SLEC: A Novel Serverless RFID Authentication Protocol Based on Elliptic Curve Cryptography

Abstract

Internet of Things (IoT) is a new paradigm that has been evolving into the wireless sensor networks to expand the scope of networked devices (or things). This evolution drives communication engineers to design secure and reliable communication at a low cost for many network applications such as radio frequency identification (RFID). In the RFID system, servers, readers, and tags communicate wirelessly. Therefore, mutual authentication is necessary to ensure secure communication. Normally, a central server supports the authentication of readers and tags by distributing and managing the credentials. Recent lightweight RFID authentication protocols have been proposed to satisfy the security features of RFID networks. Using a serverless RFID system is an alternative solution to using a central server. In this model, both the reader and the tag perform mutual authentication without the need for the central server. However, many security challenges arise from implementing lightweight authentication protocols in serverless RFID systems. We propose a new secure serverless RFID authentication protocol based on the famous elliptic curve cryptography (ECC). The protocol also maintains the confidentiality and privacy of the messages, tag information, and location. Although most of the current serverless protocols assume secure channels in the setup phase, we assume an insecure environment during the setup phase between the servers, readers, and tags. We ensure that the credentials can be renewed by any checkpoint server in the mobile RFID network. Thus, we implement ECC in the setup phase (renewal phase), to transmit and store the communication credentials of the server to multiple readers so that the tags can perform the mutual authentication successfully while far from the server. The proposed protocol is compared with other serverless frameworks proposed in the literature in terms of computation cost and attacks resistance.

Survey: Vulnerability Analysis of Low-Cost ECC-Based RFID Protocols against Wireless and Side-Channel Attacks

“…In addition, Benssalah requires a total of six hash functions and four scalar multiplications in one round. Baashira indicated in his paper [ 118 ] that the use of cryptographic hash functions increases the level of protocol security but at the same time requires more computing capacity, which must be taken into account for applications with constrained resources. The number of scalar multiplication operations has an impact on the computational cost of an RFID communication.…”

Cryptography applications in protocols for RFID systems

“…This section reviews the baseline protocol of Baashirah and Abuzneid proposed in the work"SLEC: A Novel Serverless RFID Authentication Protocol Based on Elliptic Curve Cryptography" (Baashirah, 2019) and describes its vulnerabilities. Table 2 introduces the notations used in the SLEC protocol.…”

“…In order to protect RFID systems from more attacks, in 2019, Baashirah and Abuzneid proposed a serverless RFID authentication protocol (Baashirah, 2019) This paper is divided as follows, then Section 2 describes the methodology and results of the bibliographic research about this topic. In section 3, the SLEC protocol is described and Section 4 its vulnerabilities and problems are pointed out.…”

Hybrid Visual and Optimal Elliptic Curve Cryptography for Medical Image Security in Iot

“…This method aims to perform the safety measures of patient with wireless sensor network and encrypting the data. IoT security provides strengthened to the investigators and to provide the keys to optimal imperialist to develop a competitive, several techniques are enhanced [19].…”