[论文解读] A Systematic Security Analysis for Path-based Traceability Systems in RFID-Enabled Supply Chains

Fokke Heikamp, Lei Pan+3 more|arXiv (Cornell University)|Jan 14, 2026

Food Supply Chain Traceability被引用 0

一句话总结

本文提出一种针对 RFID 支持的供应链路径可追溯性的安全框架，并评估了 17 种可追溯性解决方案以揭示若干漏洞，包括路径隐私和无序攻击。

ABSTRACT

Traceability systems have become prevalent in supply chains because of the rapid development of RFID and IoT technologies. These systems facilitate product recall and mitigate problems such as counterfeiting, tampering, and theft by tracking the manufacturing and distribution life-cycle of a product. Therefore, traceability systems are a defense mechanism against supply chain attacks and, consequently, have become a target for attackers to circumvent. For example, a counterfeiter may change the trace of a fake product for the trace of an authentic product, fooling the system into accepting a counterfeit product as legit and thereby giving a false sense of security. This systematic analysis starts with the observation that security requirements in existing traceability solutions are often unstructured or incomplete, leaving critical vulnerabilities unaddressed. We synthesized the properties of current state-of-the-art traceability solutions within a single security framework that allows us to analyze and compare their security claims. Using this framework, we objectively compared the security of $17$ traceability solutions and identified several weaknesses and vulnerabilities. This article reports on these flaws, the methodology we used to identify them, and the first security evaluation of traceability solutions on a large scale.

研究动机与目标

• 需要对 RFID 支持的可追溯性系统进行结构化安全分析的动机。
• 定义一个统一的基于路径的可追溯性安全框架，捕捉空间和时间路径属性。
• 评估 17 种具代表性的可追溯性解决方案在基于路径的攻击和隐私问题上的安全性。
• 识别常见弱点并为更安全的可追溯性设计提供见解。

提出的方法

• 将可追溯性系统建模为元组 (R, T, B, ds, I)，表示阅读器、标签、后端、数据共享服务器和发行者。
• 通过轨迹定义行为语义，并形式化基于路径的属性： sound、complete、sorted、authorized 路径。
• 开发基于路径的攻击分类（无序、跳步、重路由、幽灵步）并将它们映射到路径属性。
• 在 Dolev-Yao 假设下采用对手模型 Adv_T（标签被妥协）和 Adv_R（阅读器被妥协）来测试安全性主张。
• 采用两步方法：通用漏洞识别，然后针对基于路径框架的形式化安全评估。

Figure 1. Our RFID-enabled Traceability Model

实验结果

研究问题

• RQ1 一个健全的可追溯性系统所需的本质路径基安全属性是什么？
• RQ2 在现实对手下，现有基于 RFID 的可追溯性解决方案在健全性、完整性和授权性方面达到何种程度？
• RQ3 在具代表性的可追溯性设计中存在哪些具体弱点和攻击向量？
• RQ4 统一框架如何促进客观比较并指导安全可追溯性设计？

主要发现

• 评估了 17 种可追溯性解决方案并识别出多处弱点和漏洞。
• 发现若干攻击：RF-Chain 的链接攻击、Burbridge 与 Soppera 的路径授权攻击、Ray 等与 Tracker 的无序攻击，以及 ReSC 的密钥泄露攻击。
• 在被动阅读器条件下，所有系统都易受重路由攻击。
• 在对抗对手模型下，许多方案未能强制路径顺序或完整路径文档。
• 某些解决方案未能清楚解释路径授权策略如何分发或执行。

Figure 2. Taxonomy for Path-based Attacks