Quantifying Information Leakage in Tree-Based Hash Protocols (Short Paper)

Radio Frequency Identification (RFID) systems promise large scale, automated tracking solutions but also pose a threat to customer privacy. The tree-based hash protocol proposed by Molnar and Wagner presents a scalable, privacy-preserving solution. Previous analyses of this protocol concluded that an attacker who can extract secrets from a large number of tags can compromise privacy of other tags. We propose a new metric for information leakage inRFIDprotocols alongwith a threatmodel that more realistically captures the goals and capabilities of potential attackers. Using this metric, we measure the information leakage in the treebased hash protocol and estimate an attacker’s probability of success in tracking targeted individuals, considering scenarios in which multiple information sources can be combined to track an individual. We conclude that an attacker has a reasonable chance of tracking tags when the treebased hash protocol is used.