A new RFID mutual authentication protocol using light-weight hash functions

Abstract

For passive type RFID tags, EPCglobal Class 1 Generation-2 Revision has been widely used as a de facto standard. Since it was designed for low cost, it is vulnerable to security and privacy attacks such as eavesdropping, replay attacks, and spoofing attacks. In this paper, we present a new mutual authentication protocol, which uses only PRNG (pseudo random number generator) for ciyptographic primitives. By grouping tags, our protocol does not require complete enumeration on the server/reader. Compared with Flyweight that appeared in ACM Trans, on Information System Security 2011, our protocol uses only 60% (48bits) of memory space while communication overhead is similar to each other. We provide security analysis of the proposed protocol.