFICATION; INFORMATION AND COMMUNICATION TECHNOLOGIES; INTERNET OF THINGS (IOT); PERFORMANCE; RADIO FREQUENCY IDENTIFICATION TECHNOLOGY; SECURITY;

INTERNET OF THINGS;

EID: 84962562081     PISSN: None     EISSN: 23274662     Source Type: Journal    
DOI: 10.1109/JIOT.2014.2360121     Document Type: Article

References (68)

1. UN, "World Population Aging 2013, " 2013, pp. 8-10.
2. R. Weinstein, "RFID: A technical overview and its application to the enterprise, " IEEE IT Prof., vol. 7, no. 3, pp. 27-33, May/Jun. 2005.
3. L. Atzori, A. Iera, and G. Morabito, "The Internet of Things: A survey, " Comput. Netw., vol. 54, no. 15, pp. 2787-2805, 2010.
4. P. Najera, J. Lopez, and R. Roman, "Real-Time location and inpatient care systems based on passive RFID, " J. Netw. Comput. Appl., vol. 34, no. 3, pp. 980-989, 2011.
5. D. Ranasinghe, Q. Sheng, and S. Zeadally, Unique Radio Innovation for the 21st Century: Building Scalable and Global RFID Networks. New York, NY, USA: Springer, 2010.
6. Y. Hung, "The study of adopting RFID technology in medical institute with the perspectives of cost benefit, " Ph.D. dissertation, Dept. Comput. Sci. Inform. Eng., Fu Jen Catholic Univ., New Taipei City, Taiwan, 2011.
7. J. Katz and R. Rice, "Public views of mobile medical devices and services: A US national survey of consumer sentiments towards RFID healthcare technology, " Int. J. Med. Informat., vol. 78, no. 2, pp. 104-114, 2009.
8. J. Leu, "The benefit analysis of RFID use in the health management center-The experience in Shin Kong Wu Ho-Su Memorial Hospital, " M.A.Thesis, College of Management, National Taiwan Univ., Taipei City, Taiwan, 2010.
9. W. Yao, C. Chu, and Z. Li, "The adoption and implementation of RFID technologies in healthcare: A literature review, " J. Med. Syst., vol. 36, no. 6, pp. 3507-3525, 2012.
10. H. Chien and C. Chen, "Mutual authentication protocol for RFID conforming to EPC class 1 generation 2 standards, " Comput. Stand. Interfaces, vol. 29, no. 2, pp. 254-259, 2007.
11. D. Duc, J. Park, H. Lee, and K. Kim, "Enhancing security of EPCglobal Gen-2 RFID tag against traceability and cloning, " in Proc. Symp. Cryptogr. Inf. Secur., 2006, pp. 97-107.
12. A. Juels, "Strengthening EPC tag against cloning, " in Proc. ACM Workshop Wireless Secur. (WiSe'05), 2005, pp. 67-76.
13. T. Yeh, Y. Wanga, T. Kuo, and S. Wang, "Securing RFID systems conforming to EPC class 1 generation 2 standard, " Exp. Syst. Appl., vol. 37, no. 12, pp. 7678-7683, 2010.
14. P. Peris-Lopez, J. Hernandez-Castro, J. Estevez-Tapiador, and A. Ribagorda, "LMAP: A real lightweight mutual authentication protocol for low-cost RFID tags, " in Proc. 2nd Workshop RFID Secur., 2006, pp. 27-36.
15. P. Peris-Lopez, J. Hernandez-Castro, J. Estevez-Tapiador, and A. Ribagorda, "EMAP: An efficient mutual authentication protocol for low-cost RFID tags, " in Proc. OTM Federated Conf. Workshop: IS Workshop, 2006, pp. 352-361.
16. S.Weis, S. Sarma, R. Rivest, and D. Engels, "Security and privacy aspects of low-cost radio frequency identification systems, " in Proc. Int. Conf. Secur. Pervasive Comput., 2003, pp. 454-469.
17. H. Chien, "Secure access control schemes for RFID systems with anonymity, " in Proc. Int. Workshop Future Mobile Ubiquitous Inf. Technol. (FMUIT '06), 2006, pp. 96-99.
18. J. Lim, H. Oh, and S. Kim, "A new hash-based RFID mutual authentication protocol providing enhanced user privacy protection, " in Proc. 4th Int. Conf. Inf. Secur. Pract. Exper. (ISPEC), 2008, pp. 278-289.
19. A. Liu and A. Bailey, "A privacy and authentication protocol for passive RFID tags, " Comput. Commun., vol. 32, no. 7, pp. 1194-1199, 2009.
20. S. Kang, D. Lee, and I. Lee, "A study on secure RFID mutual authentication scheme in pervasive, " Comput. Commun., vol. 31, no. 18, pp. 4248-4254, 2008.
21. J. Cho, S. Yeo, and S. Kim, "Securing against brute-force attack: A hash-based RFID mutual authentication protocol using a secret value, " Comput. Commun., vol. 34, no. 3, pp. 391-397, 2011.
