IoT Device Security: Challenging “A Lightweight RFID Mutual Authentication Protocol Based on Physical Unclonable Function”

• DOI: 10.3390/s18124444
• Publication Date: 2018-12-18T07:15:59Z
• Authors: Ygal Bendavid; Nasour Bagheri; Masoumeh Safkhani; Samad Rostampour
• Keywords: Physical unclonable function; Mutual authentication; Reflection attack; Identification

With the exponential increase of Internet things (IoT) connected devices, important security risks are raised as any device could be used an attack channel. This preoccupation is particularly with devices featuring limited processing power and memory capabilities for purposes. In line this idea, Xu et al. (2018) proposed a lightweight Radio Frequency Identification (RFID) mutual authentication protocol based on Physical Unclonable Function (PUF)—ensuring tag-reader verification preventing clone attacks. While claim that their efficient to protect RFID systems, we found it still vulnerable desynchronization secret disclosure attack. Hence, guidelines improvements also suggested, instance by changing structure messages avoid trivial addition, provide explicit which our formal informal analysis have no weaknesses.