Science and Development Network (SciDev.Net)
Radio Frequency IDentification (RFID) is one of the key technologies which constitute internet of things. Security and privacy issues of RFID systems are the focus of the present paper. By analyzing several typical RFID security protocols, for the special security requirements of RFID systems in internet of things, in the paper, the authors propose a communication protocol SPAP (Security-Provable Authentication Protocol), then analyze and demonstrate the security of the protocol in details by the random oracle model. Analysis show that the protocol not only can solve the tag tracking, replay attack, cloning attack and the tag information indistinguishable, but also can solve the internal attack and the ownership transfer of tags and other issues of RFID Systems in internet of things.