Security analysis of a RFID authentication protocol based on physically unclonable function

doi:10.3724/SP.J.1087.2012.02280

Journal of Computer Applications ›› 2012, Vol. 32 ›› Issue (08): 2280-2282.DOI: 10.3724/SP.J.1087.2012.02280

• Information security • Previous Articles Next Articles

Security analysis of a RFID authentication protocol based on physically unclonable function

ZHANG Long-xiang

School of Information, Linyi University, Linyi Shandong, 276001, China

Received:2012-02-07 Revised:2012-03-12 Online:2012-08-28 Published:2012-08-01
Contact: ZHANG Long-xiang

一种基于不可复制功能的RFID认证协议的安全性分析

张龙翔

临沂大学信息学院，山东临沂 276001

通讯作者: 张龙翔
作者简介:张龙翔(1976-)，男，山东临沂人，讲师，硕士，主要研究方向：模式识别、数据库。

Abstract

Abstract: The Radio Frequency IDentification (RFID) authentication protocols based on Physically Unclonale Function (PUF) is a hot research field recent years. In 2011, Bassil et al. proposed a new RFID authentication protocol based on PUF in international conference on Internet technology and secured transactions (BASSIL R, EL-BEAINO W, KAYSSI A, et al. A PUF-based ultra-lightweight mutual-authentication RFID protocol [C]// 2011 International Conference on Internet Technology and Secured Transactions. Piscataway: IEEE, 2011: 495-499). The paper analyzed the security of this protocol by an imaginative adversary and found that it cannot resist secret disclosure attack, traceability attack, reader impersonation attack and desynchronization attack. The paper described the details of these attacks and computed their success probabilities and computation complexities.

Key words: Physically Unclonable Function (PUF), Radio Frequency IDentification (RFID) system, authentication protocol, security analysis, secret disclosure attack

摘要： 基于不可复制功能(PUF)的射频识别(RFID)认证协议是近年来的研究热点。2011年，Bassil等在ITST国际会议上提出了一种新的基于PUF的RFID认证协议(BASSIL R, EL-BEAINO W, KAYSSI A, et al. A PUF-based ultra-lightweight mutual-authentication RFID protocol [C]// 2011 International Conference on Internet Technology and Secured Transactions. Piscataway: IEEE, 2011: 495-499)。分析了该认证协议的安全性，通过假设敌手参与协议，指出其不能抵抗密钥泄露攻击、跟踪攻击，也不能抵抗阅读器冒充攻击以及同步破坏攻击；同时描述了这些攻击的细节，并给出了它们的成功概率和计算复杂度。

关键词: 不可复制功能, 射频识别系统, 认证协议, 安全性分析, 密钥泄露攻击

CLC Number:

TP309.7

ZHANG Long-xiang. Security analysis of a RFID authentication protocol based on physically unclonable function[J]. Journal of Computer Applications, 2012, 32(08): 2280-2282.

张龙翔. 一种基于不可复制功能的RFID认证协议的安全性分析[J]. 计算机应用, 2012, 32(08): 2280-2282.

References

[1]马昌社.前向隐私安全的低成本RFID认证协议[J].计算机学报，2011,34(8)：1387-1398. [2]PHAN R C-W， WU J, OUAFI K, et al. Privacy analysis of forward and backward untraceable RFID authentication schemes [J].Wireless Personal Communications，2011，61(1): 69-81. [3]AVOINE G, TCHAMKERTEN A. An efficient distance bounding RFID authentication protocol: Balancing false-acceptance rate and memory requirement [C]// ISC '09:Proceedings of the 12th International Conference on Information Security, LNCS 5735. Berlin:Springer-Verlag, 2009: 250-261. [4]王立斌，马昌社，王涛. 一种安全高效的RFID双边认证协议[J].JOCA， 2008， 28(8)： 2236-2238. [5]OUAFI K， PHAN R C-W. Privacy of recent RFID authentication protocols[C]// ISPEC '08: Proceedings of the 4th International Conference on Information Security Practice and Experience, LNCS 4991. Berlin: Springer-Verlag, 2008: 263-277. [6]SONG B, MITCHELL C J. RFID authentication protocol for low-cost tags [C]// WiSec '08: Proceedings of the First ACM Conference on Wireless Network Security. New York: ACM, 2008: 140-147. [7]PERIS-LOPEZ P, HERNANDEZ-CASTRO J C, TAPIADOR J M， et al. Advances in ultralightweight cryptography for low-cost RFID tags： Gossamer protocol [C]// 9th International Workshop on Information Security Applications, LNCS 5379. Berlin: Springer-Verlag, 2008： 56-68. [8]CAO TIANJIE, BERTINO E, LEI HONG. Security analysis of the SASI protocol [J].IEEE Transactions on Dependable and Secure Computing,2009,6(1):73-77. [9]SAFKHANI M, NADERI M, RASHVAND H F. Cryptanalysis of the Fast Lightweight Mutual Authentication Protocol (FLMAP) [J].International Journal of Computer and Communication Technology, 2010， 2(2/3/4): 182-186. [10]BASSIL R, EL-BEAINO W, KAYSSI A, et al. A PUF-based ultra-lightweight mutual-authentication RFID protocol [C]// 2011 International Conference on Internet Technology and Secured Transactions. Piscataway: IEEE, 2011: 495-499. [11]KULSENG L，YU Z，WEI Y,et al. Lightweight mutual authentication and ownership transfer for RFID systems [C]// Proceedings of IEEE INFOCOM 2010. Piscataway: IEEE, 2010: 1-5. [12]LEE Y S，PARK Y，LEE S，et al. RFID mutual authentication protocol with unclonable RFID-tags [C]// 2011 International Conference on Mobile IT Convergence.Piscataway:IEEE,2011:74-77. [13]杨灵，闫大顺.基于PUF的低成本RFID系统安全协议 [J].计算机工程,2010,36(15)：148-150. [14]周四方.一种新的双方认证密钥协商协议的安全性分析 [J].JOCA，2011，31(11)：2994-2996. [15]舒剑.高效的强安全的基于身份认证密钥协商协议 [J].JOCA，2012，32(1)：95-98.

