AnonEPC - Making the Querying User Anonymous in EPCglobal Network

Publication Type

Conference Proceeding Article

Publication Date

9-2014

Abstract

The EPCglobal network is a major step towards automating supply chain by providing each product with an RFID tag and a unique EPC number. In an EPCglobal Network, it is important to make the querying users anonymous in order to prevent others in the supply chain from knowing that they are querying for a particular EPC number. This type of behavior is motivated by competitive strategies and the sensitive nature of the information being shared through the EPCglobal Network. In this paper, we suggest a design which enables the querying users to remain anonymous by using security tokens to authenticate themselves while keeping their identities hidden. To the best of our knowledge, this is the first work which deals with the user anonymity in the case of EPCglobal network. We propose an enhanced EPCglobal Network which consists of a secure EPCDS, a secure EPCIS and a mechanism by which the user can remain anonymous without compromising the security of the data and at the same time conforming to the access control policies published by each of the EPCISes. Our analysis shows that our solution is more practical in comparison to the original EPCglobal network design and the SecDS model that we are extending.

Keywords

Access Control, EPC Discovery Services, EPCglobal Network, Internet of Things

Discipline

Information Security

Research Areas

Cybersecurity

Publication

2014 IEEE RFID Technology and Applications Conference (RFID-TA): 8-9 September 2014 in Tampere, Finland

First Page

289

Last Page

294

ISBN

9781479946808

Identifier

10.1109/RFID-TA.2014.6934244

Publisher

IEEE

City or Country

Piscataway, NJ

Additional URL

http://dx.doi.org/10.1109/RFID-TA.2014.6934244

Link to Full Text

Share

COinS