A Simple Privacy Protecting Scheme Enabling Delegation and Ownership Transfer for RFID Tags

Abstract

<p class="MsoNormal" style="text-align: left; margin: 0cm 0cm 0pt;" align="left"><span class="text"><span style="font-family: ";Arial";,";sans-serif";; font-size: 9pt;">RFID (Radio frequency identification) technology raises many privacy concerns among which the potential tracking of an RFID tag bearer and the eventuality of an illegitimate reading device (reader) collecting information about him. To solve these issues, many RFID privacy protecting protocols assume that readers have continuous connectivity with a centralised on-line database in charge of the identification of a certain amount of tags. However such centralised models can raise scalability and latency problems. Moreover, they are not suitable in applications where connectivity is intermittent. As RFID tags may often change hands, it is also necessary to guarantee the privacy of a new tag owner. In this paper, we introduce a privacy protecting scheme based on pseudonyms that allows an online database to delegate temporarily and in a secure manner the capability to identify tags to selected readers. A reader which receives delegation for a given tag can identify this tag without referring to the on-line database, thus solving possible intermittent connectivity issues and making tag identification more scalable. Our protocol also manages tags ownership transfer without threatening the new owner’s privacy.</span></span><span style="font-family: ";Arial";,";sans-serif";; font-size: 9pt;"></span></p&gt

Secure ownership transfer for multi-tag multi-owner passive RFID environment with individual-owner-privacy

“…Secure ownership transfer protocols can be broadly classified as schemes that rely on a trusted intermediary (trusted third party (TTP)) [22,23] and schemes that do not [21,24]. In the former, ownership transfer is achieved based on shared secrets between the TTP, the servers and the tag.…”

“…Fouldagar and Afifi [24] propose two privacy preserving schemes for ownership transfer based on hash functions and symmetric key cryptographic functions. As noted earlier the use of hash function or keyed encryption functions is not in compliance with EPC C1G2 standard.…”

Security flaws in a recent RFID delegation protocol

“…While a considerable body of research has been focused on securing tag transactions, only a few consider the concept of delegation like in [15][16][17][18][19]. In this paper, we firstly describe an architecture for a basic RFID delegation protocol and then analyze the security of a recent RFID delegation protocol, which we call SMD (Song Mitchell Delegation) due to name of the authors [15] under this model.…”

Secure Ownership and Ownership Transfer in RFID Systems

“…Solutions based on symmetric encryption have also been proposed by Fouladgar and Afifi [15] and Koralalage et al [16]. Finally, one of the most recent protocols in this area is due to Dimitriou [17].…”