一种增强的极轻量RFID安全认证协议研究

Research on the Security Authentication Protocol of an Enhanced Ultra-lightweight RFID

由于低成本的RFID标签运算能力有限,它无法支持复杂的密码算法,因此设计轻量级的安全协议尤为重要。URAP是一种基于简单位运算的极轻量级安全协议,兼有安全与隐私保护。本文详细分析了URAP协议的安全性问题,并对它做出了改进,通过增加标签端的随机数R1与阅读器的识别码RID来保护信息的传送,避免了拒绝服务攻击、完全泄露攻击与追踪攻击,有效地提高了RFID应用的安全性。

For the operation ability of RFID tag with low cost is limited, it can＇t support complex cryptographic algorithm. So the design of lightweight security protocol is particularly important. URAP is a kind of extremely lightweight security protocol based on simple bit operation. It has security and privacy protection. We analyze the security problems of URAP protocol in detail, and improve it by adding the random number RI on tag and the identification number RID on reader to protect the information transmission, so as to avoid the denial of service attack, full disclosure attack and tracking attack, and the security of the RFID application is effectively improved.