Mutual authentication and key distribution protocol based on the Trust-Third-Party in mobile RFID environment

With the popularity of intelligent terminals, the era that the mobile RFID be extensively used is coming. RFID tags will be present in every aspect of our lives, to help intelligent device recognize and sense the external environment, timely and intelligent execute some commands, so that our lives more convenient. However, these intelligent devices are vulnerable to various adversaries' attacks. To solve these problems, we propose a new simplified cryptographic protocol for mobile RFID environment. The protocol uses a Trust-Third-Party (TTP) to generate and distribute the secret key for authorizing those RFID tags and readers who want to access the database servers, to ensure the security and scalability of the entire system. What's more, the use of XOR algorithm, which has high computational efficiency, guarantees the computation efficiency. Nonetheless, the simplified scheme carries obvious risks from the key disclosure attack which caused by the malicious members inside this system. In order to improve the simplified protocol's deficiencies, we then proposed an enhanced one, which based on the more secure public key cryptography system, to ensure the security of the system under several common attacks. The paper also discusses the two schemes can satisfy the safety requirements when intelligent devices play different roles. Schemes described in this paper may be applicable to some practical applications for it quickly achieves authentication and access authorization as well as the superior flexibility and security.