Securing Data in IoT-RFID-Based Systems Using Lightweight Cryptography Algorithm

Radio Frequency Identification (RFID) technology enables all objects to communicate with IoT systems for its advanced capabilities in automatically identifying, localizing, and controlling access to objects. With RFID’s widespread use and quick development, its privacy and security concerns cannot be disregarded. Many security attacks, including interception, tampering, and replay, may be undertaken against the wireless broadcast channel that connects RFID tags with the reader, leading to issues with privacy violations and forgery. This paper proposes a multi-level lightweight security framework (I-RFLSF) to secure data in IoT-based RFID systems by adopting a lightweight cryptography algorithm to encrypt the data in IoT-based RFID systems depending on the unique identification of each tag. The framework is designed for situations with limited resources to ensure end-to-end data security from the deployment point through data storage. It provides authentication, confidentiality, and integrity services for data flow between the system participants, including the server, IoT devices, the RFID Reader, and the RFID Tag, through three phases: Two-Level Registration, Two-Level Authentication, and securing device data using a lightweight cryptographic algorithm.