Defining strong privacy for RFID

  • Authors:
  • Ari Juels;Stephen A. Weis

  • Affiliations:
  • RSA Security, Cambridge, MA;Google, San Francisco, CA

  • Venue:
  • ACM Transactions on Information and System Security (TISSEC)
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this work, we consider privacy in Radio Frequency IDentification (RFID) systems. Our contribution is twofold: (i) We propose a simple, formal definition of strong privacy useful for basic analysis of RFID systems, as well as a different (weaker) definition applicable to multiverifier systems; (ii) We apply our definition to reveal vulnerabilities in several proposed privacy-enhancing RFID protocols; and (iii) We formally analyze and suggest improvements to hash-locks, one of the first privacy-enhancing RFID protocols in the literature.