Enhancement of the RFID security method with ownership transfer

Abstract

Radio frequency identification (RFID) is one popular technology being deployed for a variety of applications. Privacy and security issues play major roles in the success of RFID applications due to ease with masquerade, eavesdropping, etc. over the insecure channel between the tag and the reader. These security requirements are summarized: indistinguishability, forward security, ownership transfer, and resistance to replay attack and tag killing. Much research has been proposed. Except Osaka et al.'s scheme, none can meet all requirements. However, this paper introduces a new type of DoS attack which is ignored in these research studies to endanger their securities. As Osaka et al.'s scheme is superior to the others in terms of the functionalities, we take it as an example to show the possibility of the new DoS attack. A remedy is further provided to enhance the security to make the scheme more practical.

EPC Gen2v2 RFID Standard Authentication and Ownership Management Protocol

“…The protocol is shown to be vulnerable to tracking and DoS attacks by manipulating the value of the random number sent to the tag [27]. Moreover, in [28], an attacker can add noise to the final message exchange resulting in the tag holding incorrect secret information due to which any subsequent authentication would fail.…”

Secure ownership transfer for multi-tag multi-owner passive RFID environment with individual-owner-privacy

“…However, their scheme has been shown to suffer from desynchronization problems [26]. An improvement to address the noise injection problem was introduced in [27]. The authors propose the use of a hash function in order to protect the integrity of the key being transferred.…”

Scenarios for An RFID Tag Ownership Transfer Protocol for A Closed Loop System

“…Chen et al [11] proposed a three phase's one to one tag ownership transfer but the mutual authentication was proven weak against replay attack. Lin et al [12] also proposed a one to one ownership protocol which is weak at DoS and de-synchronization attacks.…”