RFID authentication protocol design via BAN logic

Tag cost and privacy of RFID technology are two main factors that determine whether it will be applied to Internet of Things on a large scale. Recently, RFID industry and research community have focused on RFID authentication protocols with provable privacy and low tag cost. In this paper, we propose an RFID security protocol that achieves all security requirements based on a hash function and XOR operations. In addition, BAN logic was used to do the formal analysis and proved that the proposed protocol is safe and reachable. The RFID technology is widely used for industrial and individual applications. In the latest design of RFID system, the mobile handheld reader generally is adopted, so considering the RFID system's security and efficiency, we should consider two aspects’ security of reader and tags at the same time in the proposed protocol. The ensuring strong privacy has been an enormous challenge due to extremely inadequate computational power of typical RFID tags. In the proposed protocol, to achieve mutual authentication between the server and the Tags, at the same time we also achieve mutual authentication between the server and the mobile reader.