A Secure and Lightweight Authentication Protocol for RFID

With the increasing popularity of RFID applications, RFID protocols are widely discussed. Most RFID protocols use a central database to store the RFID tag data, while severless RFID protocols are proposed to provide users with security and privacy protection without the connection and security problem between readers and sever. The shortcoming of severless RFID protocols is that the reader is authorized to access limited tags. A new tag cannot be authenticated by a reader if the tag is not appearing in list L-i of the reader. That is not practical especially in product anti-fake considering the quantity of product increasing and so tags. We have developed Tan's work to deal with the problems by introducing two new parameters, brand secret b and series secret s. Product brands and series are limited while the quantity of product is most likely large. And it can resist loss of basic privacy, tracking, cloning, eavesdropping, physical attacks and denial of service attacks. Our protocol can meet the needs of the security, portability and low cost RFID system.