基于RFID的EPC标签安全问题研究

Research on Security Issues of EPC Tag Based on RFID

EPC(Electronic Product Code:产品电子代码)概念的提出源于射频识别技术和计算机网络技术的发展。EPC的载体是射频识别(RFID)电子标签。与传统条形码相比,EPC标签具有扫描速度快、体积小、易封装、可抵抗污染、可重复使用、穿透性强、存储容量大等优势。随着EPC标签在安全领域中的普遍应用,出现了越来越多的风险。文章考查了美国护照卡(Passport Card)和华盛顿州"增强型驾驶证"(Washington State Enhanced Drivers Licenses,WA EDL),测试了这两类证件的多重弱点,并提出了一种改进的KBA算法,克服了使用EPC销毁指令来获取标签身份认证所面临的实际挑战。

The conception of electronic product code is based on the development of radio frequency identification and computer network technology,whose carrier is RFID tag.Compared with barcode,EPC tag has advantages of high scanning rate,small volume,easy to package,resistance to dirtiness,reusability,good penetrability and large storage.With the increasingly common use of EPC tag for security applications.,more and more risks arise.The paper examines the united states Passport Card and Washington State ＂enhanced drivers license＂（WA EDL）,and measures multiple weaknesses.The paper offers a improved KBA algorithm,overcoming practical challenges in the EPC ＂kill＂ command to achieve tag authentication.