Security analysis of a RFID authentication protocol based on physically unclonable function

一种基于不可复制功能的RFID认证协议的安全性分析

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	SHEN Ziyi, WANG Weiya, JIANG Donghua, RONG Xianwei. Visual image encryption algorithm based on Hopfield chaotic neural network and compressive sensing [J]. Journal of Computer Applications, 2021, 41(10): 2893-2899.
[2]	WANG Zhong, HAN Yiliang. Dual public-key cryptographic scheme based on improved Niederreiter cryptosystem [J]. Journal of Computer Applications, 2019, 39(7): 1997-2000.
[3]	MA Lan, CUI Bohua, LIU Xuan, YUE Meng, WU Zhijun. Hidden semi-Markov model-based approach to detect DDoS attacks in application layer of SWIM system [J]. Journal of Computer Applications, 2019, 39(7): 1973-1978.
[4]	SHI Zhicai, WANG Yihan, ZHANG Xiaomei, CHEN Shanshan, CHEN Jiwei. Provable radio frequency identification authentication protocol with scalability [J]. Journal of Computer Applications, 2019, 39(3): 774-778.
[5]	YANG Xingchun, XU Chunxiang, LI Chaorong. ECC-based RFID authentication protocol enabling tag ownership transfer [J]. Journal of Computer Applications, 2017, 37(8): 2275-2280.
[6]	WAN Zhiping. UAPL: Wireless sensor network user authentication based on improved Das protocol [J]. Journal of Computer Applications, 2014, 34(2): 452-455.
[7]	LI Hongjing LIU Dan. Matrix-based authentication protocol for RFID and BAN logic analysis [J]. Journal of Computer Applications, 2013, 33(07): 1854-1857.
[8]	YANG Chao ZHANG Hong-qi. RFID authentication protocol based on secret-sharing scheme [J]. Journal of Computer Applications, 2012, 32(12): 3458-3461.
[9]	YUAN Zheng-wu DUAN Li-dan. Enhanced binary search algorithm based on stack storage [J]. Journal of Computer Applications, 2012, 32(11): 3089-3091.
[10]	WANG Chang-da GONG Ting-ting ZHOU Cong-hua. Security analysis of digital rights management system based on usage control [J]. Journal of Computer Applications, 2012, 32(10): 2771-2775.
[11]	ZHANG Xue-jun CAI Wen-qi WANG Yu. Enhanced minimalist mutual-authentication protocol for RFID system [J]. Journal of Computer Applications, 2012, 32(09): 2395-2399.
[12]	XUE Feng WANG Ding WANG Li-ping MA Chun-guang. Cryptanalysis of two smartcard-based remote user password authentication protocols [J]. Journal of Computer Applications, 2012, 32(07): 2007-2009.
[13]	ZHANG Shun CHEN Hai-jin. Lightweight security authentication protocol for radio frequency identification [J]. Journal of Computer Applications, 2012, 32(07): 2010-2014.
[14]	TANG Yong-zheng WANG Ming-hui WANG Jian-dong. Enhanced secure RFID authentication protocol for EPC Gen2 [J]. Journal of Computer Applications, 2012, 32(04): 968-970.
[15]	HE Zhang-qing ZHENG Zhao-xia DAI Kui ZOU Xue-cheng. Low-cost RFID authentication protocol based on PUF [J]. Journal of Computer Applications, 2012, 32(03): 683-685.