Title
SecLAP: Secure and lightweight RFID authentication protocol for Medical IoT
Abstract
The safety of medical data and equipment plays a vital role in today’s world of Medical Internet of Things (MIoT). These IoT devices have many constraints (e.g., memory size, processing capacity, and power consumption) that make it challenging to use cost-effective and energy-efficient security solutions. Recently, researchers have proposed a few Radio-Frequency Identification (RFID) based security solutions for MIoT. The use of RFID technology in securing IoT systems is rapidly increasing because it provides secure and lightweight safety mechanisms for these systems. More recently, authors have proposed a lightweight RFID mutual authentication (LRMI) protocol. The authors argue that LRMI meets the necessary security requirements for RFID systems, and the same applies to MIoT applications as well. In this paper, our contribution has two-folds, firstly we analyze the LRMI protocol’s security to demonstrate that it is vulnerable to various attacks such as secret disclosure, reader impersonation, and tag traceability. Also, it is not able to preserve the anonymity of the tag and the reader. Secondly, we propose a new secure and lightweight mutual RFID authentication (SecLAP) protocol, which provides secure communication and preserves privacy in MIoT systems. Our security analysis shows that the SecLAP protocol is robust against de-synchronization, replay, reader/tag impersonation, and traceability attacks, and it ensures forward and backward data communication security. We use Burrows–Abadi–Needham (BAN) logic to validate the security features of SecLAP. Moreover, we compare SecLAP with the state-of-the-art and validate its performance through a Field Programmable Gate Array (FPGA) implementation, which shows that it is lightweight, consumes fewer resources on tags concerning computation functions, and requires less number of flows.
Year
DOI
Venue
2019
10.1016/j.future.2019.07.004
Future Generation Computer Systems
Keywords
Field
DocType
RFID,Internet of Things,FPGA,Secret disclosure attack,Impersonation attack,Anonymity
Mutual authentication,Authentication,Computer security,Computer science,Authentication protocol,Security analysis,Anonymity,Secure communication,Traceability,Communications security,Distributed computing
Journal
Volume
ISSN
Citations 
101
0167-739X
5
PageRank 
References 
Authors
0.43
0
4
Name
Order
Citations
PageRank
Seyed Farhad Aghili1285.21
Hamid Mala217318.78
Pallavi Kaliyar3163.12
Mauro Conti42430203.80