Cloud Based RFID Authentication Protocol

Abstract

With the rapid developments of the cloud computing, cloud-based RFID systems attract more attention. We are replacing the RFID database servers with cloud server. We can reduce their cost of deploying and maintaining the RFID system by purchasing cloud services. We cannot directly use the traditional RFID authentication protocol in cloud based RFID systems. In cloud-based RFID systems, the connection between the reader and the cloud database is not secure and cloud service provider is not trusted. Therefore, the users have to encrypt their data stored in the cloud database to prevent the leakage of privacy. Normally the RFID system has tag, reader and back-end server. Tag and Reader communicate to each other via radio frequency. So before communication Tag and Reader should authenticate each other because communication occurs over an insecure airinterface. When we design authentication protocol, we cannot directly use the traditional symmetric or asymmetric algorithm because tags have very low memory. In this thesis we analyze many RFID authentication protocol and attacks on those protocols. We have proposed a cloud based RFID authentication protocol. We have used HLPSL (High Level Protocol Specification Language) for implementation. AVISPA tool is used for HLPSL. We consider that communication between reader and cloud is not secure. The proposed scheme has advantages in deployment cost, scalability, real-time authentication, and the tag’s computational complexity.