Secure and privacy preserving RFID based access control to smart buildings

With the emergence of Internet of Things (IoT), there is exponential growth in the usage of smart applications that exhibit machine-to-machine and device-device interactions. As IoT integration with applications like healthcare became a reality, it is inevitable to leverage RFID authentication systems with privacy preserving features. Unless RFID system guarantees a strong meaning of privacy, the technology cannot be used by people without apprehensions. To address aforementioned issues, in this paper, we first investigate the privacy concerns in RFID authenticated systems. We define privacy and its probable occurrences in such systems. Then we propose and implement a framework for secure and privacy preserving RFID based access control to smart buildings. We evaluate it with an attack model that focuses on privacy related attacks. Our prototype application demonstrates proof of the concept. Our empirical results reveal the utility of the proposed system for leveraging privacy while authenticating requests to access smart buildings.