多媒體網路安全實驗室 An Efficient RFID Authentication Protocol for Low-cost Tags Date ： Reporter : Hong Ji Wei Authors : Yanfei Liu From : 2008 IEEE/IFIP International Conference on Embedded and Ubiquitous Computing

多媒體網路安全實驗室 OUTLINE INTRODUCTION 1 RELATED WORKS 2 PROPOSED PROTOCOL 33 SECURITY AND PRIVACY ANALYSIS EFFICIENCY ANALYSIS CONCLUSION 46

多媒體網路安全實驗室 INTRODUCTION 2  Architecture of RFID

多媒體網路安全實驗室 3 INTRODUCTION  RF Tag of RFID can be divided into two categories 1. Active RF Tag Need to install the battery. Sense distance is long than passive. 2. Passive RF Tag Doesn’t need to install the battery. Sense distance is short than active.

多媒體網路安全實驗室  RFID authentication protocols can be divided into four classes. 1. First - Weis et al. 2. Second – S. A. Weis 3. Third - Tree based protocol 4. Fourth - C. C. Tan RELATED WORKS

多媒體網路安全實驗室 5 PROPOSED PROTOCOL  Notations S : The authentication server R i : An RFID reader T j : An RFID tag h(.) : A one-way function f k (.) : A one-way function with a secret key k ⊕ : Bitwise XOR operation

多媒體網路安全實驗室 6 PROPOSED PROTOCOL  This proposed protocol can be divided into three phrases. 1. Assumptions 2. Initialization 3. Authentication

多媒體網路安全實驗室 PROPOSED PROTOCOL  Assumptions 1. Each tag has enough memory to store a one-way hash function. 2. The hash functions are assumed to be known for the adversary, while the parameters used are secret. 3. Each tag has a rewriteable memory to store the security information. 4. Each tag can generate random numbers and perform hash function operations. 5. The channel between the reader and the authentication server is secure but another is not.

多媒體網路安全實驗室 8 PROPOSED PROTOCOL  Initialization S User Special Channel RoRw

多媒體網路安全實驗室 9 PROPOSED PROTOCOL  Authentication SRiRi TjTj

多媒體網路安全實驗室 10 SECURITY AND PRIVACY ANALYSIS  The analysis can be divided into sixth parts 1. Eavesdropping 2. Tag cloning 3. Tag tracking 4. Replay attack 5. Compromising attack 6. Denial of service attack

多媒體網路安全實驗室 11 SECURITY AND PRIVACY ANALYSIS  Eavesdropping SRiRi TjTj

多媒體網路安全實驗室 12 SECURITY AND PRIVACY ANALYSIS  Tag cloning 12 SRiRi TjTj

多媒體網路安全實驗室 13 SECURITY AND PRIVACY ANALYSIS  Tag tracking 13 SRiRi TjTj

多媒體網路安全實驗室 14 SECURITY AND PRIVACY ANALYSIS  Replay attack 14 SRiRi TjTj

多媒體網路安全實驗室 15 SECURITY AND PRIVACY ANALYSIS  Compromising attack 15 SRiRi TjTj

多媒體網路安全實驗室 16 SECURITY AND PRIVACY ANALYSIS  Denial of service attack 16 SRiRi TjTj

多媒體網路安全實驗室 17 EFFICIENCY ANALYSIS

多媒體網路安全實驗室 CONCLUSION  In this paper, we proposed a much more efficient authentication protocol utilizing one-way functions only than most of recent protocols.  The server just compute one-way function three times to check the identifier of the tag and its response without any other searching operation.  Our protocol provides a mutual authentication between the reader and the tag. 18

多媒體網路安全實驗室