On the Security of Moessner's and Khan's Authentication Scheme for Passive EPCglobal C1G2 RFID Tags

RFID technology is one of the most promising automatic data collection technologies. It uses radio waves to identify object. Through automatic and real-time data acquisition, this technology can give a great benefit to various industries by improving the efficiency of their operations. Due to the increasing popularity of RFID applications, different authentication schemes have been proposed to provide security and privacy protection for users. Recently, Moessner’s and Khan’s proposed an authentication scheme for passive RFID tags that can be embeddable into the ubiquitous EPCglobal C1G2 protocol in order to offers a high level of security through the combination of a random key scheme with a strong cryptography. In this paper a tag traceability attack and a server impersonation attack are presented. An improved scheme that eliminates these two attacks and decreases the storage requirements is also presented. These improvements introduce slight modification to the scheme.