Internet of things (IoT) contains a massive number of “things” that are connected to the internet and communicates without human interaction. In these IoT devices, Radio frequency identification is used to detect the location of devices in communication networks. However, the RFID tag contains a low power battery and low memory capacity (i.e., few KB). Hence, it requires a lightweight or ultra-lightweight solutions for these RFID tags. This paper proposes a novel ultra-lightweight authenticate approach for a passive tag that uses XOR and rotate operations. This scheme contains three different phases: tag identification, mutual authentication, and pseudonyms and key updating phases. The first phase comprises the identification of the tag. After that, the second phase performs mutual authentication between the tag and the reader. The last phase involves the updating of the key between the tag and the reader. This scheme also defines the function “MIX” to enhance the security of the protocol. This scheme analyses in terms of communication cost between tag and reader, and storage cost for a passive tag.

物联网（IoT）包含大量“物”，这些物连接到Internet并在无需人工干预的情况下进行通信。在这些物联网设备中，射频识别用于检测通信网络中设备的位置。但是，RFID标签包含低功耗电池和低存储容量（即，几KB）。因此，对于这些RFID标签，需要轻量级或超轻量级的解决方案。本文针对使用XOR和旋转操作的无源标签提出了一种新颖的超轻量级身份验证方法。该方案包含三个不同的阶段：标签识别，相互认证，假名和密钥更新阶段。第一阶段包括标签的识别。之后，第二阶段在标签和读取器之间执行相互身份验证。最后一个阶段涉及标签和阅读器之间密钥的更新。该方案还定义了功能“ MIX”以增强协议的安全性。该方案根据标签和读取器之间的通信成本以及无源标签的存储成本进行分析。