ECC结合轻量级Hash函数的RFID系统安全认证方案

A secure authentication scheme for RFID systems base on ECC and lightweight Hash

针对植入式RFID系统的安全性和资源约束问题,提出一种基于椭圆曲线密码(ECC)和轻量级Hash函数的双向认证方案。在标签与阅读器之间进行通信时,首先利用椭圆曲线离散对数法对阅读器身份进行认证和验证;然后使用Quark轻量级哈希算法的椭圆曲线数字签名算法对标签身份进行认证和验证,减少了密钥和公钥的数据量,从而降低了计算量。实验结果表明,相比传统方案,本文提出的认证方案能有效抵抗与植入式RFID系统相关的攻击,安全等级更高。此外,该方案还降低了约48%的通信开销和24%的内存空间需求。

For the issues that the security and resource constraint of embedded RFID system, a mutual authentication scheme based on elliptic curve cryptography（ ECC） is proposed. When communication between the tag and reader is happen, first, it use el-liptic curve discrete logarithm method to make certification and verification of identity of the reader. Then, use the elliptic curve digital signature algorithm that base on Quark light weight hash algorithm for certification and verification of identity of the tag, to reduce the key and public key sizes, as well as reduce the amount of calculation. The experimental results show that compared with the traditional method, this scheme can effectively resist the attack of RFID implant system and provides a higher security lev-el. At the same time, this scheme has 48 % less communication overhead and requires 24 % less total memory than the other ap-proaches.