A Secure Lightweight RFID Mutual Authentication Protocol Without Explicit Challenge-Response Pairs

Huang, Keke; Lin, Changlu; Liu, Yali

doi:10.1007/978-3-031-17081-2_6

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

2022

DOI: 10.1007/978-3-031-17081-2_6

|View full text |Cite

A Secure Lightweight RFID Mutual Authentication Protocol Without Explicit Challenge-Response Pairs

Keke Huang

Changlu Lin

Yali Liu

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2022

Publication Types

Select...

Article1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

(1 citation statement)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They demonstrated that the Slender PUF protocol could be resilient against known ML modeling attacks if carefully designed. Huang et al [28] proposed a lightweight mutual authentication protocol based on configurable tristate PUFs that can resist ML modeling attacks. However, these protocol-level approaches are not scalable, meaning that they are unsuitable for most IoT environments.…”

mentioning

confidence: 99%

Security of a PUF Mutual Authentication and Session Key Establishment Protocol for IoT Devices

Sun

Tian

2022

Mathematics

View full text Add to dashboard Cite

Recently, Zerrouki et al. proposed a Physically Unclonable Function (PUF) mutual authentication and session key establishment protocol for IoT (Internet of Things) devices. Zerrouki et al.’s PUF protocol is interesting because it does not require the storage of any sensitive information on the local memory of the IoT device, which avoids many potential attacks, especially side-channel attacks. Therefore, we carefully investigate the security of Zerrouki et al.’s PUF protocol under the leakage assumption of the session key. Our findings are in the following. First, Zerrouki et al.’s PUF protocol fails to provide known-key security. That is, the adversary can impersonate not only the server to cheat the IoT device but also the IoT device to cheat the server when the adversary corrupts a session key between the server and the IoT device. Second, Zerrouki et al.’s PUF protocol suffers from the key-compromise impersonation attack. It means that the adversary can impersonate the IoT device to cheat the server if the adversary discloses the server’s secret key. Third, Zerrouki et al.’s PUF protocol does not support backward secrecy for the session key. That is, the adversary is always able to derive the session key from the previous session key. We also suggest the root cause of these security flaws in Zerrouki et al.’s PUF protocol. As a case study, our cryptanalysis results would promote a security model for more robust and efficient PUF authentication and session key establishment protocol. Moreover, our idea of the key compromise can be used to evaluate other novel PUF protocol designs.

show abstract

mentioning

confidence: 99%

Security of a PUF Mutual Authentication and Session Key Establishment Protocol for IoT Devices

Sun

Tian

2022

Mathematics

View full text Add to dashboard Cite

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

A Secure Lightweight RFID Mutual Authentication Protocol Without Explicit Challenge-Response Pairs

Cited by 1 publication

References 26 publications

Security of a PUF Mutual Authentication and Session Key Establishment Protocol for IoT Devices

Security of a PUF Mutual Authentication and Session Key Establishment Protocol for IoT Devices

Contact Info

Product

Resources

About