The Lightweight RFID Grouping-Proof Protocols with Identity Authentication and Forward Security

Abstract

In many fields, multiple RFID tags are often combined into a group to identify an object. An RFID grouping-proof protocol is utilized to prove the simultaneous existence of a group of tags. However, many current grouping-proof protocols cannot simultaneously provide privacy preserving, forward security, and the authentication between reader/verifier and tags, which are vulnerable to trace attack, privacy leakage, and desynchronization attack. To improve the secure performance of the current grouping-proof protocols, we propose two provable lightweight grouping-proof protocols that provide forward security, identity authentication, and privacy preserving. Our protocols involve a trusted reader and an untrusted reader, respectively. In order to avoid verifying some invalid evidences, our protocols complete the authentication of the verifier to the trusted reader and the verified tags before the verifier verifies the grouping-proof evidence. Each tag uses parallel mode to complete its signature to improve the efficiency of the protocols. Moreover, the activate-sleep mechanism and the filtering operation are proposed to effectively reduce the collision probability and computing load of tags. Our protocols complete the authentication to tags twice by a verifier and a trusted reader, respectively. ey can resist various attacks such as eavesdropping, replay, trace, and desynchronization. e protocols are proven to be secure, flexible, and efficient. ey only utilize some lightweight operations. erefore, they are very suitable to the low-cost RFID systems.

Security and Threats of RFID and WSNs: Comparative Study

“…In [46], the authors introduced a group-based authentication protocol for the RFID system. It uses only mod operation and bitwise XOR.…”

“…In [44], we liked that they used the activate-sleep mechanism efficiently and filtering process which reduced collision on the tags. In the paper [46], the authors not only used a pseudo system that provides a feature on the side of the tag but also used that feature in the reader to generate the nonce. Their protocol only uses bit-wise XOR operation in the authentication stage along with symmetric encryption and decryption.…”

A New Strong Adversary Model for RFID Authentication Protocols

“…In RFID systems, to achieve one-end or mutual authentication, readers and tags may employ authentication protocols (e.g. [9], [10], [11], [12], [13]). Despite recent advances in the domain of RFID communication, the design of secure authentication protocols has remained as a challenge yet [14], given the constraints of those devices, e.g.…”