Paper 2018/388 Original: eprint.iacr.org/2018/388 ↗

Security Analysis of Fan et al. Lightweight RFID Authentication Protocol for Privacy Protection in IoT

Seyed Farhad Aghili
Hamid Mala
Abstract

The designers of Radio-Frequency IDentification (RFID) systems have a challenging task for proposing secure mutual authentication protocols for Internet of Things (IoT) applications. Recently, Fan et al. proposed a new lightweight RFID mutual authentication protocol in the journal of IEEE Transactions on Industrial Informatics. They claimed that their protocol meets necessary security properties for RFID systems and can be applied for IoT. In this paper, we analyze the security of this protocol and show that it is vulnerable against secret disclosure, reader impersonation and tag traceability attacks. Additionally, we show that in their protocol the anonymity of the tag does not held.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2018-05-01: last updated
2018-05-01: published
Short URL
https://ia.cr/2018/388
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2018/388,
      author = {Seyed Farhad Aghili and Hamid Mala},
      title = {Security Analysis of Fan et al. Lightweight RFID Authentication Protocol for Privacy Protection in IoT},
      howpublished = {Cryptology {ePrint} Archive, Paper 2018/388},
      year = {2018},
      url = {https://eprint.iacr.org/2018/388}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.