Paper 2013/187

Enhanced Ownership Transfer Protocol for RFID in an Extended Communication Model

Jorge Munilla, Alberto Peinado, Guoming Yang, and Willy Susilo

Abstract

Ownership Transfer Protocols for RFID allow transferring the rights over a tag from a current owner to a new owner in a secure and private way. Recently, Kapoor and Piramuthu have proposed two schemes which overcome most of the security weaknesses detected in previously published protocols. Still, this paper reviews that work and points out that such schemes still present some practical and security issues. In particular, they do not manage to guarantee the privacy of the new owner without the presence of a Trusted Third Party, and we find that the assumed communication model is not suitable for many practical scenarios. We then propose here a lightweight protocol that can be used in a wider range of applications, and which incorporates recently defined security properties such as Tag Assurance, Undeniable Ownership Transfer, Current Ownership Proof and Owner Initiation. Finally, this protocol is complemented with a proposed Key Change Protocol, based on noisy tags, which provides privacy to the new owner without either resorting to a Trusted Third Party or assuming an Isolated Environment.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Published elsewhere. Unknown where it was published
Keywords
RFIDOwnership Transfer ProtocolsPrivacyKey Change Protocol
Contact author(s)
munilla @ ic uma es
History
2013-04-02: received
Short URL
https://ia.cr/2013/187
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2013/187,
      author = {Jorge Munilla and Alberto Peinado and Guoming Yang and Willy Susilo},
      title = {Enhanced Ownership Transfer Protocol for {RFID} in an Extended Communication Model},
      howpublished = {Cryptology {ePrint} Archive, Paper 2013/187},
      year = {2013},
      url = {https://eprint.iacr.org/2013/187}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.