Security on the Design of RFID Access Control Protocol Using the Strategy of Indefinite-Index and Challenge-Response

Chen, Tsai, and Jan (Chen et al. for short) recently proposed a Radio Frequency Identification (RFID) access control scheme, which includes an authentication mechanism and an access right authorization mechanism designed for a low-cost RFID system. Chen et al. does not only show security weaknesses of Weis´s and Chien´s access control schemes, but also claim their proposed scheme can resist the man-in-the-middle attack, the spoofed reader attack, the spoofed tag attack and guarantee mutual authentication and location privacy. However, we found that Chen et al.´s scheme is vulnerable to the impersonating reader attack and does not have any defense mechanism against denial-of-service (DoS) attack such as resource exhaustion attack. In this paper, we will show that Chen et al.´s scheme is insecure and suffers from aforementioned potential security vulnerabilities.