Preserving Privacy of Mobile Reader Holders in Server-less RFID Authentication and Searching Protocols

TL;DR

This paper addresses the privacy concerns of mobile RFID reader holders in server-less authentication protocols, proposing a scheme that enhances existing protocols to improve privacy without compromising security.

Contribution

It introduces a detailed privacy-preserving requirement and a scheme that enhances current server-less RFID protocols to better protect mobile reader holder privacy.

Findings

Enhanced protocols are secure and effective

Scheme improves privacy without sacrificing performance

Applicable to classical RFID protocols

Abstract

Along with the development of internet of things and pervasive computing, researchers are increasingly focusing on server-less RFID authentication and searching protocols, which utilize mobile RFID readers. However, revealing privacy of mobile reader holders is a widely neglected problem in current research. This paper concentrates on preserving privacy of mobile reader holders in server-less RFID authentication and searching protocols. We propose a detailed requirement as a principle for future protocol designs, and a scheme to enhance most current protocols. We apply our scheme to two classical protocols. The comparisons between the original and our enhanced protocols show that our scheme is secure and effective.