Internet of things (IoT) is made up of many devices like sensors, tags, actuators, mobile devices, and many more. These devices interact with each other without human interaction. Radio-frequency identification (RFID) devices are used to track people, assets, objects, etc. Along with the small memory capacity and low-power battery issues, these devices suffer from various security-related issues. These security threats include attacks such as replay, disclosure, tracking, offline guessing, denial of service attacks, and many more. In the last few decades, the researchers have suggested various security approaches to overcome these vulnerabilities. Hence, this paper discusses various possible attacks that can occur on an RFID system, and several security schemes that have been proposed to handle these attacks. First, the works presents the architecture of IoT in detail. Second, all possible attacks are described by categorizing them into confidentiality, integrity, and availability. Then, taxonomy of various security schemes, to deal with these attacks, is discussed under the criteria cryptography approaches, privacy, authentication, authorization, and availability. Finally, the paper describes various issues and challenges to have a better understanding of scope of the future research in the field of RFID security.

物联网（IoT）由许多设备组成，例如传感器，标签，执行器，移动设备等等。这些设备彼此交互，无需人工干预。射频识别（RFID）设备用于跟踪人员，资产，物体等。除了存储容量小和电池电量不足的问题之外，这些设备还遇到各种与安全性相关的问题。这些安全威胁包括重放，泄露，跟踪，脱机猜测，拒绝服务攻击等攻击。在过去的几十年中，研究人员提出了各种安全措施来克服这些漏洞。因此，本文讨论了可能在RFID系统上发生的各种可能的攻击，以及为解决这些攻击而提出的几种安全方案。第一的，作品详细介绍了物联网的架构。其次，通过将所有可能的攻击分类为机密性，完整性和可用性来描述它们。然后，在密码学方法，隐私，身份验证，授权和可用性的标准下，讨论了应对这些攻击的各种安全方案的分类法。最后，本文描述了各种问题和挑战，以更好地理解RFID安全领域的未来研究范围。