Security of an RFID Protocol for Supply Chains

Ton van Deursen; Saša Radomirović

doi:10.1109/ICEBE.2008.44

Security of an RFID Protocol for Supply Chains

Ton van Deursen, Saša Radomirović

Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

15 Citations (Scopus)

246 Downloads (Pure)

Abstract

We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.

Original language	English
Title of host publication	Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China
Editors	Jen-Yao Chung, Muhammad Younas
Place of Publication	Piscataway
Publisher	Institute of Electrical and Electronics Engineers
Pages	568-573
Number of pages	6
ISBN (Print)	9780769533957
DOIs	https://doi.org/10.1109/ICEBE.2008.44
Publication status	Published - 2008
Event	2008 IEEE International Conference on E-Business Engineering - Nan Yang Hotel located in the south of Xi'an JiaoTong University, Xi'an, China Duration: 22 Oct 2008 → 24 Oct 2008 http://conferences.computer.org/icebe/2008/index.htm (Link to Conference website)

Conference

Conference	2008 IEEE International Conference on E-Business Engineering
Abbreviated title	ICEBE 2008
Country/Territory	China
City	Xi'an
Period	22/10/08 → 24/10/08
Internet address	http://conferences.computer.org/icebe/2008/index.htm (Link to Conference website)

ASJC Scopus subject areas

Management of Technology and Innovation
Computer Networks and Communications
Software

Access to Document

10.1109/ICEBE.2008.44

Author Accepted Manuscript
© 2008 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Accepted author manuscript, 78.8 KB

Cite this

van Deursen, T., & Radomirović, S. (2008). Security of an RFID Protocol for Supply Chains. In J.-Y. Chung, & M. Younas (Eds.), Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China (pp. 568-573). Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/ICEBE.2008.44

van Deursen, Ton ; Radomirović, Saša. / Security of an RFID Protocol for Supply Chains. Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China . editor / Jen-Yao Chung ; Muhammad Younas . Piscataway : Institute of Electrical and Electronics Engineers, 2008. pp. 568-573

@inproceedings{e33538a3f1e44a789d1ac518b6e345ed,

title = "Security of an RFID Protocol for Supply Chains",

abstract = "We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.",

author = "{van Deursen}, Ton and Sa{\v s}a Radomirovi{\'c}",

note = "No funding info; 2008 IEEE International Conference on E-Business Engineering, ICEBE 2008 ; Conference date: 22-10-2008 Through 24-10-2008",

year = "2008",

doi = "10.1109/ICEBE.2008.44",

language = "English",

isbn = "9780769533957",

pages = "568--573",

editor = "Chung, {Jen-Yao } and {Younas }, {Muhammad }",

booktitle = "Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi{\textquoteright}an, China",

publisher = "Institute of Electrical and Electronics Engineers",

url = "http://conferences.computer.org/icebe/2008/index.htm",

}

van Deursen, T & Radomirović, S 2008, Security of an RFID Protocol for Supply Chains. in J-Y Chung & M Younas (eds), Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China . Institute of Electrical and Electronics Engineers, Piscataway, pp. 568-573, 2008 IEEE International Conference on E-Business Engineering, Xi'an, China, 22/10/08. https://doi.org/10.1109/ICEBE.2008.44

Security of an RFID Protocol for Supply Chains. / van Deursen, Ton; Radomirović, Saša.
Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China . ed. / Jen-Yao Chung; Muhammad Younas . Piscataway: Institute of Electrical and Electronics Engineers, 2008. p. 568-573.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Security of an RFID Protocol for Supply Chains

AU - van Deursen, Ton

AU - Radomirović, Saša

N1 - No funding info

PY - 2008

Y1 - 2008

N2 - We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.

AB - We report on the security claims of an RFID authentication protocol by Li and Ding which was specifically designed for use in supply chains. We show how the protocol's vulnerabilities can be used to track products, relate incoming and outgoing products, and extort supply chain partners. Starting from a discussion of the relevant security requirements for RFID protocols in supply chains, we proceed to illustrate several shortcomings in the protocol with respect to mutual authentication, unlinkability, and desynchronization resistance. We investigate the use of the xor operator in the protocol, suggest possible improvements, and point out flaws in the proofs of the security claims.

UR - http://www.scopus.com/inward/record.url?scp=58149094596&partnerID=8YFLogxK

U2 - 10.1109/ICEBE.2008.44

DO - 10.1109/ICEBE.2008.44

M3 - Conference contribution

AN - SCOPUS:58149094596

SN - 9780769533957

SP - 568

EP - 573

BT - Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China

A2 - Chung, Jen-Yao

A2 - Younas , Muhammad

PB - Institute of Electrical and Electronics Engineers

CY - Piscataway

T2 - 2008 IEEE International Conference on E-Business Engineering

Y2 - 22 October 2008 through 24 October 2008

ER -

van Deursen T, Radomirović S. Security of an RFID Protocol for Supply Chains. In Chung JY, Younas M, editors, Proceedings of the ICEBE 2008 IEEE International Conference on e-Business Engineering; AiR 2008 IEEE International Workshop on Advances in RFID; EM2I 2008 IEEE International Workshop on E-Marketplace Integration and Interoperability; SOAIC 2008 IEEE International Workshop on Service-Oriented Applications, Integration and Collaboration; SOKM 2008 IEEE International Workshop on Service-Oriented Knowledge Management; BIMA 2008 IEEE International Workshop on Business Intelligence Methodologies and Applications; DKEEE 2008 IEEE International Workshop on Data and Knowledge Engineering for E-service and E-business, October 22-24, 2008 Xi’an, China . Piscataway: Institute of Electrical and Electronics Engineers. 2008. p. 568-573 doi: 10.1109/ICEBE.2008.44

Security of an RFID Protocol for Supply Chains

Abstract

Conference

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this