新的轻量级RFID双向认证协议:PUF-LMAP+

A new lightweight mutual authentication protocol for RFID:PUF-LMAP+

随着射频识别(RFID)技术越来越广泛的应用,其安全与隐私问题成为制约RFID技术的主要原因之一。为了降低标签的成本,有一些基于位操作的超轻量级安全认证协议被提出,但仅仅利用位操作的超轻量级安全认证协议安全性不能很好保证。本文针对改进的LMAP+安全认证协议不能够抵抗跟踪攻击和完全泄露攻击的问题,融合物理不可克隆函数(PUF)提出新的轻量级算法,新算法能够抵抗追踪攻击、完全泄露攻击和标签克隆攻击等攻击方法。

With the wide usage of radio frequency identification （RFID）, its security and privacy have become the main problems which restrict the development of the technology. Some ultra-lightweight RFID authentication protocols have been proposed. They only in- volve simple bite-wise operations in order to reduce the cost of the tag. However, their protocols are unable to guarantee the strong se- curity property. What is more, the improved LMAP＋ protocol is proven to be vulnerable to the tracking and full disclosure attacks. In this paper, we propose a new protocol which combines the improved LMAP＋ with the physical unelonable function （PUF）. Through analysis, the new protocol can prevent the tracking, the full disclosure, the cloning and other attacks.