22. A. Juels, D. Molner, and D. Wagner, "Security and privacy issues in Epassports, " in Proc. 1st Int. Conf. Secur. Privacy Emerg. Areas Commun. Netw. (Secure Comm'05), 2005, pp. 74-88.
23. M. Burmester, B. Medeiros, and R. Motta, "Robust, anonymous RFID authentication with constant key-lookup, " Cryptology ePrint Archive: Report: 207/402, 2007.
24. G. Gaubatz, J. Kaps, E. Ozturk, and B. Sunar, "State of the art in ultra-low power public key cryptography for wireless sensor networks, " in Proc. 3rd IEEE Int. Conf. Pervasive Comput. Commun. Workshops (PERCOMW'05), 2005, pp. 146-150.
25. S. Kaya, E. Savas, A. Levi, and O. Ercetin, "Public key cryptography based privacy preserving multi-context RFID infrastructure, " Ad Hoc Netw., vol. 7, no. 1, pp. 136-152, 2009.
26. F. Furbass and J. Wolkerstorfer, "ECC processor with low die size for RFID applications, " in Proc. IEEE Int. Symp. Circuits Syst. (ISCAS'07), 2007, pp. 1835-1838.
27. Y. Lee, K. Sakiyama, and L. Batina, "Elliptic-curve-based security processor for RFID, " IEEE Trans. Comput., vol. 57, no. 11, pp. 1514-1527, 2008.
28. M. Hutter, M. Feldhofer, and T. Plos, "An ECDSA processor for RFID authentication, " in Proc. Radio Freq. Identif. Secur. Privacy Issues, 2010, pp. 189-202.
29. N. Koblitz, "Elliptic curve cryptosystems, " Math. Comput., vol. 48, no. 1, pp. 203-209, 1987.
30. A. Menezes, P. Van Oorschot, and S. Vanstone, Handbook of Applied Cryptography. Boca Raton, FL, USA: CRC Press, 1996.
31. J. Wolkerstorfer, "Is elliptic-curve cryptography suitable to secure RFID tags?, " in Proc. Workshop RFID Light-Weight Cryptogr., 2005, pp. 11-20.
32. P. Tuyls and L. Batina, "RFID-Tags for anti-counterfeiting, " in Proc. Topics Cryptol.(CT-RSA), 2006, pp. 115-131.
33. C. Schnorr, "Efficient identification and signatures for smart cards, " in Proc. Adv. Cryptol.(CRYPTO'89), 1989, pp. 239-252.
34. L. Batina et al., "Public-key cryptography for RFID-Tags, " in Proc. IEEE Int. Workshop Pervasive Comput. Commun. Secur., 2007, pp. 217-222.
35. T. Okamoto, "Provably secure and practical identification schemes and corresponding signature schemes, " in Proc. Adv. Cryptol.(CRYPTO'92), 1992, pp. 31-53.
36. Y. Lee, L. Batina, and I. Verbauwhede, "EC-RAC (ECDLP based randomized access control): Provably secure RFID authentication protocol, " in Proc. IEEE Int. Conf. RFID, 2008, pp. 97-104.
37. J. Bringer, H. Chabanne, and T. Icart, "Cryptanalysis of EC-RAC, a RFID identification protocol, " in Proc. 7th Int. Conf. Cryptol. Netw. Secur. (CNS'08), 2008, pp. 149-161.
38. Y. Lee, L. Batina, and I. Verbauwhede, "Untraceable RFID authentication protocols: Revision of EC-RAC, " in Proc. IEEE Int. Conf. RFID, 2009, pp. 178-185.
39. T. Deursen and S. Radomirovic, "Untraceable RFID protocols are not trivially composable: Attacks on the revision of EC-RAC, " Cryptology ePrint Archive, Report, 2009/332, 2009.
40. M. Sandhya and T. Rangaswamy, "A combined approach of elliptic curve and zero knowledge based forward secure protocol, " World Acad. Sci. Eng. Technol., vol. 56, pp. 847-852, 2009.
41. S. Martinez, M. Valls, and C. Roig, "A secure elliptic curve-based RFID protocol, " J. Comput. Sci. Technol., vol. 24, no. 2, pp. 309-318, 2009.
42. C. Lv, H. Li, J. Ma, and B. Niu, "Vulnerability analysis of elliptic curvebased RFID protocol, " China Commun., vol. 8, no. 4, pp. 153-158, 2011.
43. Y. Lee, L. Batina, D. Singelee, and I. Verbauwhede, "Low-cost untraceable authentication protocols for RFID, " in Proc. 3rd ACM Conf. Wireless Netw. Secur. (WiSec'10), 2010, pp. 55-64.
44. J. Fan, J. Hermans, and F. Vercauteren, "On the claimed privacy of EC-RAC III, " Radio Freq. Identif. Secur. Privacy Issues, 2010, pp. 66-74.
45. Y. Lee, L. Batina, and I. Verbauwhede, "Privacy challenges in RFID systems, " in Proc. Internet Things, 2010, pp. 397-407.
