naa a22 4500 510795072 CHVBK 20180411083333.0 cr unu---uuuuu 180411e20130401xx s 000 0 eng 10.1007/s11277-012-0652-0 doi (NATIONALLICENCE)springer-10.1007/s11277-012-0652-0 Security and Privacy Analysis of Song-Mitchell RFID Authentication Protocol [Elektronische Daten] [Mohammad Habibi, Mohammad Aref] Many applications, such as e-passport, e-health, credit cards, and personal devices that utilize Radio frequency Identification (RFID) devices for authentication require strict security and privacy. However, RFID tags suffer from some inherent weaknesses due to restricted hardware capabilities and are vulnerable to eavesdropping, interception, or modification. The synchronization and untraceability characteristics are the major determinants of RFID authentication protocols. They are strongly related to privacy of tags and availability, respectively. In this paper, we analyze a new lightweight RFID authentication protocol, Song and Mitchell, in terms of privacy and security. We prove that not only is the scheme vulnerable to desynchronization attack, but it suffers from traceability and backward traceability as well. Finally, our improved scheme is proposed which can prevent aforementioned attacks. Springer Science+Business Media, LLC., 2012 RFID nationallicence Authentication protocol nationallicence Security analysis nationallicence Traceability nationallicence Habibi Mohammad College of Information Sciences and Technology, Pennsylvania State University, University Park, PA, USA aut Aref Mohammad College of Information Sciences and Technology, Pennsylvania State University, University Park, PA, USA aut Wireless Personal Communications Springer US; http://www.springer-ny.com 69/4(2013-04-01), 1583-1596 0929-6212 69:4<1583 2013 69 11277 https://doi.org/10.1007/s11277-012-0652-0 text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s11277-012-0652-0 text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Habibi Mohammad College of Information Sciences and Technology, Pennsylvania State University, University Park, PA, USA aut NATIONALLICENCE 700 1- Aref Mohammad College of Information Sciences and Technology, Pennsylvania State University, University Park, PA, USA aut NATIONALLICENCE 773 0- Wireless Personal Communications Springer US; http://www.springer-ny.com 69/4(2013-04-01), 1583-1596 0929-6212 69:4<1583 2013 69 11277 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer