RFID Security and Privacy

 Our major contribution in this field is to clarify the differences between two RFID privacy notions: one based on the indistinguishability of two tags (denoted as ind-privacy), and the other based on the unpredictability of the output of a protocol (denoted as unp-privacy). It is proven that ind-privacy is weaker than unp-privacy. Moreover, the minimal (necessary and sufficient) condition on RFID tags to achieve unpprivacy is determined.  A new framework on RFID privacy is developed based on zero knowledge (i.e., the indistinguishability between a real tag and a simulated tag). This concept is stronger than ind-privacy, and more reasonable than unp-privacy in practice.  A series of RFID protocols, including key distribution, reader-tag authentication, tag collision resolution, grouping proof, tag ownership transfer, and tag path authentication, are designed, analyzed, and evaluated to meet the secure and practical requirements in RFID applications such as RFID-enabled supply chains. • FUNDING: A Security Framework for EPCglobal Network. Public Sector Funding (PSF), A*STAR SERC, Aug 2009-Jan 2012.