基于无线射频识别的食品数字身份证设计及应用

Design of food digital ID and its application in electronic receipt of wine logistics

食品质量安全可追溯体系对于保障食品安全具有重大意义。该文首先分析了食品数字身份证的具体需求,提出了通信安全性、系统的可用性、数据真实性、信息隐私性、信息权威性、可追溯性6个要求;然后对非对称加密算法NTRU(number theory research unit)和NTRU Sign数字签名算法进行了介绍,设计了安全认证协议,依据食品数字身份证的安全要求分析了安全性,建立了食品数字身份证。最后用食品数字身份证设计了电子酒类流通随附单,引入了生产商、销售商、消费者、认证中心4个角色,设立了认证注册、生产商信息写入、销售商信息写入和消费者验证4个过程,建立了系统应用原型,并分析了安全性,从根本上提高了电子酒类流通随附单的安全性和可信度。文章建立了食品数字身份证和酒类流通随附单,该工作对建立可靠、安全食品监管体系有十分重要的意义。

Food quality traceability system is of great significance for ensuring food safety. A reliable traceability system based on radio frequency identification devices （RFID） is proposed in this paper. Specific requirements of the food digital ID are analyzed, and six requirements of communications security, system availability, data authenticity, information privacy, data authority, traceability are listed. An asymmetric encryption algorithm NTRU and a digital signature algorithm based on NTRU are developed to design secure authentication protocol and food digital ID. Firstly the public key, private key and digital certificate of all nodes in the supply chain are issued by a trusted third-party certification authority, correspondingly the RFID tag’s ID of the node is recorded and the encrypted product information is written to the RFID tag, thus creating a digital ID. Then the certification process among the nodes using the digital ID is demonstrated in detail. The node’s reader generates a random number R and Q, and transmits to tags, where Q is the encrypted data with result of XOR operation of R and reader’s serial number K using its private key by NTRU. After receiving the Q and R, the tags decrypt and calculate K with a corresponding reader’s public key. If the K is one of the reader’s serial number stored in RFID tag, it is accepted to the next communication, otherwise is denied to the next communication. After successful authentication, the tag calculates M and transmits to reader, where M is the encrypted data with result of XOR operation of R and tag’s ID using the reader’s public key by NTRU. After received the M, the reader decrypts and calculates tag’s ID with its private key. If the tag’s ID is one of the tag’s ID stored in reader, the reader accepts the next communication, otherwise denies the next communication. Through these steps, the reader and the tag establish a trusted channel to read or write. Finally, the security is discussed and well fit with the safety requirements of the food digital ID, thus the food digital ID is accomplished. With secure authentication protocol, electronic receipt of wine logistics using the food digital ID is achieved. With the electronic receipt of wine logistics, the four roles of manufacturers, sales, consumers, certification centers are designed, the four procedures of registration and certification, information of manufacturer written to the tag, information of vendors written to the tag, consumers verification are developed. The application prototype system is built in wine logistics, fundamentally improving the security and reliability of wine logistics according to analysis of its security. Food digital ID and electronic receipt of wine logistics are proposed in this paper, the work will be of great interest for use in safe and reliable supervision and management for food quality.