Secure EPC Gen2 Compliant Radio Frequency Identification

Free registration required

Executive Summary

The increased functionality of EPC Class1 Gen2 (EPCGen2) is making this standard a de facto specification for inexpensive tags in the RFID industry. Recently three EPCGen2 compliant protocols that address security issues were proposed in the literature. This paper analyzes these protocols and show that they are not secure and subject to replay/impersonation and statistical analysis attacks. The authors then propose an EPCGen2 compliant RFID protocol that uses the numbers drawn from synchronized pseudoRandom Number Generators (RNG) to provide secure tag identification and session unlinkability. This protocol is optimistic and its security reduces to the (Cryptographic) pseudorandomness of the RNGs supported by EPCGen2.

  • Format: PDF
  • Size: 219.5 KB