Comments on an Improved RFID Security Protocol for ISO/IEC WD 29167-6

ETRI Journal

关键词: RFID security;    authentication;    RFID;   

Others  :  1196820
DOI  :  10.4218/etrij.13.0212.0415

【 摘 要 】

With the rapid progress of RFID security technologies, the international standard group ISO/IEC JTC 1/SC 31 is developing a few security technologies for RFID systems. One of the initial proposals is ISO/IEC working draft (WD) 29167-6. Recently, Song and others stated that Protocol 1 of ISO/IEC WD 29167-6 is vulnerable to a malicious adversary. However, their analysis comes from a misunderstanding regarding a communication parameter called Handle. In this letter, we point out that an adversary cannot obtain any sensitive information from intervening in Protocol 1.

   

【 参考文献 】

• [1]D. Molnar and D. Wagner, "Privacy and Security in Library RFID: Issues, Practices, and Architectures," Proc. ACM-CCS, 2004, pp. 210-219.
• [2]H. Sun and W. Ting, "A Gen2-Based RFID Authentication Protocol for Security and Privacy," IEEE Trans. Mobile Computing, vol. 8, no. 8, Aug. 2009, pp. 1052-1062.
• [3]H.-B. Kang et al., "High Security FeRAM-Based EPC C1G2 UHF (860 MHz-960 MHz) Passive RFID Tag Chip," ETRI J., vol. 30, no. 6, Dec. 2008, pp. 826-832.
• [4]ISO/IEC WD 29167-6, Information Technology – Automatic Identification and Data Capture Techniques – Part 6: Air Interface for Security Services and File Management for RFID at 860-960 MHz, International Organization for Standardization, Aug. 2010.
• [5]ISO/IEC 18000-6, Information technology – Radio Frequency Identification for Item Management – Part 6: Parameters for Air Interface Communication at 860 MHz to 960 MHz, 2nd ed., International Organization for Standardization, Dec. 2010.
• [6]EPCglobal Specification for RFID Air Interface, Radio-Frequency Identity Protocols Class-1 Generation-2 UHF RFID Protocol for Communications at 860 MHz – 960 MHz, Version 1.0.9, GS1 EPCglobal, Jan. 2005.
• [7]ISO/IEC WD 29167-14, Information Technology – Automatic Identification and Data Capture Techniques – Part 14: Air Interface for Security Services Crypto Suite AES-OFB, International Organization for Standardization, Oct. 2011.
• [8]B. Song, J.Y. Hwang, and K.-A. Shim, "Security Improvement of an RFID Security Protocol of ISO/IEC WD 29167-6," IEEE Commun. Lett., vol. 15, no. 12, Dec. 2011, pp. 1375-1377.