Secure EPC Gen2 Compliant Radio Frequency Identification

The increased functionality of EPC Class1 Gen2 (EPCGen2) is making this standard a de facto specification for inexpensive tags in the RFID industry. Recently three EPCGen2 compliant protocols that address security issues were proposed in the literature. In this paper we analyze these protocols and show that they are not secure and subject to replay/impersonation and statistical analysis attacks. We then propose an EPCGen2 compliant RFID protocol that uses the numbers drawn from synchronized pseudorandom number generators (RNG) to provide secure tag identification and session unlinkability. This protocol is optimistic and its security reduces to the (cryptographic) pseudorandomness of the RNGs supported by EPCGen2.

• Type: Conference
• Year: 2009
• Where: ADHOCNOW
• Authors: Mike Burmester, Breno de Medeiros, Jorge Munilla, Alberto Peinado
• Keywords: ADHOCNOW 2009, Compliant Protocols, Compliant Rfid Protocol, Computer Networks, Pseudorandom Number Generators