A Lightweight RFID Mutual Authentication Protocol with PUF

Abstract

Radio frequency identification is one of the key techniques for Internet of Things, which has been widely adopted in many applications for identification. However, there exist various security and privacy issues in radio frequency identification (RFID) systems. Particularly, one of the most serious threats is to clone tags for the goal of counterfeiting goods, which causes great loss and danger to customers. To solve these issues, lots of authentication protocols are proposed based on physical unclonable functions that can ensure an anti-counterfeiting feature. However, most of the existing schemes require secret parameters to be stored in tags, which are vulnerable to physical attacks that can further lead to the breach of forward secrecy. Furthermore, as far as we know, none of the existing schemes are able to solve the security and privacy problems with good scalability. Since many existing schemes rely on exhaustive searches of the backend server to validate a tag and they are not scalable for applications with a large scale database. Hence, in this paper, we propose a lightweight RFID mutual authentication protocol with physically unclonable functions (PUFs). The performance analysis shows that our proposed scheme can ensure security and privacy efficiently in a scalable way.

Internet of Things (IoT) Cybersecurity: Literature Review and IoT Cyber Risk Management

“…While PUFs are not cloneable, it is possible to clone a PUF key once it is extracted. Hence, a number of authentication protocols are proposed based on PUFs [11,[20][21][22]. For example, Xu et al's protocol is based on PUFs and the lightweight cryptography to carry out an efficient verification of a single tag [21].…”

Low-Complexity Nonlinear Self-Inverse Permutation for Creating Physically Clone-Resistant Identities

“…For instance, a delay PUF was deployed as a key generator in an anonymous e-money transaction protocol [27]. In [28], PUF is proposed for a RFID-authentication protocol. Here, the designed protocol requires an extra hash function and the proposed PUF needs to exchange extra data with the server to attain a stable response.…”

Design and Implementation of RFID Authentication Protocol based on Simple Symmetric Key (SSK) algorithm

“…The proposed protocols are immune to physical attacks and clone attacks since the tag stores no secrets and equips with a PUF. Besides, it supports low-cost tags and the applications with a large amount of tags and its more suitable to enhance the security and privacy for IoT applications [2].…”

“…Then readers identify the tag ID through the wireless communication between RFID tag and reader to make alert for unauthorized usage of the device or equipment. [2]. RFID system practices radio wave frequency technique to transfer signal and track any object that has a tagged with particular device.…”

“…Currently, RFID has been extensively used in many fields such as device tracking, supply chain management, Home and office logistic control and many more [6,2]. In recent years, there are many kinds of interventions such as tag tracing, impersonation, desynchronization attack and physical attacks and clone attacks targeting at RFID system.…”