Strong Authentication Protocol for Secure RFID Tag Search without Help of Central Database

2008 IEEE/IFIP International Conference on Embedded and Ubiquitous Computing Pub Date : 2008-12-17 DOI:10.1109/EUC.2008.54

Tae-Youn Won, J. Chun, Dong Hoon Lee

{"title":"Strong Authentication Protocol for Secure RFID Tag Search without Help of Central Database","authors":"Tae-Youn Won, J. Chun, Dong Hoon Lee","doi":"10.1109/EUC.2008.54","DOIUrl":null,"url":null,"abstract":"RFID tag search is to find a particular tag in a group of tags by using a portable reader. Since a portable reader has own identifier and secret values associated with each tag, the portable reader can wirelessly communicate with the tag without help of central database. The RFID tag search can be useful to find a lost book among all RFID-tagged books in a library. However, the basic operation for RFID tag search has security and privacy problems. Secure search protocols to solve these problems were firstly discussed by Tan et al. Nonetheless, their protocols donpsilat perfectly solve an illegal tag tracking problem by a reuse attack of a search query and also have an illegal reader tracking problem by revealing the portable reader ID over an insecure channel. In this paper, we propose strong authentication protocol for secure RFID tag search without help of central database which utilizes a block cipher (AES-128) and a timestamp. Our protocol can search a particular tag efficiently, and preserve user privacy against all major attacks.","PeriodicalId":430277,"journal":{"name":"2008 IEEE/IFIP International Conference on Embedded and Ubiquitous Computing","volume":"34 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2008-12-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"38","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2008 IEEE/IFIP International Conference on Embedded and Ubiquitous Computing","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/EUC.2008.54","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 38

Abstract

RFID tag search is to find a particular tag in a group of tags by using a portable reader. Since a portable reader has own identifier and secret values associated with each tag, the portable reader can wirelessly communicate with the tag without help of central database. The RFID tag search can be useful to find a lost book among all RFID-tagged books in a library. However, the basic operation for RFID tag search has security and privacy problems. Secure search protocols to solve these problems were firstly discussed by Tan et al. Nonetheless, their protocols donpsilat perfectly solve an illegal tag tracking problem by a reuse attack of a search query and also have an illegal reader tracking problem by revealing the portable reader ID over an insecure channel. In this paper, we propose strong authentication protocol for secure RFID tag search without help of central database which utilizes a block cipher (AES-128) and a timestamp. Our protocol can search a particular tag efficiently, and preserve user privacy against all major attacks.

查看原文本刊更多论文

无需中央数据库的RFID标签安全搜索强认证协议

RFID标签搜索是利用便携式阅读器在一组标签中查找特定的标签。由于便携式阅读器具有与每个标签相关联的自己的标识符和秘密值，因此便携式阅读器可以在没有中央数据库的帮助下与标签进行无线通信。RFID标签搜索可以在图书馆所有带有RFID标签的图书中找到丢失的图书。然而，RFID标签搜索的基本操作存在安全和隐私问题。解决这些问题的安全搜索协议首先由Tan等人讨论。尽管如此，他们的协议不能通过搜索查询的重用攻击完美地解决非法标签跟踪问题，也有通过不安全通道暴露便携式阅读器ID的非法阅读器跟踪问题。在本文中，我们提出了一种强认证协议，用于安全的RFID标签搜索，而不需要中央数据库的帮助，该协议使用分组密码(AES-128)和时间戳。我们的协议可以有效地搜索特定的标签，并保护用户隐私免受所有主要攻击。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

2008 IEEE/IFIP International Conference on Embedded and Ubiquitous Computing

自引率

0.00%

发文量