A secure query method for EPCGlobal networks

EPCGlobal network is an RFID-enabled supply chain network which provides automatic data sharing for supply chain partners. EPCGlobal network improves the visibility of supply chains, but also magnifies the security and privacy concerns. There is a common view that there should be different visibility for different roles in EPCGlobal networks. Therefore, A secure query method should be proposed to enhance the security of EPCGlobal networks. In this paper, based on the formal model of EPCGlobal network, we propose a set of innovative framework of role-based access control policies to enhance the security of EPCGlobal networks. We implement a secure query method by using approach of “user-permission assignment during query”. The soundness and completeness properties are given for our secure query method.