Security analysis on a family of ultra-lightweight RFID authentication protocols

In this paper, we analyze the security vulnerabilities of a family of ultra-lightweight RFID mutual authentication protocols: LMAP, M2AP and EMAP, which are recently proposed by Peris-Lopez et al. We identify two effective attacks, namely de-synchronization attack and full-disclosure attack, against...

Full description

Saved in:
Bibliographic Details
Main Authors: LI, Tieyan, WANG, Guilin, DENG, Robert H.
Format: text
Language:English
Published: Institutional Knowledge at Singapore Management University 2008
Subjects:
Online Access:https://ink.library.smu.edu.sg/sis_research/795
http://dx.doi.org/10.4304/jsw.3.3.1-10
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Singapore Management University
Language: English
id sg-smu-ink.sis_research-1794
record_format dspace
spelling sg-smu-ink.sis_research-17942010-11-26T07:24:03Z Security analysis on a family of ultra-lightweight RFID authentication protocols LI, Tieyan WANG, Guilin DENG, Robert H. In this paper, we analyze the security vulnerabilities of a family of ultra-lightweight RFID mutual authentication protocols: LMAP, M2AP and EMAP, which are recently proposed by Peris-Lopez et al. We identify two effective attacks, namely de-synchronization attack and full-disclosure attack, against their protocols. The former permanently disables the authentication capability of a RFID tag by destroying synchronization between the tag and the RFID reader. It can be carried out in just single round of interaction in the authentication protocols. The latter completely compromises a tag by extracting all the secret information stored in the tag. It is accomplished across several runs of the protocols. Moreover, we point out the potential countermeasures to improve the security of above protocols. 2008-03-01T08:00:00Z text https://ink.library.smu.edu.sg/sis_research/795 info:doi/10.4304/jsw.3.3.1-10 http://dx.doi.org/10.4304/jsw.3.3.1-10 Research Collection School Of Computing and Information Systems eng Institutional Knowledge at Singapore Management University RFID authentication security and privacy ultra-lightweight primitives Information Security
institution Singapore Management University
building SMU Libraries
continent Asia
country Singapore
Singapore
content_provider SMU Libraries
collection InK@SMU
language English
topic RFID authentication
security and privacy
ultra-lightweight primitives
Information Security
spellingShingle RFID authentication
security and privacy
ultra-lightweight primitives
Information Security
LI, Tieyan
WANG, Guilin
DENG, Robert H.
Security analysis on a family of ultra-lightweight RFID authentication protocols
description In this paper, we analyze the security vulnerabilities of a family of ultra-lightweight RFID mutual authentication protocols: LMAP, M2AP and EMAP, which are recently proposed by Peris-Lopez et al. We identify two effective attacks, namely de-synchronization attack and full-disclosure attack, against their protocols. The former permanently disables the authentication capability of a RFID tag by destroying synchronization between the tag and the RFID reader. It can be carried out in just single round of interaction in the authentication protocols. The latter completely compromises a tag by extracting all the secret information stored in the tag. It is accomplished across several runs of the protocols. Moreover, we point out the potential countermeasures to improve the security of above protocols.
format text
author LI, Tieyan
WANG, Guilin
DENG, Robert H.
author_facet LI, Tieyan
WANG, Guilin
DENG, Robert H.
author_sort LI, Tieyan
title Security analysis on a family of ultra-lightweight RFID authentication protocols
title_short Security analysis on a family of ultra-lightweight RFID authentication protocols
title_full Security analysis on a family of ultra-lightweight RFID authentication protocols
title_fullStr Security analysis on a family of ultra-lightweight RFID authentication protocols
title_full_unstemmed Security analysis on a family of ultra-lightweight RFID authentication protocols
title_sort security analysis on a family of ultra-lightweight rfid authentication protocols
publisher Institutional Knowledge at Singapore Management University
publishDate 2008
url https://ink.library.smu.edu.sg/sis_research/795
http://dx.doi.org/10.4304/jsw.3.3.1-10
_version_ 1770570718831968256