naa a22 4500 510799051 CHVBK 20180411083347.0 cr unu---uuuuu 180411e20130901xx s 000 0 eng 10.1007/s11277-013-1078-z doi (NATIONALLICENCE)springer-10.1007/s11277-013-1078-z Strengthening the Security of EPC C-1 G-2 RFID Standard [Elektronische Daten] [Masoumeh Safkhani, Nasour Bagheri, Majid Naderi] In this paper, we analyze the security of AZUMI protocol which is compliant with EPC-Class-1 Generation-2 standard and recently has been proposed by Peris et al. This protocol is an improvement to a protocol proposed by Chen and Deng which has been cryptanalysed by Peris et al. and Kapoor and Piramuthu. However, our security analysis clearly shows that the designers were not successful in their attempt to improve Chen and Deng protocol. More precisely, we present an efficient passive attack to disclose the tag and the reader secret parameters, due to PRNG and the length of the values. In addition, we present a simple tag impersonation attack against this protocol. The success probability of all attacks are almost "1” and the cost of given attacks are at most eavesdropping two sessions of protocol. However, the given secrets disclosure attack also requires $$O(2^{16})$$ off-line evaluations of a $$PRNG$$ function. To counteract such flaws, we improve the AZUMI protocol by applying some minor modifications so that it provides the claimed security properties. Springer Science+Business Media New York, 2013 RFID nationallicence EPC-C1 G2 nationallicence Mutual authentication nationallicence Secret disclosure nationallicence Tag impersonation nationallicence Safkhani Masoumeh Electrical Engineering Department, Iran University of Science and Technology, Tehran, Iran aut Bagheri Nasour Electrical Engineering Department, Shahid Rajaee Teacher Training University, 16788-15811, Tehran, Iran aut Naderi Majid Electrical Engineering Department, Iran University of Science and Technology, Tehran, Iran aut Wireless Personal Communications Springer US; http://www.springer-ny.com 72/2(2013-09-01), 1295-1308 0929-6212 72:2<1295 2013 72 11277 https://doi.org/10.1007/s11277-013-1078-z text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s11277-013-1078-z text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Safkhani Masoumeh Electrical Engineering Department, Iran University of Science and Technology, Tehran, Iran aut NATIONALLICENCE 700 1- Bagheri Nasour Electrical Engineering Department, Shahid Rajaee Teacher Training University, 16788-15811, Tehran, Iran aut NATIONALLICENCE 700 1- Naderi Majid Electrical Engineering Department, Iran University of Science and Technology, Tehran, Iran aut NATIONALLICENCE 773 0- Wireless Personal Communications Springer US; http://www.springer-ny.com 72/2(2013-09-01), 1295-1308 0929-6212 72:2<1295 2013 72 11277 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer