Secure Ownership and Ownership Transfer in RFID Systems

Deursen, Ton van; Mauw, Sjouke; Radomirović, Saša; Vullers, Pim

doi:10.1007/978-3-642-04444-1_39

Cited by 26 publications

(19 citation statements)

References 16 publications

(19 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Deursen, Mauw, Radomirović and Vullers [3] introduced a formal definition of secure ownership transfer in RFID systems. They described two roles: the tag owner and the tag holder.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Secure RFID Ownership Transfer Protocols

Susilo

Varadharajan

2013

Information Security Practice and Experience

View full text Add to dashboard Cite

An RFID tag could change hands many times during its lifetime. In a retail chain, the ownership of the tag is instituted by the supplier who initially owns the tag. In the view of a buyer, the validity of the current tag ownership and the originality of supplier are most important. In typical RFID ownership transfer protocols, the knowledge of the tag's authentication key proves the ownership. However, it is insufficient against an active attacker, since tags are usually lack of tamper-proof protections. Ownership transfer relies on a successful verification of tag's supplier and current ownership. In this paper, we formally define the security model of ownership transfer protocols and propose a secure ownership transfer protocol. In our scheme, current owner provides a new owner with the evidence of transfer and a proof of tag origin. Key management becomes easy in our system, since the one asymmetric verification key of the owner can be used to verify multiple tags that belong to the owner. Abstract. An RFID tag could change hands many times during its lifetime. In a retail chain, the ownership of the tag is instituted by the supplier who initially owns the tag. In the view of a buyer, the validity of the current tag ownership and the originality of supplier are most important. In typical RFID ownership transfer protocols, the knowledge of the tag's authentication key proves the ownership. However, it is insufficient against an active attacker, since tags are usually lack of tamperproof protections. Ownership transfer relies on a successful verification of tag's supplier and current ownership. In this paper, we formally define the security model of ownership transfer protocols and propose a secure ownership transfer protocol. In our scheme, current owner provides a new owner with the evidence of transfer and a proof of tag origin. Key management becomes easy in our system, since the one asymmetric verification key of the owner can be used to verify multiple tags that belong to the owner.

show abstract

“…Deursen, Mauw, Radomirović and Vullers [3] introduced a formal definition of secure ownership transfer in RFID systems. They described two roles: the tag owner and the tag holder.…”

Section: Related Workmentioning

confidence: 99%

“…The security of RFID ownership transfer protocols is considered in threefold: the secure ownership, exclusive ownership and secure ownership transfer [3]. The first two are related to the phase of the ownership verification.…”

Section: Introductionmentioning

confidence: 99%

Secure RFID Ownership Transfer Protocols

Susilo

Varadharajan

2013

Information Security Practice and Experience

View full text Add to dashboard Cite

show abstract

“…for any form of analytics, authentication and possession are decoupled. Also as pointed out in [13] these protocols still suffer from security flaws.…”

Section: Authentication Using Rfidmentioning

confidence: 99%

“…Most protocols have been broken in [13]. We extend the concept of ownership verification to verification after possession of the item.…”

Section: Related Workmentioning

confidence: 99%

An access control model for mobile physical objects

Kerschbaum¹

2010

Proceedings of the 15th ACM Symposium on Access Control Models and Technologies

View full text Add to dashboard Cite

Access to distributed databases containing tuples collected about mobile physical objects requires information about the objects' trajectories. Existing access control models cannot encode this information efficiently. This poses a policy management problem to administrators in real-world supply chains where companies want to protect their goods tracking data. In this paper we propose a new access control model as an extension to attribute-based access control that allows trajectory-based visibility policies. We prove the security properties of our novel authentication protocol for distributed systems that can supply the decision algorithm with the necessary reliable information using only standard passive RFID tags. As a result companies will be able to improve confidentiality protection and governance of their object tracking data and more trustingly engage in data sharing agreements.

show abstract

“…We say that a protocol P is desynchronization resistant, if a tag never loses all its owners with respect to P [7]. It ensures that the protocol can always be executed successfully with a tag.…”

Section: Introductionmentioning

confidence: 99%

Security analysis of two recently proposed RFID authentication protocols

et al. 2011

Front. Comput. Sci. China

View full text Add to dashboard Cite

Radio frequency identification (RFID) systems suffer many security risks because they use an insecure wireless communication channel between tag and reader. In this paper, we analyze two recently proposed RFID authentication protocols. Both protocols are vulnerable to tag information leakage and untraceability attacks. For the attack on the first protocol, the adversary only needs to eavesdrop on the messages between reader and tag, and then perform an XOR operation. To attack the second protocol successfully, the adversary may execute a series of carefully designed challenges to determine the tag's identification.

show abstract

Secure Ownership and Ownership Transfer in RFID Systems

Cited by 26 publications

References 16 publications

Secure RFID Ownership Transfer Protocols

Secure RFID Ownership Transfer Protocols

An access control model for mobile physical objects

Security analysis of two recently proposed RFID authentication protocols

Contact Info

Product

Resources

About