An enhanced 2-pass optimistic anonymous RFID authentication protocol with forward security

Authors:
He Lei;Jin Song-he;Zhang Tao;Li Na-na
Affiliations:
School of Computer and Communication Engineering, Zhengzhou University of Light Industry, Zhengzhou, China;School of Computer and Communication Engineering, Zhengzhou University of Light Industry, Zhengzhou, China;School of Computer and Communication Engineering, Zhengzhou University of Light Industry, Zhengzhou, China;School of Computer and Communication Engineering, Zhengzhou University of Light Industry, Zhengzhou, China
Venue:
WiCOM'09 Proceedings of the 5th International Conference on Wireless communications, networking and mobile computing
Year:
2009

Citing 2
Cited 1

RFID Systems and Security and Privacy Implications

CHES '02 Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems
YA-TRAP: Yet Another Trivial RFID Authentication Protocol

PERCOMW '06 Proceedings of the 4th annual IEEE international conference on Pervasive Computing and Communications Workshops

Secure authentication scheme for passive C1G2 RFID tags

Computer Networks: The International Journal of Computer and Telecommunications Networking

Quantified Score

Hi-index	0.00

Visualization

Abstract

Lightweight authentication protocols in the RFID system are necessary because the channel between the tag and reader is not secure and the tag has very limited computation resources, memory and power. Many researchers have proposed some lightweight authentication protocols in order to provide some security properties, such as mutual authentication, untraceability etc. In this paper, we firstly analyze two lightweight authentication protocols, YA-TRAP and a 2-Pass optimistic anonymous RFID authentication protocol, and find their security drawbacks. Afterwards, we propose an enhanced 2- Pass optimistic anonymous RFID authentication protocol with forward security and analyze its property. The result indicates this protocol does not increase the tag's cost and computation amount. Moreover, it can provide mutual authentication, untraceability, forward security and protect from replay attack and desynchronization attack.