Security of an RFID protocol for supply chains

Ton van Deursen; Saša Radomirović

doi:10.1109/ICEBE.2008.44

Security of an RFID protocol for supply chains

Ton van Deursen^*, Saša Radomirović

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

15 Citations (Scopus)

Abstract

We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.

Original language	English
Title of host publication	2008 IEEE International Conference on e-Business Engineering
Publisher	IEEE
Pages	568-573
Number of pages	6
ISBN (Print)	9780769533957
DOIs	https://doi.org/10.1109/ICEBE.2008.44
Publication status	Published - 2 Dec 2008
Event	2008 IEEE International Conference on e-Business Engineering - Xi'an, China Duration: 22 Oct 2008 → 24 Oct 2008

Conference

Conference	2008 IEEE International Conference on e-Business Engineering
Abbreviated title	ICEBE'08
Country/Territory	China
City	Xi'an
Period	22/10/08 → 24/10/08

ASJC Scopus subject areas

Management of Technology and Innovation
Computer Networks and Communications
Software

Access to Document

10.1109/ICEBE.2008.44

Cite this

@inproceedings{17cba63f35fa424fab4c5349fb1e24de,

title = "Security of an RFID protocol for supply chains",

abstract = "We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.",

author = "{van Deursen}, Ton and Sa{\v s}a Radomirovi{\'c}",

year = "2008",

month = dec,

day = "2",

doi = "10.1109/ICEBE.2008.44",

language = "English",

isbn = "9780769533957",

pages = "568--573",

booktitle = "2008 IEEE International Conference on e-Business Engineering",

publisher = "IEEE",

address = "United States",

note = "2008 IEEE International Conference on e-Business Engineering, ICEBE'08 ; Conference date: 22-10-2008 Through 24-10-2008",

}

TY - GEN

T1 - Security of an RFID protocol for supply chains

AU - van Deursen, Ton

AU - Radomirović, Saša

PY - 2008/12/2

Y1 - 2008/12/2

N2 - We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.

AB - We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.

UR - http://www.scopus.com/inward/record.url?scp=58149094596&partnerID=8YFLogxK

U2 - 10.1109/ICEBE.2008.44

DO - 10.1109/ICEBE.2008.44

M3 - Conference contribution

AN - SCOPUS:58149094596

SN - 9780769533957

SP - 568

EP - 573

BT - 2008 IEEE International Conference on e-Business Engineering

PB - IEEE

T2 - 2008 IEEE International Conference on e-Business Engineering

Y2 - 22 October 2008 through 24 October 2008

ER -

Security of an RFID protocol for supply chains

Abstract

Conference

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this