PEM4RFID: Privacy enhancement model for RFID systems

Abstract

With the wider application of radio frequency identification (RFID) technology in various vital systems, more and more privacy threats and security flaws have been emerging. Traditional RFID systems only focus attention on foundational implementation, which lacks privacy protection and effective identity authentication. To solve the privacy protection problem of RFID systems, this paper proposes PEM4RFID privacy enhancement model FOR RFID: a “2+2” identity authentication mechanism, which includes a two-factor authentication protocol (TFAP) based on “two-way authentication”. Our TFAP adopts “hardware information+AES-ECC encryption” method, and while the “two-way authentication” is based on improved combined public key (CPK). Case study shows that our proposed PEM4RFID has characteristics of untraceability and nonrepeatability of instructions, which realizes a good trade-off between privacy and security in RFID systems.