Protecting RFID communications in supply chains

ABSTRACT

Recent years have seen much growing attention on RFID security. However, little work has been performed to address the security issues in the context of supply chain management, which is exactly the major field for RFID applications. Existing RFID solutions cannot be applied directly in this field because of a set of special RFID security requirements to be addressed for supply chain management. The major contribution of this paper is to identify the unique set of security requirements in supply chains and to propose a practical design of RFID communication protocols that satisfy the security requirements.

REFERENCES

• 1: Giuseppe Ateniese , Jan Camenisch , Breno de Medeiros, Untraceable RFID tags via insubvertible encryption, Proceedings of the 12th ACM conference on Computer and communications security, November 07-11, 2005, Alexandria, VA, USA [doi>10.1145/1102120.1102134]
• 2: G. Avoine and P. Oechslin. Rfid traceability: A multilayer problem. In Financial Cryptography, pages 125--140, 2005.
• 3: Mihir Bellare , Ran Canetti , Hugo Krawczyk, Keying Hash Functions for Message Authentication, Proceedings of the 16th Annual International Cryptology Conference on Advances in Cryptology, p.1-15, August 18-22, 1996
• 4: S. C. Bono, M. Green, A. Stubblefield, A. Juels, A. D. Rubin, and M. Szydlo. Security analysis of a cryptographically-enabled RFID device. In USENIX Security Symposium, pages 1--16, 2005.
• 5: K. P. Fishkin and S. Roy. Enhancing RFID privacy via antenna energy analysis. tech. memo IRS-TR-03-012, Intel Research Seattle, 2003.
• 6: S. Garfinkel. An RFID bill of rights. Technology Review, page 35, October 2002.
• 7: Simson L. Garfinkel , Ari Juels , Ravi Pappu, RFID Privacy: An Overview of Problems and Proposed Solutions, IEEE Security and Privacy, v.3 n.3, p.34-43, May 2005 [doi>10.1109/MSP.2005.78]
• 8: P. Golle, M. Jakobsson, A. Juels, and P. F. Syverson. Universal re-encryption for mixnets. In CT-RSA, pages 163--178, 2004.
• 9: A. Juels. Minimalist cryptography for low-cost RFID tags. In SCN, pages 149--164, 2004.
• 10: A. Juels and R. Pappu. Squealing Euros: Privacy protection in RFID-enabled banknotes. In Financial Cryptography, pages 103--121, 2003.
• 11: Ari Juels , Ronald L. Rivest , Michael Szydlo, The blocker tag: selective blocking of RFID tags for consumer privacy, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA [doi>10.1145/948109.948126]
• 12: A. Juels, P. Syverson, and D. Bailey. High-power proxies for enhancing rfid privacy and utility. In Privacy Enhancing Technologies, pages 210--226, 2005.
• 13: E. Liu and A. Kumar. Leveraging information sharing to increase supply chain configurability. In Twenty-Fourth International Conference on Information Systems, pages 523--537, 2003.
• 14: Daniel Menascé, Security Performance, IEEE Internet Computing, v.7 n.3, p.84-87, May 2003 [doi>10.1109/MIC.2003.1200305]
• 15: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 16: D. Molnar, A. Soppera, and D. Wagner. A scalable, delegatable pseudonym protocol enabling ownership transfer of RFID tags. In Selected Areas in Cryptography, pages 276--290, 2005.
• 17: David Molnar , David Wagner, Privacy and security in library RFID: issues, practices, and architectures, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA [doi>10.1145/1030083.1030112]
• 18: Miyako Ohkubo , Koutarou Suzuki , Shingo Kinoshita, RFID privacy issues and technical challenges, Communications of the ACM, v.48 n.9, September 2005 [doi>10.1145/1081992.1082022]
• 19: M. R. Rieback, B. Crispo, and A. S. Tanenbaum. Rfid guardian: A battery-powered mobile device for rfid privacy management. In ACISP, pages 184--194, 2005.
• 20: S. Sarma, S. Weis, and D. Engels. White paper: RFID systems, security and privacy implications. Technical Report MIT-AUTOID-WH-014, Auto-ID Center, MIT, November 2002.
• 21: Steve H. Weingart, Physical Security Devices for Computer Subsystems: A Survey of Attacks and Defences, Proceedings of the Second International Workshop on Cryptographic Hardware and Embedded Systems, p.302-317, August 17-18, 2000
• 22: S. A. Weis, S. E. Sarma, R. L. Rivest, and D. W. Engels. Security and privacy aspects of low-cost radio frequency identification systems. In SPC, pages 201--212, 2003.
• 23: Li Xiao , Xiaodong Zhang , Stefan A. Kubricht, Improving memory performance of sorting algorithms, Journal of Experimental Algorithmics (JEA), 5, p.3-es, 2000 [doi>10.1145/351827.384245]
• 24: X. Zhang and B. King. Integrity improvements to an rfid privacy protection protocol for anti-counterfeiting. In ISC, pages 474--481, 2005.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
      H.4.2 Types of Systems
          Subjects: Logistics

Keywords:
RFID, information security, supply chain