Generalized Desynchronization Attack on UMAP: Application to RCIA, KMAP, SLAP and SASI+ protocols

Tian et al. proposed a permutation based authentication protocol [19] entitled RAPP. However, it came out very soon that it suffers from several security treats such as desynchronization attack. Following RAPP, several protocols have been proposed in literature to defeat such attacks. Among them, some protocols suggested to keep a record of old parameters by both the reader and the tag. In this paper, we present a generalized version of all such protocols, named GUMAP, and present an efficient desynchronization attack against it. The complexity of our attack is run of 5 consecutive sessions of protocol and its success probability is almost 1. Our attack is applicable as it is to recently proposed protocols entitled RCIA [10], KMAP [12], SASI [9] and SLAP [11]. To the best of our knowledge, it is the first report on the vulnerability of these protocols. keywords: RFID, Authentication, RAPP, RCIA, KMAP, SLAP, SASI+, GUMAP, Desynchronization Attack.