Protecting and Restraining the Third Party in RFID-Enabled 3PL Supply Chains
Conference Proceeding Article
“Symmetric secret”-based RFID systems are widely adopted in supply chains. In such RFID systems, a reader’s ability to identify a RFID tag relies on the possession of the tag’s secret which is usually only known by its owner. If a “symmetric secret”-based RFID system is deployed in third party logistics (3PL) supply chains, all the three parties (the sender of the goods, the receiver of the goods and the 3PL provider) should have a copy of those tags’ secrets to access the tags. In case the three parties in 3PL supply chain are not all honest, sharing the secrets among the three parties will cause security and privacy problems. To solve these problems, we firstly formalize the security and privacy requirements of RFID system for 3PL supply considering the existence of the internal adversaries as well as the external adversaries. Then we propose two different protocols which satisfy the requirements, one is based on aggregate massage authentication codes, the other is based on aggregate signature scheme. Based on the comparisons of the two protocols on performance and usability, we get the conclusion that overall the aggregate MAC-based solution is more applicable in 3PL supply chains.
Information Security and Trust
Information Systems Security: 6th International Conference, ICISS 2010, Gandhinagar, India, December 17-19: Proceedings
City or Country
CAI, Shaoying; SU, Chunhua; LI, Yingjiu; and DENG, Robert H..
Protecting and Restraining the Third Party in RFID-Enabled 3PL Supply Chains. (2010). Information Systems Security: 6th International Conference, ICISS 2010, Gandhinagar, India, December 17-19: Proceedings. 6503, 246-260. Research Collection School Of Information Systems.
Available at: http://ink.library.smu.edu.sg/sis_research/1337