46. C. Lv, H. Li, and J. Ma, "Vulnerability analysis of elliptic curve cryptography-based RFID authentication protocols, " Trans. Emerg. Telecommun. Technol., vol. 23, no. 7, pp. 618-624, 2012.
47. Y. Lee, L. Batina, and D. Singelee, "Wide-weak privacy-preserving RFID authentication protocols, " in Proc. Mobile Lightweight Wireless Syst., 2010, pp. 254-267.
48. T. Deursen and S. Radomirovic, "EC-RAC: Enriching a capacious RFID attack collection, " in Proc. Radio Freq. Identif. Secur. Privacy Issues, 2010, pp. 75-90.
49. X. Zhang, J. Li, and Y. Wu, "An ECDLP-based randomized key RFID authentication protocol, " in Proc. Int. Conf. Netw. Comput. Inf. Secur. (NCIS), 2011, pp. 146-149.
50. P. Babaheidarian, M. Delavar, and J. Mohajeri, "On the security of an ECC based RFID authentication protocol, " in Proc. 9th Int. ISC Conf. Inf. Secur. Cryptol. (ISCISC), 2012, pp. 111-114.
51. G. Godor and S. Imre, "Elliptic curve cryptography based authentication protocol for low-cost RFID tags, " in Proc. IEEE Int. Conf. RFID-Technol. Appl., 2011, pp. 386-393.
52. Y. Chen, J. Chou, and C. Lin, "A novel RFID authentication protocol based on elliptic curve cryptosystem, " Cryptology ePrint Archive, Report, 2011/381, 2011.
53. L. Batina, S. Seys, and D. Singeee, "Hierarchical ECC-based RFID authentication protocol, " in Proc. RFID Secur. Privacy, 2012, pp. 183-201.
54. Y. Liu, X. Qin, and C. Wang, "A lightweight RFID authentication protocol based on elliptic curve cryptography, " J. Comput., vol. 8, no. 11, pp. 2880-2887, 2013.
55. S. Wang, S. Liu, and D. Chen, "Analysis and construction of efficient RFID authentication protocol with backward privacy, " in Advances in Wireless Sensor Networks. Berlin, Germany: Springer-Verlag, 2014, pp. 458-466.
56. Y. Liao and C. Hsiao, "A secure ECC-based RFID authentication scheme using hybrid protocols, " in Advances in Intelligent Systems and Applications. Berlin, Germany: Springer-Verlag, 2013, pp. 1-13.
57. Y. Liao and C. Hsiao, "A secure ECC-based RFID authentication scheme integrated with ID-verifier transfer protocol, " Ad Hoc Netw., vol. 18, pp. 133-146, 2014.
58. J. Chou, "An efficient mutual authentication RFID scheme based on elliptic curve cryptography, " J. Supercomput., vol. 70, no. 1, pp. 75-94, 2014.
59. Z. Zhao, "A secure RFID authentication protocol for healthcare environments using elliptic curve cryptosystem, " J. Med. Syst., vol. 38, no. 5, 2014, doi: 10.1007/s10916-014-0046-9.
60. Z. Zhang and Q. Qi, "An efficient RFID authentication protocol to enhance patient medication safety using elliptic curve cryptography, " J. Med. Syst., vol. 38, no. 5, 2014, doi: 10.1007/s10916-014-0047-8.
61. M. Farash, "Cryptanalysis and improvement of an efficient mutual authentication RFID scheme based on elliptic curve cryptography, " J. Supercomput., 2014, doi: 10.1007/s11227-014-1272-0.
62. G. Dormale and J. Quisquater, "High-speed hardware implementations of elliptic curve cryptography: A survey, " J. Syst. Archit., vol. 53, no. 2, pp. 72-84, 2007.
63. T. Eisenbarth, S. Kumar, and C. Paar, "A survey of lightweightcryptography implementations, " IEEE Des. Test Comput., vol. 24, no. 6, pp. 522-533, 2007.
64. S. Kalra and S. Sood, "Elliptic curve cryptography: Survey and its security applications, " in Proc. Int. Conf. Adv. Comput. Artif. Intell., 2011, pp. 102-106.
65. Q. Sheng, X. Li, and S. Zeadally, "Enabling next-generation RFID applications: Solutions and challenges, " IEEE Comput., vol. 41, no. 9, pp. 21-28, Sep. 2008.
66. C. Lai et al., "CPAL: A conditional privacy-preserving authentication with access linkability for roaming service, " IEEE Internet Things J., vol. 1, no. 1, pp. 46-57, Feb. 2014.
67. S. Amendola, R. Lodato, S. Manzari, C. Occhiuzzi, and G. Marrocco, "RFID technology for IoT-based personal healthcare in smart spaces, " IEEE Internet Things J., vol. 1, no. 2, pp. 144-152, Apr. 2014.
68. S. Chatterjee, A. K. Das, and J. K. Sing, "An enhanced access control scheme in wireless sensor networks, " Ad Hoc Sens. Wireless Netw., vol. 21, no. 1-2, pp. 121-149, 2014.