Abstract

Radio Frequency Identification (RFID) systems authenticate products as well as people without any physical contact. Using RFID systems is an inevitable part of recent identifying and shopping affairs. However, RFID systems have huge hardware limitations in tags side because of their need to be as cheap as possible and in access for vast number of products. Moreover, The identity of the tag owners has to be anonymous and secure from the attackers actions. These critical necessities have made researchers to concentrate on designing lightweight secure authentication protocols. In this paper, four new designed lightweight RFID authentication protocols are analyzed. Security and privacy of each protocol is analyzed, and the weaknesses are proved, discussed and modified. We demonstrate that none of them provide even weak privacy level. Each protocol is improved through a solution to overcome the weaknesses and provide at least the weak privacy. All of the privacy and security analysis are done in the Vaudenay model. Also, we propose a new lightweight protocol which uses the pros of the considered protocols and provides weak privacy level. Moreover, some comprehensive methods are proposed to provide weak privacy in the lightweight authentication protocols.

中文翻译：

---

可以进行隐私分析并改进轻型RFID身份验证协议

摘要

射频识别（RFID）系统可以对产品和人员进行身份验证，而无需任何物理接触。使用RFID系统是最近的识别和购物事务的必然部分。但是，RFID系统在标签方面具有巨大的硬件局限性，因为它们需要尽可能便宜并且可以访问大量产品。此外，标签所有者的身份必须是匿名的，并且可以防止攻击者的行为。这些关键需求使研究人员可以集中精力设计轻量级安全身份验证协议。本文分析了四种新设计的轻量级RFID身份验证协议。分析了每种协议的安全性和私密性，并对弱点进行了证明，讨论和修正。我们证明，它们都不提供弱的隐私级别。通过解决方案来改进每个协议，以克服这些弱点并至少提供弱的隐私。所有隐私和安全性分析均在Vaudenay模型中完成。另外，我们提出了一种新的轻量级协议，该协议利用了所考虑协议的优点，并提供了较弱的隐私级别。此外，提出了一些综合方法来在轻量认证协议中提供弱保密性。