On Privacy of PRF+PUF-based Authentication
Ferucio Laurenţiu Ţiplea · Annals of Computer Science and Information Systems · 2024
RFID-based authentication plays a crucial role in various fields, such as e-commerce, e-learning, e-business, healthcare, cloud, IoT, etc.At the same time, there is growing interest in using physically unclonable functions (PUFs) in RFID tags to protect against key corruption of pseudo-random functions (PRFs).In this paper, we discuss the privacy properties of PRF+PUF-based RFID authentication protocols in Vaudenay's and the Hermans-Pashalidis-Vercauteren-Preneel (HPVP) models, considering two fundamental aspects: using temporary variables that might compromise privacy and using simulatable PUFs, a more realistic approach to ideal PUFs.Finally, we prove that a variant of a recently proposed RFID-based authentication protocol achieves strong privacy in the HPVP model.• Extending the scheme to ensure mutual authentication