A new two-message authentication protocol for RFID sensor networks

ABSTRACT

Radio Frequency Identification (RFID) technology is a method to remotely store and retrieve data using a small microchip called the RFID tag. This makes identification, authentication of objects and people possible without any physical contact between a tag and its reader. First developed in 1940 by the British army, RFID have developed considerably thanks to the fast development of radio techniques during the past few years. As of today, RFID have been applied to a wide range of problems: supply chain management to replace barcode, access control in restricted areas such as laboratories and airports, asset tracking and locating medical staff or certain patients to ensure an efficient response in medical emergencies. As a result, billions of tags will be deployed within the next years. However, RFID development is threatened by privacy and security risks. The limited capabilities of RFID tags make privacy and security enforcement a special challenge. This article presents a new method to ensure a mutual authentication between tags and readers using only two messages and without the use of complex cryptography.

REFERENCES

• 1: AES and SHAl Cryptoprocessor Cores. Web pages. Cast Inc. http://www.cast-inc.com.
• 2: Auto-ID Center. Web pages. http://www.autoid.org.
• 3: John Ayaode, Osamu Takizawa, and Koji Nakao. A Prototype System of the RFID Authentification Processing Framework. In Normal Revell, Luminita Vasiu, Keith Harrison, and Gavan Duffy, editors, International Workshop in Wireless Security Technologies, pages 34--38, London, UK, April 2005. Wireless IT Research Center.
• 4: David L. Brock. The Electronic Product Code (EPC), A Naming Scheme for Physical Objects. White paper, January 2001.
• 5: EPC tag. Web pages. http://www.epcglobalinc.org.
• 6: Lukas Grunwald and Boris Wolf. RFDump. Web pages. http://www.rf-dump.org.
• 7: ISO/IEC, Geneva. Proximity Card, 2000. Part 1 to 4.
• 8: Ari Juels. Minimalist Cryptography for Low-Cost RFID Tags. In 4th International Conference on Security in Communicataon Networks, volume 3352 of Lecture Notes zn Computer Sczence, pages 149--164, Amalfi, Italy, September 2004. Springer-Verlag.
• 9: Shingo Kinoshita, Fumitaka Hoshino, Tomoyuki Komuro, Akiko Fujimura, and Miyako Ohkubo. Non Identifiable Anonymous ID Scheme for RFID Privacy Protection. In Japanese. See English description as part of http://www.autoidlabs.com/whitepaper/KEI-AUTOID-WH004.pdf, 2003
• 10: Miyako Ohkubo, Koutarou Suzuki, and Shingo, Kinoshita. Cryptographic Approach to Privacy-Friendly Tags. In RFID Privacy Workshop, Cambridge, MA, November 2003. MIT.
• 11: TK552 Atmel Data Sheet. Web pages. Atmel Corporation. http://www.atmel.com/atmel/products/prod227.htm.
• 12: Stephen A. Weis, Sanjay E. Sarma, Ronald L. Rivest, and Daniel W. Engels. Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems. In Dieter Hutter, Günter Müller, Werner Stephan, and Markus Ullmann, editors, First International Conference on Security in Pervasive Computing, volume 2802 of Lecture Notes in Computer Science, pages 201--212, Boppard, Germany, March 2003. Deutsche Forschungszentrum für Künstliche Intelligenz, Springer-Verlag.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication
      C.2.2 Network Protocols
          Subjects: Routing protocols

General Terms:
Algorithms, Security