Cryptanalysis and Enhancement of a Secure Group Ownership Transfer Protocol for RFID Tags

Jannati, Hoda; Falahati, Abolfazl

doi:10.1007/978-3-642-33448-1_26

Cited by 10 publications

(9 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In our opinion, passive tags cannot be relied upon to perform this critical function due to their limitations. Zuo [44] proposed a group ownership transfer protocol but it is found vulnerable to desynchronization attack [45]. Chen and Chien [46] proposed an ownership transfer scheme for mobile RFIDs but it is found vulnerable to server, reader and tag impersonation attacks and traceability attack [47].…”

Section: Related Workmentioning

confidence: 99%

Secure ownership transfer for multi-tag multi-owner passive RFID environment with individual-owner-privacy

Sundaresan

Doss

Zhou

et al. 2015

Computer Communications

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

Secure ownership transfer for multi-tag multi-owner passive RFID environment with individual-owner-privacy

Sundaresan

Doss

Zhou

et al. 2015

Computer Communications

View full text Add to dashboard Cite

“…Jannati and Falahati [26] proved that Zuo's protocol [22] is vulnerable to the desynchronization attack, which causes a tag to lose synchronization with the new owner, resulting in DoS. In Sections 3.1-3.7, we analyze our proposed protocol, which prevents all the aforementioned threats.…”

Section: Security Analysismentioning

confidence: 99%

Novel Designated Ownership Transfer with Grouping Proof

et al. 2019

View full text Add to dashboard Cite

In the supply chain management literature, various mobile radio frequency identification (RFID) protocols have been proposed for minimizing cargo theft during transport while ensuring the integrity of the entire cargo load or transferring ownership of a tagged item to another owner. These protocols are generally called grouping proof protocols and ownership transfer protocols, respectively. However, no protocol has been proposed that can achieve both requirements. In this paper, we propose a novel designated ownership transfer with grouping proof protocol that simultaneously generates grouping proofs and authenticates the consistency between the receipt proof and pick proof while ensuring that ownership of the cargo is transferred to the new designated owner in one attempt. In addition, the proposed scheme is robust against attacks (such as replay, denial-of-service, and denial-of-proof attacks) and has security features, such as forward/backward secrecy and message integrity.

show abstract

“…However, Zuo's protocol resulted in denial of service (DoS) attack when the updated key was subject to a desynchronization attack. Subsequently, Jannati et al [21] proposed a solution to the DoS problem caused by a modification to update-key messages. However, all of these group transfer protocols have a limitation of only being able to perform a single transfer for all tags of an owner and not being able to perform a partial transfer of only some tags in a group.…”

Section: Introductionmentioning

confidence: 99%

A Secure Partial RFID Ownership Transfer Protocol with Multi-Owners

Luo

Yang

2019

Sensors

View full text Add to dashboard Cite

Mobile radio frequency identification (RFID) has been extensively applied in a wide range of fields. In supply chain management, RFID is used to more efficiently manage the ownership transfer of cargo. The transfer of a group of tags belonging to multiple owners is often required at the front end of a supply chain. This study, therefore, proposes a secure, high-performance threshold multi-owner partial tag ownership transfer protocol that supports a mobile RFID environment and features the capabilities and security required for supporting existing ownership transfer environments (e.g., application for different authorities, designation of the transfer target, and ownership transfer of a group of tags). Moreover, the proposed protocol can resist against most of the known attacks on RFID. some, or all tags, (3) provides two-way authentication between a tag, reader, and a back-end server, (4) ensures that tag ownership is only transferred to the designated owners, (5) is secure and immune to replay attacks, eavesdropping, message modification attacks, and tracking attacks (i.e., protects owner privacy) and provides forward and backward secrecy. Lastly, it (6) features high performance that is not related to the reader participating in the transfer or the number of tags and does not increase information and calculation load considerably when the number of owners and tags increases.This paper is organized as follows. Section 2 introduces the environmental assumptions of the proposed ownership transfer protocol and the relationships among the tag, reader, and the back-end server. Section 3 provides a detailed description of the proposed protocol. Section 4 compares and analyzes the security of the proposed method and other RFID ownership transfer methods. Section 5 presents the calculation performance of the proposed protocol for analysis and a comparison with those introduced in relevant studies, and, lastly, Section 6 concludes this study. Multi-Owner Multi-Tag Ownership Transfer MethodThis study proposes a secure multi-owner multi-tag ownership transfer method for a mobile RFID network environment. Figure 1 illustrates the architecture of the proposed system. The mobile device of a member of the old owner group sends a signal for ownership transfer, reads the partial tags in the group to be transferred, and sends the transfer message collectively generated by these tags to a back-end server. The server then notifies the group of old owners. If the partial signature of n old owners who consent to partial tag ownership transfer exceeds the threshold value, then the group of old owners and the group of new owners jointly conduct ownership transfer.

show abstract

Cryptanalysis and Enhancement of a Secure Group Ownership Transfer Protocol for RFID Tags

Cited by 10 publications

References 10 publications

Secure ownership transfer for multi-tag multi-owner passive RFID environment with individual-owner-privacy

Secure ownership transfer for multi-tag multi-owner passive RFID environment with individual-owner-privacy

Novel Designated Ownership Transfer with Grouping Proof

A Secure Partial RFID Ownership Transfer Protocol with Multi-Owners

Contact Info

Product

Resources

About