Security Analysis of Fan et al. Lightweight RFID Authentication Protocol for Privacy Protection in IoT

Seyed Farhad Aghili; Hamid Mala

Paper 2018/388

Security Analysis of Fan et al. Lightweight RFID Authentication Protocol for Privacy Protection in IoT

Seyed Farhad Aghili and Hamid Mala

Abstract

The designers of Radio-Frequency IDentification (RFID) systems have a challenging task for proposing secure mutual authentication protocols for Internet of Things (IoT) applications. Recently, Fan et al. proposed a new lightweight RFID mutual authentication protocol in the journal of IEEE Transactions on Industrial Informatics. They claimed that their protocol meets necessary security properties for RFID systems and can be applied for IoT. In this paper, we analyze the security of this protocol and show that it is vulnerable against secret disclosure, reader impersonation and tag traceability attacks. Additionally, we show that in their protocol the anonymity of the tag does not held.

Metadata

Available format(s): PDF
Category: Cryptographic protocols
Publication info: Preprint. MINOR revision.
Keywords: RFID IoT Secret disclosure Impersonation attack Anonymity
Contact author(s): aghili farhad60 @ gmail com
History: 2018-05-01: received
Short URL: https://ia.cr/2018/388
License: CC BY

BibTeX

@misc{cryptoeprint:2018/388,
      author = {Seyed Farhad Aghili and Hamid Mala},
      title = {Security Analysis of Fan et al. Lightweight {RFID} Authentication Protocol for Privacy Protection in {IoT}},
      howpublished = {Cryptology {ePrint} Archive, Paper 2018/388},
      year = {2018},
      url = {https://eprint.iacr.org/2018/388}
}