Security of RFID Protocols -- A Case Study

Authors:
Ton van Deursen;Saša Radomirović
Affiliations:
Université du Luxembourg, Faculté des Sciences, de la Technologie et de la Communication, 6, rue Richard Coudenhove-Kalergi, L-1359 Luxembourg;Université du Luxembourg, Faculté des Sciences, de la Technologie et de la Communication, 6, rue Richard Coudenhove-Kalergi, L-1359 Luxembourg
Venue:
Electronic Notes in Theoretical Computer Science (ENTCS)
Year:
2009

Citing 23
Cited 3

An efficient and secure authentication protocol using uncertified keys

ACM SIGOPS Operating Systems Review
Prudent Engineering Practice for Cryptographic Protocols

IEEE Transactions on Software Engineering
Radio Frequency Identification and the Electronic Product Code

IEEE Micro
A Hierarchy of Authentication Specifications

CSFW '97 Proceedings of the 10th IEEE workshop on Computer Security Foundations
Efficient protocols secure against guessing and replay attacks

ICCCN '95 Proceedings of the 4th International Conference on Computer Communications and Networks
The blocker tag: selective blocking of RFID tags for consumer privacy

Proceedings of the 10th ACM conference on Computer and communications security
Hash-based Enhancement of Location Privacy for Radio-Frequency Identification Devices using Varying Identifiers

PERCOMW '04 Proceedings of the Second IEEE Annual Conference on Pervasive Computing and Communications Workshops
A Secure and Efficient RFID Protocol that could make Big Brother (partially) Obsolete

PERCOM '06 Proceedings of the Fourth Annual IEEE International Conference on Pervasive Computing and Communications
Protecting RFID communications in supply chains

ASIACCS '07 Proceedings of the 2nd ACM symposium on Information, computer and communications security
Defining Strong Privacy for RFID

PERCOMW '07 Proceedings of the Fifth IEEE International Conference on Pervasive Computing and Communications Workshops
RFID authentication protocol for low-cost tags

WiSec '08 Proceedings of the first ACM conference on Wireless network security
A family of dunces: trivial RFID identification and authentication protocols

PET'07 Proceedings of the 7th international conference on Privacy enhancing technologies
Novel RFID authentication schemes for security enhancement and system efficiency

SDM'07 Proceedings of the 4th VLDB conference on Secure data management
Security analysis and enhancement of one-way hash based low-cost authentication protocol (OHLCAP)

PAKDD'07 Proceedings of the 2007 international conference on Emerging technologies in knowledge discovery and data mining
A lightweight RFID protocol using substring

EUC'07 Proceedings of the 2007 international conference on Embedded and ubiquitous computing
An efficient mutual authentication scheme for EPCglobal class-1 generation-2 RFID system

EUC'07 Proceedings of the 2007 conference on Emerging direction in embedded and ubiquitous computing
An efficient authentication protocol for RFID systems resistant to active attacks

EUC'07 Proceedings of the 2007 conference on Emerging direction in embedded and ubiquitous computing
Low-cost and strong-security RFID authentication protocol

EUC'07 Proceedings of the 2007 conference on Emerging direction in embedded and ubiquitous computing
RFID authentication protocol with strong resistance against traceability and denial of service attacks

ESAS'05 Proceedings of the Second European conference on Security and Privacy in Ad-Hoc and Sensor Networks
A scalable and untraceable authentication protocol for RFID

EUC'06 Proceedings of the 2006 international conference on Emerging Directions in Embedded and Ubiquitous Computing
The AVISPA tool for the automated validation of internet security protocols and applications

CAV'05 Proceedings of the 17th international conference on Computer Aided Verification
Crossing borders: security and privacy issues of the european e-passport

IWSEC'06 Proceedings of the 1st international conference on Security
Information confinement, privacy, and security in RFID systems

ESORICS'07 Proceedings of the 12th European conference on Research in Computer Security

Scalability and Security Conflict for RFID Authentication Protocols

Wireless Personal Communications: An International Journal
Security analysis of an ultra-lightweight RFID authentication protocol—SLMAP*

Security and Communication Networks
Security analysis of LMAP using AVISPA

International Journal of Security and Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

In the context of Dolev-Yao style analysis of security protocols, we investigate the security claims of a recently proposed RFID authentication protocol. We exhibit a flaw which has gone unnoticed in RFID protocol literature and present the resulting attacks on authentication, untraceability, and desynchronization resistance. We analyze and discuss the authors' proofs of security. References to other vulnerable protocols are given.