KEDGEN2: A key establishment and derivation protocol for EPC Gen2 RFID systems

Wiem Tounsi (1, 2) , Nora Cuppens-Boulahia (1, 2) , Joaquin Garcia Alfaro (3, 4) , Yannick Chevalier (5, 6) , Frédéric Cuppens (1, 2)

1 Lab-STICC_TB_CID_SFIIS
2 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information
3 SAMOVAR - Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux
4 CNRS - Centre National de la Recherche Scientifique
5 IRIT-LILaC - Logique, Interaction, Langue et Calcul
6 UT3 - Université Toulouse III - Paul Sabatier

The EPC Class-1 Generation-2 (Gen2 for short) is a Radio Frequency IDentification (RFID) technology that is gaining a prominent place in several domains. However, the Gen2 standard lacks verifiable security functionalities. Eavesdropping attacks can, for instance, affect the security of applications based on the Gen2 technology. To address this problem, RFID tags must be equipped with a robust mechanism to authenticate readers before authorising them to access their data. In this paper, we propose a key establishment and derivation protocol, which is applied at both identification phase and those remainder operations requiring security. Our solution is based on a pseudorandom number generator that uses a low computational workload, while ensuring long term secure communication to protect the secrecy of the exchanged data. Mutual authentication of the tag and the sensor and strong notions of secrecy such as forward and backward secrecy are analysed, and we prove formally that after being amended, our protocol is secure with respect to these properties.

Mots clés: Leightweight cryptography; Electronic Product Code; Radio Frequency IDentification; Protocol verification; Model checking

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]

Wiem Tounsi, Nora Cuppens-Boulahia, Joaquin Garcia Alfaro, Yannick Chevalier, Frédéric Cuppens. KEDGEN2: A key establishment and derivation protocol for EPC Gen2 RFID systems. Journal of Network and Computer Applications (JNCA), 2014, 39, pp.152 - 166. ⟨10.1016/j.jnca.2013.06.002⟩. ⟨hal-00845810⟩