Publication Type

Conference Proceeding Article

Version

acceptedVersion

Publication Date

12-2010

Abstract

“Symmetric secret”-based RFID systems are widely adopted in supply chains. In such RFID systems, a reader’s ability to identify a RFID tag relies on the possession of the tag’s secret which is usually only known by its owner. If a “symmetric secret”-based RFID system is deployed in third party logistics (3PL) supply chains, all the three parties (the sender of the goods, the receiver of the goods and the 3PL provider) should have a copy of those tags’ secrets to access the tags. In case the three parties in 3PL supply chain are not all honest, sharing the secrets among the three parties will cause security and privacy problems. To solve these problems, we firstly formalize the security and privacy requirements of RFID system for 3PL supply considering the existence of the internal adversaries as well as the external adversaries. Then we propose two different protocols which satisfy the requirements, one is based on aggregate massage authentication codes, the other is based on aggregate signature scheme. Based on the comparisons of the two protocols on performance and usability, we get the conclusion that overall the aggregate MAC-based solution is more applicable in 3PL supply chains.

Discipline

Information Security

Research Areas

Information Security and Trust

Publication

Information Systems Security: 6th International Conference, ICISS 2010, Gandhinagar, India, December 17-19: Proceedings

Volume

6503

First Page

246

Last Page

260

ISBN

9783642177149

Identifier

10.1007/978-3-642-17714-9_18

Publisher

Springer Verlag

City or Country

Gandhinagar, India

Additional URL

http://dx.doi.org/10.1007/978-3-642-17714-9_18

Download

Share

COinS