Journal of Medical Systems manuscript No. (will be inserted by the editor) Two RFID Standard-based Security Protocols for Healthcare Environments

Abstract Radio Frequency Identification (RFID) sys-tems are widely used in access control, transportation, real-time inventory and asset management, automated payment systems, etc. Nevertheless, the use of this tech-nology is almost unexplored in healthcare environments, where potential applications include patient monitor-ing, asset traceability and drug administration systems, to mention just a few. RFID technology can offer more intelligent systems and applications, but privacy and se-curity issues have to be addressed before its adoption. This is even more dramatical in healthcare applications where very sensitive information is at stake and patient safety is paramount. In [43], Wu et al. recently proposed a new RFID authentication protocol for healthcare en-vironments. In this paper we show that this protocol puts location privacy of tag holders at risk, which is a matter of gravest concern and ruins the security of this proposal. To facilitate the implementation of se-cure RFID-based solutions in the medical sector, we suggest two new applications (authentication and se-cure messaging) and propose solutions that, in contrast to previous proposals in this field, are fully based o