Secure Ownership and Ownership Transfer in RFID Systems

Ton van Deursen, Sjouke Mauw, Saša Radomirović, Pim Vullers

Research output: Chapter in Book/Report/Conference proceedingConference contribution

37 Citations (Scopus)


We present a formal model for stateful security protocols. This model is used to define ownership and ownership transfer as concepts as well as security properties. These definitions are based on an intuitive notion of ownership related to physical ownership. They are aimed at RFID systems, but should be applicable to any scenario sharing the same intuition of ownership. We discuss the connection between ownership and the notion of desynchronization resistance and give the first formal definition of the latter. We apply our definitions to existing RFID protocols, exhibiting attacks on desynchronization resistance, secure ownership, and secure ownership transfer.

Original languageEnglish
Title of host publicationComputer Security - ESORICS 2009
Subtitle of host publication14th European Symposium on Research in Computer Security Saint-Malo, France, September 21-23, 2009. Proceedings
EditorsMichael Backes, Peng Ning
Place of PublicationBerlin
PublisherSpringer Verlag
Number of pages18
ISBN (Print)9783642044434
Publication statusPublished - 2009
Event14th European Symposium on Research in Computer Security - Palais du Grand Large, Congress center of Saint Malo, Saint-Malo, France
Duration: 21 Sept 200923 Sept 2009 (Link to Conference website)

Publication series

NameLecture Notes in Computer Science
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Conference14th European Symposium on Research in Computer Security
Abbreviated titleESORICS 2009
Internet address


  • Desynchronization resistance
  • Formal verification
  • Ownership
  • Ownership transfer
  • RFID protocols

ASJC Scopus subject areas

  • General Computer Science
  • Theoretical Computer Science


Dive into the research topics of 'Secure Ownership and Ownership Transfer in RFID Systems'. Together they form a unique fingerprint.

Cite this