Protecting Your Privacy with a Mobile Agent Device in RFID Environment

Abstract

Radio Frequency Identification (RFID) Technology is a contactless automatic identification technology using radio frequency. For this RFID technology to be widely spread, the problem of privacy invasion should be solved. There are many research works in progress to solve the RFID privacy problems. Most of works for solving this problem have focused on developing light-weight cryptographic modules which can be embedded into RFID tags, but some of them used a proxy agent approach that control communications 123 166 S.-S. Yeo et al. between the tag and the reader for protecting user privacy. The later approach is very useful and practical in terms of manufacturing low-cost tag hardware. However, all schemes of this approach have some problems in ownership transfer and forgery detection. In this paper, we are focusing on the proxy agent approach and we suggest an advanced agent scheme that guarantees not only privacy protection but also forgery detection. And our scheme is more scalable than other agent schemes so far.

An Authentication Protocol for Lightweight NFC Mobile Sensors Payment

“…In fact, the more reasonable assumption should be that there is an insecure channel between the Reader and Tag. Yeo et al (2009) proposed an assumption close to the similar relative facts. Different from Song and Mitchell (2008) and Rizomiliotis et al (2009)…”

An authentication protocol for low-cost RFID tags

“…Hence, a more reasonable assumption is to assume that the channel is insecure between the reader and the server. Yeo et al (2009) has made a similar assumption compared with ours, but with a different environment than that of Song-Mitchell's and Rizomiliotis et al's protocol. Yeo et al's research was based on the mobile agent in RFID environment.…”

An improved authentication protocol for mobile agent device in RFID environment

“…In eMARP-based RFID system [20], the security analysis indicated that the proposed protocol was unable to resist a location tracking. The attacker is capable of recognizing and tracing from a particular message to the target tag.…”

“…The mobile agent device guarantees higher level security than any other protection protocol. Later, Yeo et al [20] proposed eMARP-based RFID system and then improved the security flaws of MARP. However, we pointed out and proved that eMARP-based RFID system cannot resist location tracking as they claim.…”

“…In Table 1, we have listed the notations that are used throughout the paper. In this session, we will briefly introduce eMARP-based RFID system [20]. The eMARP-based RFID system includes six entities: the reader, the tag, the backend server, the public-key center, the mobile agent device, and a store database.…”