针对RFID身份认证协议——ARAP协议的攻击及改进

Attack and Improvement on ARAP protocol—A Novel RFID Authentication Protocol Providing Strong Privacy and Security

证明了针对匿名RFID身份认证协议ARAP协议可以进行假冒伪造攻击,并提出了改进版的ARAP协议。攻击的实质在于协议中运用的异或运算会将相同的值消去,或者可以设计特定的随机数实现重放攻击。提出了一种新的运算操作———置换操作,并在改进版的ARAP协议中将原协议的部分异或运算改为置换操作。改进版的ARAP协议还能抵抗跟踪攻击、非同步攻击和重放攻击等。

It is proved that the novel anonymous ble to counterfeiting and impersonating attacks. RFID authentication protocol ARAP protocol is vulnera- In addition, an improved version of ARAP protocol is proposed to make up this imperfection. The attacks are caused by the XOR operations used in ARAP. The value will be eliminated by XORing with itself. Moreover, past information outputted by the protocol can be reused by exploiting the XOR operation. Therefore, a new operation called permutation is pro- posed. In the improved version of ARAP protocol, some XOR operations are substituted by permutation operations. The improved ARAP protocol is also resistant to tracking attacks, de-synchronization attacks and replay attacks.