Protecting and Restraining the Third Party in RFID-Enabled 3PL Supply Chains
Autor: | Shaoying Cai, Yingjiu Li, Robert H. Deng, Tieyan Li, Chunhua Su |
---|---|
Rok vydání: | 2010 |
Předmět: |
TheoryofComputation_MISCELLANEOUS
Scheme (programming language) Authentication business.industry Computer science Supply chain Aggregate (data warehouse) Usability Possession (law) Computer security computer.software_genre Message authentication code Communication source business computer computer.programming_language |
Zdroj: | Information Systems Security ISBN: 9783642177132 ICISS |
DOI: | 10.1007/978-3-642-17714-9_18 |
Popis: | "Symmetric secret"-based RFID systems are widely adopted in supply chains. In such RFID systems, a reader's ability to identify a RFID tag relies on the possession of the tag's secret which is usually only known by its owner. If a "symmetric secret"-based RFID system is deployed in third party logistics (3PL) supply chains, all the three parties (the sender of the goods, the receiver of the goods and the 3PL provider) should have a copy of those tags' secrets to access the tags. In case the three parties in 3PL supply chain are not all honest, sharing the secrets among the three parties will cause security and privacy problems. To solve these problems, we firstly formalize the security and privacy requirements of RFID system for 3PL supply considering the existence of the internal adversaries as well as the external adversaries. Then we propose two different protocols which satisfy the requirements, one is based on aggregate massage authentication codes, the other is based on aggregate signature scheme. Based on the comparisons of the two protocols on performance and usability, we get the conclusion that overall the aggregate MAC-based solution is more applicable in 3PL supply chains. |
Databáze: | OpenAIRE |
Externí odkaz: |