On the Security of Rotation Operation Based Ultra-Lightweight Authentication Protocols for RFID Systems

Masoumeh Safkhani, Nasour Bagheri and Mahyar Shariat
Additional contact information
Masoumeh Safkhani: Computer Engineering Department, Shahid Rajaee Teacher Training University, Tehran 16788-15811, Iran
Nasour Bagheri: Electrical Engineering Department, Shahid Rajaee Teacher Training University, Tehran 16788-15811, Iran
Mahyar Shariat: Computer Engineering Department, Shahid Rajaee Teacher Training University, Tehran 16788-15811, Iran

Future Internet, 2018, vol. 10, issue 9, 1-15

Abstract: Passive Radio Frequency IDentification (RFID) tags are generally highly constrained and cannot support conventional encryption systems to meet the required security. Hence, designers of security protocols may try to achieve the desired security only using limited ultra-lightweight operations. In this paper, we show that the security of such protocols is not provided by using rotation functions. In the following, for an example, we investigate the security of an RFID authentication protocol that has been recently developed using rotation function named ULRAS, which stands for an Ultra-Lightweight RFID Authentication Scheme and show its security weaknesses. More precisely, we show that the ULRAS protocol is vulnerable against de-synchronization attack. The given attack has the success probability of almost ‘1’, with the complexity of only one session of the protocol. In addition, we show that the given attack can be used as a traceability attack against the protocol if the parameters’ lengths are an integer power of 2, e.g., 128. Moreover, we propose a new authentication protocol named UEAP, which stands for an Ultra-lightweight Encryption based Authentication Protocol, and then informally and formally, using Scyther tool, prove that the UEAP protocol is secure against all known active and passive attacks.

Keywords: RFID; ULRAS; UEAP; mobile commerce; RR method; authentication; de-synchronization attack; traceability attack (search for similar items in EconPapers)
JEL-codes: O3 (search for similar items in EconPapers)
Date: 2018
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/1999-5903/10/9/82/pdf (application/pdf)
https://www.mdpi.com/1999-5903/10/9/82/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jftint:v:10:y:2018:i:9:p:82-:d:164832

Access Statistics for this article

Future Internet is currently edited by Ms. Grace You

More articles in Future Internet from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().