Prevention of Disclosure Attack on a Mutual Authentication Protocol Using RFID Tag in IoT

Security of IoT is a major concern. These devices have simplified various tasks but if the information transmitted through IoT is not authorized and secure, then usage of IoT will be reduced. To solve this problem various algorithms have been proposed. A mutual authentication protocol for IoT devices using RFID tags was previously proposed. The protocol provides ultra-lightweight authentication based on computation power and storage capacity of entities involved. In this protocol, disclosure attack is possible because attacker can obtain the key that is computed between RFID tag and the reader. In this paper a method is proposed to protect the protocol against this attack.