Two Security Problems of RFID Security Method with Ownership Transfer

Radio frequency identification (RFID) is a technology that allows automatic identification and data capture by using radio frequencies. In 2006, Osaka et al. proposed a RFID security method based on a hash function and a symmetric key cryptosystem. Osaka et al. claimed that their proposed RFID security method achieves the following security requirements such as (1) indistinguishability, (2) forward security, (3) replay attack, (4) tag killing, and (5) ownership transfer. Unlike their claims, the current paper points out two security problems of Osaka et al.'s RFID security method. To mitigate these security breaches, we propose an improved RFID security method.