Abstract
Technical innovation has made radio frequency identification (RFID) systems a part of the average person's daily life, providing many conveniences. As RFID systems use wireless transmission, user privacy may be compromised by malicious people intercepting the information contained in the RFID tags. In spite of RFID systems inheriting some defects from earlier forms of wireless transmission, they hold much promise for novel applications. In this paper, we propose a secure mobile commercial system based on the mobile RFID reader. Once users enroll in a membership-based store, they can query, purchase merchandise, accumulate coupons and redeem them for prizes, using a mobile RFID reader. The proposed scheme achieves essential security requirements, which prevent several kinds of attack between RFID tag and reader, also satisfy mutual authentication and conforming to EPC C1G2 standards. Our scheme also has acceptable time complexity, communication cost and data transmission time. The proposed scheme is practicable.