Cryptology ePrint Archive: Report 2012/023

On the security of Lo et al.’s ownership transfer protocol

Masoumeh Safkhani and Nasour Bagheri and Majid Naderi and Ali Mahani

Abstract: Recently Lo et al. have proposed an ownership transfer pro- tocol for RFID objects using lightweight computing operators and claim their protocol provides stronger security robustness and higher perfor- mance efficiency in comparison with existing solutions. However, in this paper we show that their claim unfortunately does not hold. More pre- cisely, we present tag’s secret disclosure attack, new owner’s secret disclo- sure and fraud attack against the Lo et al.’s ownership transfer protocol. The success probability of all attacks is “1” while the complexity is only one run of protocol. Our observation shows that this protocol compro- mise the privacy of the tag and the new owner.

Category / Keywords: RFID, Ownership Transfer Protocol, Disclosure Attack, Fraud Attack.

Date: received 15 Jan 2012, last revised 17 Feb 2012

Contact author: nbagheri at srttu edu,na bagheri@gmail com

Available formats: Postscript (PS) | Compressed Postscript (PS.GZ) | PDF | BibTeX Citation

Version: 20120218:055052 (All versions of this report)

Discussion forum: Show discussion | Start new discussion