Cryptology ePrint Archive: Report 2013/712

PUF-Based RFID Authentication Secure and Private under Complete Memory Leakage

Daisuke Moriyama and Shin'ichiro Matsuo and Moti Yung

Abstract: RFID tags are getting their presence noticeable and are expected to become an important tool for e-commerce, logistics, point-ofsale transactions, and so on, representing “things” and “human holding things” in transactions. Since a huge amount of tags are expected to be needed to be attached to various “objects,” a low-cost tag manufacturing is necessary. Thus, it is hard to imagine they will implement costly hardware protection mechanisms (like co-processor, TPMs). Therefore, in this context memory leakage (side-channel) attacks become a critical threat. Another well known threat to RFID devices is tag tracing implying violation of privacy. We consider physically unclonable functions (PUFs) as tamper resilient building blocks cheaper than protected hardware, and propose security against a memory leaking adversary, trying to violate security and privacy of tags (we emphasize that digitally-oriented PUFs are easy to implement and they are more likely than TPMs to be implemented in RFID chips, more so than TPMs). We then design the first provably secure and provably private RFID authentication protocol withstanding information leakage from the entire non-volatile memory of the tag, and show its two properties: (1) security against impersonation, and (2) privacy protection against tag tracing.

Category / Keywords: PUF, RFID, authentication, memory leakage, provable security and privacy

Date: received 31 Oct 2013, last revised 4 Mar 2014

Contact author: dmoriyam at nict go jp

Available format(s): PDF | BibTeX Citation

Version: 20140304:235650 (All versions of this report)

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]