Behzad Abdolmaleki
Hamidreza Bakhshi
Karim Baghery
Mohammad Reza Aref

In the past few years, the design of RFID authentication protocols in accordance with the EPC Class-۱ Generation-۲ (EPC C۱ G۲) standards, has been one of the most important challenges in the information security domain. Although RFID systems provide user-friendly services for end-users, they can make security and privacy concerns for them. In this paper we analyze the security of an RFID mutual authentication protocol which is based on EPC Class-۱ Generation-۲ standard and proposed in ۲۰۱۳. The designers of protocol claimed that their protocol is secure against different security attacks and provides user privacy. In this paper, we show that unlike their claims, their protocol is not secure against most of the security attacks such as replay attack, the tag’s ID exposure, and the spoofing attacks. As a result, their protocol cannot provide security of RFID users in different authentication applications. Finally, in order to prevent the aforementioned attacks and overcome all the existing weaknesses, we apply a modification in the updating procedure of the protocol and propose a strengthened version of it.

Security and Privacy, RFID Authentication protocols, EPC Class-۱ Generation-۲ standards