Amirkabir University of Technology AUT Journal of Electrical Engineering 2588-2910 48 2 2016 11 21 HMAC-Based Authentication Protocol: Attacks and Improvements HMAC-Based Authentication Protocol: Attacks and Improvements 71 80 817 10.22060/eej.2016.817 EN Behzad Abdolmaleki M.Sc. Student, Information Systems and Security Laboratory (ISSL), Sharif University of Technology Karim Baghery M.Sc. Student, Information Systems and Security Laboratory (ISSL), Sharif University of Technology Mohammad Javad Emadi Assistant Professor, Department of Electrical Engineering, Amirkabir University of Technology Journal Article 2015 10 11 As a response to a growing interest in RFID systems such as Internet of Things technology along with satisfying the security of these networks, proposing secure authentication protocols are indispensable part of the system design. Hence, authentication protocols to increase security and privacy in RFID applications have gained much attention in the literature. In this study, security and privacy of the recent well-known HMAC-based RFID mutual authentication protocol, is analyzed. We prove that this protocol is not secure against various attacks and also does not provide untraceability. Also, in order to improve the performance of the mentioned protocol and enhance the security of RFID users, a more effective and secure authentication HMAC-based protocol is presented. Furthermore, security of our protocol is explored against different attacks such as; the replay attack, the tag’s ID exposure, the spoofing attack, DoS attack and traceability attack. It is shown that our proposed protocol is safe against the attacks. Finally, the security of the presented protocol is compared with some well-known related protocols. https://eej.aut.ac.ir/article_817_31839b036f63806cba3f47b93af8ccb5.pdf