A Lightweight and Secure One-Time RFID Authentication Protocol Based on SAS-L2

Radio Frequency Identification (RFID) systems raise several security and privacy concerns because it relies on wireless communication. To address these concerns, we propose a lightweight and robust authentication method for RFID systems by applying SAS-L2 (Simple and Secure one-time password authentication protocol, Lightweight version 2), which is an event-driven one-time password authentication protocol designed for Internet of Things (IoT) systems. The advantage of this method is that it achieves an almost negligible computational load (two exclusive-OR operations and two addition operations) on the client device. The evaluation results on the security and computing cost confirmed that our approach can achieve strong and lightweight authentication without embedding hash function calculations on the RFID tag compared with existing protocols.