Tag Broker Model for Protecting Privacy in RFID Environment

RFID system, in which we give identification number to each item and detect it with radio frequency, supports more variable service than barcode system can do. For example, a refrigerator with RFID reader and internet connection will automatically notify expiration of food validity to us. But, in spite of its convenience, RFID system has some security threats, because anybody can get ID information of item easily. One of most critical threats is privacy invasion. Existing privacy protection schemes or systems have been proposed, and these schemes or systems defend normal users from attempts that any attacker tries to get information using RFID tag value. But, these systems still have weakness that attacker can get information using analogous value instead of original tag value. In this paper, we mention this type of attack more precisely and suggest 'Tag Broker Model', which can defend it. Tag broker in this model translates original tag value to random value, and user can only get random value. Attacker can not use analogous tag value, because he/she is not able to know original one from it.

• Sokjoon Lee
• Howon Kim
• Kyoil Chung

• Broker
• EPC
• Privacy
• RFID.

[1] M. Ohkubo, K. Suzuki and S. Kinoshita, "Cryptographic Approach to
Privacy-Friendly Tags", RFID Privacy Work-shop, 2003.
[2] Ari Juels, Ronald L Rivest, and Michael Szydlo, "The Blocker Tag:
Selective Blocking of RFID Tags for Consumer Privacy", 10th ACM
Conference on Computer and Communications Security, 2003.
[3] Stephen A. et al., Security and Privacy Aspects of Low-Cost Radio
Frequency Identification Systems, Security in Pervasive Computing
2003, LNCS 2802, 2004, pp. 201-212.
[4] Byungil Lee and Howon Kim, "Enhanced Security and Privacy
Mechanism of RFID Service for Pervasive Mobile Device",
CIS(Computational Intelligence and Security) 2005, LNAI 3802, Dec.
2005.
[5] EPCglobal, http://www.epcglobalinc.org/
[6] EPC Tag Data Standards Version 1.1 Rev.1.24, Apr. 2004.
[7] Information technology - Radio frequency identification for item
management - Unique identification for RF tags, ISO/IEC 15963, Sep.
2004.
[8] EPC Radio-Frequency Identity Protocols Class-1 Generation-2 UHF
RFID Protocol for Communications at 860 MHz - 960 MHz Version
1.0.7,Sep. 2004.