2. 1 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland draft-urien-hip-tag-00.txt HIP support for RFID Pascal.Urien@telecom-paristech.fr http://www.telecom-paristech.fr

3. 2 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland Summary This document describes an architecture based on the Host Identity Protocol (HIP) for active tags, i.e. RFIDs that include tamper resistant computing resources. HIP-Tags never expose their identity in clear text, but hide this value (typically an EPC-Code) by a particular equation (f) that can be only solved by a dedicated entity, referred as the portal. HIP exchanges occurred between HIP-Tags and portals; they are shuttled by IP packets, through the Internet cloud.

4. 3 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland Internet Of Thing (IoT) Architecture ReaderTag Start EPC-Code URI ConversionONS Resolver EPCIS Server Local System DNS Cloud PML Files EPC: Electronic Product Code ONS: Object Name Service EPCIS: EPC Information Service PML: Physical Markup language

5. 4 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland Identity Protection Privacy issues EPC-Code MUST be protected f(r1,r2,EPC-Code) Example Many proposal in the scientific literature f(r1,r2, EPC-Code) = SHA1 (r1 | r2 | EPC-Code) Reader Tag r1 r2, f(r1,r2, EPC-Code) S. Weis, S. Sarma, R. Rivest and D. Engels. "Security and privacy aspects of low-cost radio frequency identification systems." In D. Hutter, G. Muller, W. Stephan and M. Ullman, editors, International Conference on Security in Pervasive Computing - SPC 2003, volume 2802 of Lecture Notes in computer Science, pages 454- 469. Springer-Verlag, 2003.

6. 5 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland Main Ideas The TAG runs a modified version of HIP HIP Only! – NO IP stack The Reader is an IP node It acts as a docking host for HIP tag The Reader is not able to solve f The identity solver is located in a node called the PORTAL HIP dialog between Tag and Portal HIP packets MAY be encapsulated by a HAT (HIP Address Translation) layer.

7. 6 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland HIP-Tags Architecture IP MAC PHY IP MAC PHY RFID-MAC RFID-PHY RFID-MAC RFID-PHY HIP PortalTagReader HAT HIP Identity Solver SPI-I SPI-R ?

8. 7 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland T-BEX Exchange, I1-T HIT-I A random value generated by the tag HIT-R A known HIT A null value Tag Portal HIT-I, HIT-R

9. 8 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland T-BEX Exchange, R1-T r1, random value generated by the Portal. HIT-T-Transforms, list of f functions and associated parameters. ESP-Transforms, optional list of ESP- Transforms, used when a secure communication channel is requested. Tag Portal HIT-R, HIT-I, HIT-R(r1), HIT-T-Transforms, [ESP-Transforms]

10. 9 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland T-BEX Exchange, I2-T r2, random value generated by the Tag. HIT-T-Transform, selected f function. F-T, equation to solve ESP-Transform, optional selected ESP-Transform ESP-Info, optional info about ESP transform, includes the SPI-I value. Signature-T, signature of the I2-T message KI-Auth-key = g(r1, r2, EPC-Code) Tag Portal HIT-I, HIT-R, HIT-R(r2), HIT-T-Transform, F-T = f(r1,r2,EPC-Code), [ESP-Transform], [ESP-Info], Signature-T

11. 10 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland T-BEX Exchange, R2-T (Optional) ESP-Info, optional info about ESP transform, includes the SPI-R value. Signature-T, signature of the I2-T message r1, random value generated by the Portal. Tag Portal HIT-R, HIT-I, [ESP-Info], T-Signature Optional ESP Dialog

12. 11 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland Binary Encoding Next Header Payload Length Type VER RES ControlChecksum Sender’s HIT Receiver’s HIT HIP Parameters HIP Header TLVTypeData R-T HIP-T-TRANSFORM F-T SIGNATURE-T ESP-TRANSFORM ESP-INFO 0x400 0x402 0x404 0x406 0x408 0x40A Random value r1 or r2 HIP-Tag transform f function value Signature ESP transforms ESP parameters Type 0 15 16 31 Type (0x400)Length Padding-lengthValue Padding R-T 0 15 16 31 Type (0x404)Length Padding-lengthValue Padding F-T 0 15 16 31 Type (0x406)Length Padding-lengthSignature Padding Signature-T 0 15 16 31 Type (0x402)Length Padding-lengthSuite-ID#1 Length-of-suite-ID#1Value Suite-ID#2 …Padding HIP-T-Transform

13. 12 /12 Pascal URIEN, IETF 72 rd, Monday July 28 th Dublin, Ireland Questions ?