基于随机数同步更新的RFID安全协议

RFID Security Protocol Based on Synchronous Update of Random Number

针对无线射频识别(RFID)应用的安全问题,提出一种基于随机数同步更新的RFID安全协议。利用RFID后端系统生成的随机数实现标签认证,每次认证完成后对标签和随机数做同步更新。从理论上分析协议的执行性能和安全性,并利用BAN逻辑对协议的安全性进行形式化证明。结果表明,该协议能够实现标签和阅读器之间的相互认证,同时可抵抗重放、位置跟踪、流量分析、伪装、拒绝服务、非法读取等攻击。在实现上该协议仅使用哈希和异或运算,降低了标签的计算复杂性,适合低成本标签应用。

With the fast development of Radio Frequency Identification（RFID） and tag usage,security has become the key issue for RFID related applications.In this paper,a new RFID secure protocol is proposed,which uses a synchronized random number created in the backend system,for tag authentication.After tag successful authentication each time,both tag and random number update synchronously.Meanwhile,the performance and security of the protocol are analyzed theoretically.Also the BAN logic is used to prove its security in further.The result show that this protocol can provide authentication between tag and reader,moreover,it can resist attacks such as replay,location tracking,traffic analysis,counterfeiting,denial of service,and illegal access,etc.From the implementation point,it just uses Hash and exclusive XOR operations,which reduces the computing complexity and makes it fitting for low price tags applications.