Radio Frequency Identification (RFID) is one of the leading technologies in the Internet of Things (IoT) to create an efficient and reliable system to securely identify objects in many environments such as business, health, and manufacturing areas. Recent RFID authentication protocols have been proposed to satisfy the security features of RFID communication. In this article, we identify and review some of the most recent and enhanced authentication protocols that mainly focus on the authentication between a reader and a tag. However, the scope of this survey includes only passive tags protocols, due to the large scale of the RFID framework. We examined some of the recent RFID protocols in term of security requirements, computation, and attack resistance. We conclude that only five protocols resist all of the major attacks, while only one protocol satisfies all of the security requirements of the RFID system.

https://www.mdpi.com/1424-8220/18/10/3584/pdf

Survey on Prominent RFID Authentication Protocols for Passive Tags.

Radio frequency identification (RFID) is a technology that has grown in popularity and in the applications of use However, there are major issues regarding security and privacy with respect to RFID technology which have caught the interest of many researchers There are significant challenges which must be overcome to resolve RFID security and privacy issues One reason is the constraints attached to the provision of security and privacy in RFID systems Along with meeting the security and privacy needs of RFID technology, solutions must be inexpensive, practical, reliable, scalable, flexible, inter-organizational, and long-lasting To make RFID identifiers effective and efficient they must identify the item(s) while resisting attacks aimed at obtaining the tag’s information and compromising the system or making it possible to bypass the protection RFID tags are supposed to provide Different authentication methods have been proposed, researched, and evaluated in the literature In this work, we proposed our methodology in evaluating RFID authentication, and a few of the most promising authentication methods are reviewed, compared, and ranked in order to arrive at a possible best choice of protocol to use

Comparison and Feasibility of Various RFID Authentication Methods Using ECC.

The implementation of RFID technology has globally impacted several industries and this revolution has improved the aspects of service delivery in many sectors, such as logistics, supply chain visibility, access control, military, and agri-food sector. RFID provides several security services to protect the data transmitted between a tag and a reader in the IoT environment. However, these advantages do not prevent an attacker to access this communication and remaining various security and privacy issues in these systems. Furthermore, with the rapid growth of IoT, there is an urgent need of security authentication and confidential data protection. Authentication protocols based on cryptographic primitives were widely investigated and implemented to guarantee protection against various attacks that can suffer an RFID system. Among those cryptosystems is the Elliptic Curve Integrated Encryption Scheme (ECIES), which can be found in several cryptographic standards. It offers mutual authentication and data integrity that has become highly employed in RFID applications. In this paper, we present a novel secure ECC-based RFID authentication protocol that meets the security needs of existing published protocols and ensures data confidentiality and privacy. Beforehand, we present an overview of some ECC-based RFID authentication protocols and highlight their security weaknesses against server spoofing, tracking, and impersonation attacks. After that, a comparative study with existing protocols in terms of computational performance and security strength is performed. Finally, our protocol is analyzed and verified with the Automated Validation of Internet Security Protocols and Applications (AVISPA) analysis tool after being modeled in High Level Protocol Specification Language (HLPSL).

Novel ECC-Based RFID Mutual Authentication Protocol for Emerging IoT Applications

Abstract Security has been a primary concern in almost all areas of computing and for the devices that are low on computing power it becomes more important. In this paper, a new class of computing device termed as Low Computing Power Device (LCPD) has been defined conceptually. The paper brings out common attributes, security requirements and security challenges of all kinds of low computing power devices in one place so that common security solutions for these can be designed and implemented rather than doing this for each individual device type. A survey of existing recent security solutions for different LCPDs hasve been presented here. This paper has also provided possible security solutions for LCPDs which include identification of countermeasures against different threats and attacks on these devices, and choosing appropriate cryptographic mechanism for implementing the countermeasures efficiently.

Security of Low Computing Power Devices: A Survey of Requirements, Challenges & Possible Solutions

The Internet of Things (IoT) is the concept of forming an autonomous network using everyday objects to create real-life services. This gave rise to several new applications used in logistics, home automation, e-health and so forth. However, this type of applications requires a high level of privacy and security. Radio Frequency Identification (RFID) system presents one of the most promising enabler of IoT applications. This paper presents a set of security requirements for RFID based IoT applications. It then introduces a critical analysis of existing work and the ability of various proposals to protect the security of these applications in a RFID deployment. This critical review represents a roadmap for our project which aims to provide a security solution for RFID networks.

Security of RFID Based Internet of Things Applications: Requirements and Open Issues

In this paper, a mutual authentication protocol based on ECC is designed for RFID systems. This protocol is described in detail and the performance of this protocol is analyzed. The results show that the protocol has many advantages, such as mutual authentication, confidentiality, anonymity, availability, forward security, scalability and so on, which can resist camouflage attacks, tracking attacks, denial of service attacks, system internal attack.

Rui Zhang

Papers

Mutual Authentication Protocol for RFID Based on ECC