Ultra-lightweight mutual authentication and ownership transfer protocol with PUF for Gen2 v2 RFID systems

Radio Frequency Identification (RFID) Is used to replace bar code system, RFID is more powerful than bar code system but it suffers from the weakness of wireless communication. Security issues in RFID systems include tag or reader impersonation, replay attack, eavesdropping, location privacy, forward and backward un-traceability. Appling traditional security mechanism such as MD4, MD5, SHA 256 or AES directly on RFID Is impossible due to the hardware limitation of a passive tag. Thus, many studies try to design all new protocols about mutual authentication and ownership transfer on RFID system. Physical unclonable function (PUF) is a new hardware security device that could make their protocol; tinier. In order to keep location privacy of tag, most of these works will not usc tag's unique identification. Instead, they will use a temporary Identification once and update It individually each run. However, hi this way, their works will suffer from de-synchronization between the tag and reader, if an attacker blocks some messages. In this paper, we propose protocols about mutual authentication and ownership transfer with PUF that can significantly alleviate this issue because the dc-synchronization attacks will not happen in our mutual authentication protocol. On the other hand, our protocol also can be compatible with EPC Gen2v2 standard easily. Besides, our simple and robust methods have better performance.