Radio Frequency Identification (RFID) technology can help a wide range of individuals and organizations realize significant productivity expansions and efficiencies. It provides also an efficient and accurate access to medical data for health professionals. In this paper, first we investigate the security of Zhao's protocol, which has been recently proposed as a secure RFID authentication protocol for healthcare environments. We show that the proposed enhancements, to overcome the key compromise problem in Liao and Hsiao protocol, remains vulnerable to tracking attack. Therefore, with the aim of increasing patient safety, we propose a new authentication scheme based on elliptic curve digital signature algorithm (ECDSA) combined with a recursive hash function. The security analysis shows that the suggested scheme could solve security weaknesses of Zhao's protocol and some previously proposed protocols. In addition, the proposed scheme is more efficient in terms of communication and computational cost compared to that of the related protocols.

Abstract Radio Frequency IDentification (RFID) technology is used in a wide variety of applications, more recently as a leading identification technology in healthcare environments. In the most recent years, this technology has been adopted for telecare medicine information system (TMIS) for authentication, safety, security, data confidentiality, and patient's privacy protection over public networks. TMIS is the bridge between patients at home and doctors at healthcare organizations that permits to validate the correctness of exchanged information between different actors of the system. Recently, several RFID and smart cards authentication schemes have been presented and suggested for the TMIS in the literature. These schemes try to resolve the security and privacy problems over insecure healthcare network environments by exploiting different cryptographic primitive's solutions. In this paper, we first highlighted the vulnerabilities of the most recent proposed protocol for TMIS in the literature and proposed attacks based on the weaknesses related to the misuse of the timestamp technique, the calculation of the reader request and tag response messages using the one‐way hash function, which are not attentively scrutinized. Second, we propose an efficient dual RFID‐TMIS mobile authentication protocol with high efficiency and security for healthcare systems. Our proposal is an improvement and extension of the protocol of Liet al., where we propose to associate the RFID technology with TMIS in the same authentication system to take advantages of both these two promising technologies. The performance analysis shows that our improved protocol could solve security weaknesses of the studied protocol and provide mobility, efficiency and is well suited for TMIS adoption in remote areas and low population density. Copyright © 2016 John Wiley & Sons, Ltd.

Abstract Radio frequency identification technology is one of the modern popular emerging technologies proven to advance a wide range of applications in both academia and industry. However, potential security risks, privacy issues, and efficiency are still open challenges that must be addressed seriously to achieve enhanced protection. In this paper, we show that the Akgün et al. protocol remains unsafe and imperfect in terms of the security issue and database identification efficiency. We, first, demonstrate that the Akgün et al. protocol suffers from a stolen/lost reader attack, which could expose users to some life threatening situations and unwanted collection of sensitive private information. Second, we found that all indexing identification‐based protocols and exceptionally the Akgün et al. protocol cannot be used properly when the collision of tag index occurs, which exhibits a low efficiency in the database entry identification process. As the Akgün et al. protocol is almost perfect, it is worthy to be enhanced. Therefore, towards a complete and secure mobile radio frequency identification authentication protocol, we propose efficient solutions that could overcome the aforementioned security problem and offer high identification efficiency using efficient anticollision procedure based on dynamic linked list data structure principle. Via informal and formal security analysis, we show that the improved version is insensitive to the most common attacks and is more efficient than the existing schemes in the literature. Copyright © 2016 John Wiley & Sons, Ltd.

Abstract Radio‐frequency identification (RFID) is a technology for automated identification of objects and people. RFID raises two main concerns: security and privacy. RFID tags are likely to proliferate into billions, and nowadays, security and privacy of RFID systems are to be continuously improved. In this context, we propose a new ultralightweight RFID mutual authentication protocol based on the Feistel cipher structure. This structure is based on substitutions and random permutations which create confusion and diffusion in the transmitted messages. The main contribution of this work is the application of Feistel cipher structure to design a low‐cost authentication protocol for RFID tags involving simple lightweight operations in the tag. Security analysis shows that the proposed protocol achieves the functionalities of mutual authentication, resists to various attacks, and presents a scalable security level. Copyright © 2017 John Wiley & Sons, Ltd.

ABSTRACT With the fast growth of the automatic authentication and asset tracking usage in a wide variety of applications in different fields, government, logistics, transportation and retail are among the most supportive of the radio‐frequency identification (RFID) market. Security is a crucial issue and must be addressed seriously. RFID security must meet the public demand of data protection. Recently, several lightweight RFID authentication protocols conforming to the EPCglobal Class 1 Generation 2 (EPC C1‐G2) standard have been proposed. In this paper, we present efficient attacks against the authenticated RFID security mechanism of Changet al. based on Chebyshev chaotic maps, which is the first solution that adopted the chaos in the RFID authentication process. It turns out that this protocol has fundamental weaknesses that can be used by an adversary to break the system. We will show that this protocol is vulnerable to tracking attack, secret disclosure attack, impersonation attack and desynchronization attack. The proposed attack techniques are in light of two flaws related to the message generation and the shared‐secret update process, which are not neatly scrutinized. Then, we propose an improved RFID authentication protocol based on the Chebyshev chaotic map hard problem, conforming to the EPC C1‐G2 standard with more flexibility, security and mobility for the RFID application. Copyright © 2014 John Wiley & Sons, Ltd.