Attacks on ownership transfer scheme for multi-tag multi-owner passive RFID environments.
Saved in:
| Title: | Attacks on ownership transfer scheme for multi-tag multi-owner passive RFID environments. |
|---|---|
| Authors: | Munilla, J.1 munilla@ic.uma.es, Burmester, M.2, Peinado, A.1 |
| Source: | Computer Communications. Aug2016, Vol. 88, p84-88. 5p. |
| Subjects: | Radio frequency identification systems, Computer network protocols, Computer security, Security management, Data privacy |
| Abstract: | Sundaresan et al. proposed recently a novel ownership transfer protocol for multi-tag multi-owner RFID environments that complies with the EPC Class1 Generation2 standard. The authors claim that this provides individual-owner privacy and prevents tracking attacks. We show that this protocol falls short of its security objectives, and describe attacks that allow: ( a ) an eavesdropper to trace a tag, ( b ) the previous owner to obtain the private information that the tag shares with the new owner, and ( c ) an adversary that has access to the data stored on a tag to link this tag to previous interrogations (violating forward-secrecy). We analyze the security proof and show that while the first two cases can be addressed with a more careful design, strong privacy remains an open problem for lightweight RFID applications. [ABSTRACT FROM AUTHOR] |
| Copyright of Computer Communications is the property of Elsevier B.V. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) | |
| Database: | Engineering Source |
| FullText | Text: Availability: 0 |
|---|---|
| Header | DbId: egs DbLabel: Engineering Source An: 115941493 AccessLevel: 6 PubType: Academic Journal PubTypeId: academicJournal PreciseRelevancyScore: 0 |
| IllustrationInfo | |
| Items | – Name: Title Label: Title Group: Ti Data: Attacks on ownership transfer scheme for multi-tag multi-owner passive RFID environments. – Name: Author Label: Authors Group: Au Data: <searchLink fieldCode="AR" term="%22Munilla%2C+J%2E%22">Munilla, J.</searchLink><relatesTo>1</relatesTo><i> munilla@ic.uma.es</i><br /><searchLink fieldCode="AR" term="%22Burmester%2C+M%2E%22">Burmester, M.</searchLink><relatesTo>2</relatesTo><br /><searchLink fieldCode="AR" term="%22Peinado%2C+A%2E%22">Peinado, A.</searchLink><relatesTo>1</relatesTo> – Name: TitleSource Label: Source Group: Src Data: <searchLink fieldCode="JN" term="%22Computer+Communications%22">Computer Communications</searchLink>. Aug2016, Vol. 88, p84-88. 5p. – Name: Subject Label: Subjects Group: Su Data: <searchLink fieldCode="DE" term="%22Radio+frequency+identification+systems%22">Radio frequency identification systems</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+network+protocols%22">Computer network protocols</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+security%22">Computer security</searchLink><br /><searchLink fieldCode="DE" term="%22Security+management%22">Security management</searchLink><br /><searchLink fieldCode="DE" term="%22Data+privacy%22">Data privacy</searchLink> – Name: Abstract Label: Abstract Group: Ab Data: Sundaresan et al. proposed recently a novel ownership transfer protocol for multi-tag multi-owner RFID environments that complies with the EPC Class1 Generation2 standard. The authors claim that this provides individual-owner privacy and prevents tracking attacks. We show that this protocol falls short of its security objectives, and describe attacks that allow: ( a ) an eavesdropper to trace a tag, ( b ) the previous owner to obtain the private information that the tag shares with the new owner, and ( c ) an adversary that has access to the data stored on a tag to link this tag to previous interrogations (violating forward-secrecy). We analyze the security proof and show that while the first two cases can be addressed with a more careful design, strong privacy remains an open problem for lightweight RFID applications. [ABSTRACT FROM AUTHOR] – Name: AbstractSuppliedCopyright Label: Group: Ab Data: <i>Copyright of Computer Communications is the property of Elsevier B.V. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.) |
| PLink | https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=115941493 |
| RecordInfo | BibRecord: BibEntity: Identifiers: – Type: doi Value: 10.1016/j.comcom.2016.05.007 Languages: – Code: eng Text: English PhysicalDescription: Pagination: PageCount: 5 StartPage: 84 Subjects: – SubjectFull: Radio frequency identification systems Type: general – SubjectFull: Computer network protocols Type: general – SubjectFull: Computer security Type: general – SubjectFull: Security management Type: general – SubjectFull: Data privacy Type: general Titles: – TitleFull: Attacks on ownership transfer scheme for multi-tag multi-owner passive RFID environments. Type: main BibRelationships: HasContributorRelationships: – PersonEntity: Name: NameFull: Munilla, J. – PersonEntity: Name: NameFull: Burmester, M. – PersonEntity: Name: NameFull: Peinado, A. IsPartOfRelationships: – BibEntity: Dates: – D: 15 M: 08 Text: Aug2016 Type: published Y: 2016 Identifiers: – Type: issn-print Value: 01403664 Numbering: – Type: volume Value: 88 Titles: – TitleFull: Computer Communications Type: main |
| ResultId | 1 |
