An Enhanced Identification and Data Encrypt Key Manage Protocol

摘要

In 2013, Kim et al. proposed an identification and data encrypt key manage protocol that can be used in some security system based on such secure devices as secure USB memories or RFIDs, which are widely used for identifying persons or other objects recently. Kim et al. claimed that their proposed protocol is secure against various known attacks. However, this paper points out that Kim et al.'s protocol is still vulnerable to the replay attack to impersonate as a legal server and also it cannot provide device anonymity property unlike their claims.