Protecting and Restraining the Third Party in RFID-Enabled 3PL Supply Chains

• Main Authors: CAI, Shaoying, SU, Chunhua, LI, Yingjiu, DENG, Robert H.
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2010
• Subjects: Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/1337; https://ink.library.smu.edu.sg/context/sis_research/article/2336/viewcontent/protecting_and_restraining_the_3rd_party_in_rfid_enables_3pl_supply_chains.pdf
• Institution: Singapore Management University

“Symmetric secret”-based RFID systems are widely adopted in supply chains. In such RFID systems, a reader’s ability to identify a RFID tag relies on the possession of the tag’s secret which is usually only known by its owner. If a “symmetric secret”-based RFID system is deployed in third party logistics (3PL) supply chains, all the three parties (the sender of the goods, the receiver of the goods and the 3PL provider) should have a copy of those tags’ secrets to access the tags. In case the three parties in 3PL supply chain are not all honest, sharing the secrets among the three parties will cause security and privacy problems. To solve these problems, we firstly formalize the security and privacy requirements of RFID system for 3PL supply considering the existence of the internal adversaries as well as the external adversaries. Then we propose two different protocols which satisfy the requirements, one is based on aggregate massage authentication codes, the other is based on aggregate signature scheme. Based on the comparisons of the two protocols on performance and usability, we get the conclusion that overall the aggregate MAC-based solution is more applicable in 3PL supply chains.