MUMAP: Modified Ultralightweight Mutual Authentication protocol for RFID enabled IoT networks


Flawed authentication protocols led to the need for a secured protocol for radio frequency identification (RFID) techniques. In this paper, an authentication protocol named Modified ultralightweight mutual authentication protocol (MUMAP) has been proposed and cryptanalysed by Juel-Weis challenge. The proposed protocol aimed to reduce memory requirements in the authentication process for low-cost RFID tags with limited resources. Lightweight operations like XOR and Left Rotation, are used to circumvent the flaws made in the other protocols. The proposed protocol has three-phase of authentication. Security analysis of the proposed protocol proves its resistivity against attacks like desynchronization, disclosure, tracking, and replay attack. On the other hand, performance analysis indicates that it is an effective protocol to use in low-cost RFID tags. Juel-Weis challenge verifies the proposed protocol where it shows insusceptibility against modular operations.

Author Biography

Md Atiqur Rahman Ahad, University of Dhaka

Md Atiqur Rahman Ahad, Senior Member, IEEE, is a Professor of Electrical & Electronic Engineering, University of Dhaka (DU). He is currently working as specially appointed Associate Professor at Osaka University, Japan. He works on computer vision, imaging, IoT, healthcare, etc. He did B.Sc.(honors) [1st class 1st position] & Masters [1st class 2nd position] from the Dept. of Applied Physics & Electronics, DU; Masters from the School of Computer Science & Engineering, University of New South Wales; and PhD from the Faculty of Engineering, Kyushu Institute of Technology [KIT]. He was awarded prestigious UGC Gold Medal (handed by Honorable President of Bangladesh in 2018), JSPS Postdoctoral Fellowship, and a no. of awards/scholarships. He was a Visiting Researcher at KIT. He published 2 books as a single author (available in Springer) & 2 more book / edited book along with a few book chapters. His authored books are: “Motion History Images for Action Recognition and Understanding”, in Springer; “Computer Vision and Action Recognition”, in Springer; “IoT-sensor based Activity Recognition”, in Springer, 2019. He has been authoring/editing a few more books. He has published 130+ journals and conference papers in IEEE, ACM, Springer, Elsevier, etc. He has received 10+ international awards in various conference/journal/society. Ahad was invited as keynote/invited speakers 60+ times in different conferences/universities. He has established several international MOU/collaborations (e.g., Clemson University, University of Hyogo, RCCIIT, Fukuoka Women University, Kyushu University, etc.).

He has been involved with some academic & editorial activities: e.g., Editorial Board Member, Scientific Reports, Nature; Associate Editor, Frontiers in Computer Science; Editorial Board Member, Encyclopedia of Computer Graphics and Games, Springer; Editor, Int. J. of Affective Computing; Assoc. Technical Editor (former), IEEE ComSoc Magazine; Editor-in-Chief: Int. J. of Computer Vision & Signal Processing, General Chair,20209th Int. Conf. on Informatics, Electronics & Vision, Japan; 4th Int. Conf. on Imaging, Vision & Pattern Recognition; 2nd Int. Conf. on Activity & Behavior Computing, 2020; Workshop Chair, 17th IEEE PiCom; Publication Chair, 2018 IEEE Int. Conf. on Systems, Man, and Cybernetics (SMC); Vice Publication Co-chair and Vice Award Chair, Joint 17th World Congress of Int. Fuzzy Systems Association (IFSA) and 9th Int. Conf. on Soft Computing and Intelligent Systems; General Chair, 7th Intl. Symposium in Computational Medical and Health Technology; and several other international conferences. He served as Guest Editor in Pattern Recognition Letters, Elsevier; J. of Multimedia User Interface, Springer; J. of Healthcare Engineering, Hindawi; Int. J. of Innovative Computing, Information and Control. Ahad is a Member of ACM, IAPR, OSA, IEEE Computer Society, IEEE RAS, IEEE SMC, etc. He is the founder Secretary of IEEE Computer Society Bangladesh Chapter, and Bangladesh Association of Pattern Recognition, Executive Committee member of Bangladesh Electronics Society (BES). He volunteers some societies in Bangladesh (e.g., Executive Committee member of BAPA, the largest environmental group) and Japan. More:



U. Mujahid, M. Najam-ul Islam, and M. A. Shami, “Rcia: A new ultralightweight rfid authentication protocol using re- cursive hash,” International Journal of Distributed Sensor Networks, vol. 11, no. 1, p. 642180, 2015.

H.-Y. Chien, “Sasi: A new ultralightweight rfid authentica- tion protocol providing strong authentication and strong in- tegrity,” IEEE transactions on dependable and secure com- puting, vol. 4, no. 4, pp. 337–340, 2007.

M. Khalid, U. Mujahid, and M. Najamul Islam, “Crypt- analysis of ultralightweight mutual authentication protocol for radio frequency identification enabled internet of things networks,” International Journal of Distributed Sensor Networks, vol. 14, no. 8, p. 1550147718795120, 2018.

P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Este ́vez- Tapiador, and A. Ribagorda, “Lmap: A real lightweight mu- tual authentication protocol for low-cost rfid tags,” in Proc. of 2nd Workshop on RFID Security, p. 06, 2006.

