سال انتشار: ۱۳۸۶
محل انتشار: نخستین کنفرانس بین المللی مدیریت زنجیره ی تامین و سیستم های اطلاعات
تعداد صفحات: ۱۴
Mansoor Amini Lari – Shiraz Univercity Shiraz-Iran
Sami Saei – Shiraz Univercity Shiraz-Iran
Baharak Ahmadipoor – yazd Univercity yazd-Iran
We expose privacy issues related to Radio Frequency Identiﬁcation (RFID) in libraries, describe current deployments, and suggest novel architectures for library RFID. Libraries are a fast growing application of RFID; the technology promises to relieve repetitive strain injury, speed patron self-checkout, and make possible comprehensive inventory. Unlike supply-chain RFID, library RFID requires item-level tagging, thereby raising immediate patron privacy issues. Current conventional wisdom suggests that privacy risks are negligible unless an adversary has access to library databases. We show this is not the case. In addition, we identify private authentication as a key technical issue: how can a reader and tag that share a secret eﬃciently authenticate each other without revealing their identities to an adversary? Previous solutions to this problem require reader work linear in the number of tags. We give a general scheme for building private authentication with work logarithmic in the number of tags, given a scheme with linear work as a sub-protocol. This scheme may be of independent interest beyond RFID applications. We also give a simple scheme that provides security against a passive eavesdropper using XOR alone, without pseudo-random functions or other heavy crypto operations.