A Realistic Lightweight Authentication Protocol for Securing Cloud Based RFID System

Abstract

RFID is a wireless system which uses electromagnetic fields in identifying and tracking the tags attached to objects. Many researchers have proposed RFID based authentication schemes under the assumption that the back end server is trustworthy. This pre assumption is not found to be valid in cloud centered RFID scenarios where the tag data is outsourced to insecure third party cloud. In this context, in 2013, Xie et al had proposed a first of its kind of cloud based RFID authentication scheme. In 2015, Abughazalah et al has presented that Xie et al scheme is susceptible to reader impersonation attack, tag location tracking attack and proposed an improved version. After detailed analysis, we will demonstrate that Abughazalah et al scheme still lacks to accomplish tag location privacy. As a portion of our contribution, we propose a cloud centered RFID authentication scheme, which is robust and resistant to the above attacks. We formally evaluate the security strong points of our scheme using widely recognized CasperFDR tool.