P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez- Tapiador, and A. Ribagorda, “M 2 ap: a minimalist mutual- authentication protocol for low-cost rfid tags,” in International conference on ubiquitous intelligence and computing, pp. 912–923, Springer, 2006.

P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez- Tapiador, and A. Ribagorda, “Emap: An efficient mutual- authentication protocol for low-cost rfid tags,” in OTM Con- federated International Conferences” On the Move to Mean- ingful Internet Systems”, pp. 352–361, Springer, 2006.

J. C. Hernandez-Castro, J. M. Tapiador, P. Peris-Lopez, and J.-J. Quisquater, “Cryptanalysis of the sasi ultralightweight rfid authentication protocol with modular rotations,” arXiv preprint arXiv:0811.4257, 2008.

P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Tapiador, and A. Ribagorda, “Advances in ultralightweight cryptography for low-cost rfid tags: Gossamer protocol,” in International Workshop on Information Security Applications, pp. 56–68, Springer, 2008.

Y. Tian, G. Chen, and J. Li, “A new ultralightweight rfid au- thentication protocol with permutation,” IEEE Communica- tions Letters, vol. 16, no. 5, pp. 702–705, 2012.

G. Avoine and X. Carpent, “Yet another ultralightweight au- thentication protocol that is broken,” in International Work- shop on Radio Frequency Identification: Security and Pri- vacy Issues, pp. 20–30, Springer, 2012.

I.-S. Jeon and E.-J. Yoon, “A new ultra-lightweight rfid authentication protocol using merge and separation oper- ations,” International Journal of Mathematical Analysis, vol. 7, no. 52, pp. 2583–2593, 2013.

W. Shao-hui, H. Zhijie, L. Sujuan, and C. Dan-wei,“Security analysis of rapp an rfid authentication protocol based on permutation,” College of computer, Nanjing University of Posts and Telecommunications, Nanjing, vol. 210046, pp. 293– 308, 2012.

S. Wang, S. Liu, and D. Chen, “Security analysis and im- provement on two rfid authentication protocols,” Wireless Personal Communications, vol. 82, no. 1, pp. 21–33, 2015.

R. Bassil, W. El-Beaino, W. Itani, A. Kayssi, and A. Chehab, “Pumap: A puf-based ultra-lightweight mutual-authentication rfid protocol,” International Journal of RFID Security and Cryptography, vol. 1, no. 1/2, pp. 58–66, 2012.

H. Luo, G. Wen, J. Su, and Z. Huang, “Slap: Succinct and lightweight authentication protocol for low-cost rfid system,” Wireless Networks, vol. 24, no. 1, pp. 69–78, 2018.

A. Tewari and B. Gupta, “Cryptanalysis of a novel ultra- lightweight mutual authentication protocol for iot devices us- ing rfid tags,” The Journal of Supercomputing, vol. 73, no. 3, pp. 1085–1102, 2017.

K.-H. Wang, C.-M. Chen, W. Fang, and T.-Y. Wu, “On the security of a new ultra-lightweight authentication protocol in iot environment for rfid tags,” The Journal of Supercomput- ing, vol. 74, no. 1, pp. 65–70, 2018.

U. Mujahid, M. Najam-ul Islam, and S. Sarwar, “A new ultra- lightweight rfid authentication protocol for passive low cost tags: Kmap,” Wireless Personal Communications, vol. 94, no. 3, pp. 725–744, 2017.

A. A. Alamr, F. Kausar, J. Kim, and C. Seo, “A secure ecc-based rfid mutual authentication protocol for internet of things,” The Journal of Supercomputing, vol. 74, no. 9, pp. 4281–4294, 2018.

M. Naeem, S. A. Chaudhry, K. Mahmood, M. Karuppiah, and S. Kumari, “A scalable and secure rfid mutual authen- tication protocol using ecc for internet of things,” Interna- tional Journal of Communication Systems, p. e3906, 2019.

F.Zhu,P.Li,H.Xu,andR.Wang,“Alightweightrfidmutual authentication protocol with puf,” Sensors, vol. 19, no. 13, p. 2957, 2019.

A. Juels and S. A. Weis, “Defining strong privacy for rfid,” in Fifth Annual IEEE International Conference on Per- vasive Computing and Communications Workshops (Per- ComW’07), pp. 342–347, IEEE, 2007.

M. Ohkubo, K. Suzuki, S. Kinoshita, et al., “Cryptographic approach to “privacy-friendly” tags,” in RFID privacy work- shop, vol. 82, Cambridge, USA, 2003.

K. Ouafi and R. C.-W. Phan, “Privacy of recent rfid au- thentication protocols,” in International Conference on In- formation Security Practice and Experience, pp. 263–277, Springer, 2008.

K. Ouafi and R. C.-W. Phan, “Traceable privacy of recent provably-secure rfid protocols,” in International conference on applied cryptography and network security, pp. 479–489, Springer, 2008.

How to Cite
Raju, M. H., Ahmed, M. U., & Ahad, M. A. R. (2021). MUMAP: Modified Ultralightweight Mutual Authentication protocol for RFID enabled IoT networks. Journal of the Institute of Industrial Applications Engineers, 9(2), 33.