基于Hash函数的移动双向认证协议

Mobile mutual authentication protocol based on Hash function

针对移动射频识别(RFID)系统中因无线传输所带来的信道不安全问题,充分考虑到协议的复杂程度和标签的硬件成本,提出一种低成本的移动双向认证协议,实现了标签、读写器和后端服务器三者的相互认证。该协议使用模平方运算动态更新标签标识符,引入读写器标识符,并利用伪随机函数和哈希函数强化读写器和后端服务器之间的身份认证,提高系统移动性。与基于哈希函数的经典协议和标签所有权转移协议相比,该协议可抵抗跟踪、假冒、重放、中间人、拒绝服务器攻击等,能保证标签所有权安全转移,并从计算量和存储量分析效率,结果表明标签计算量减少,存储量较低。

Aiming at the problem of channel insecurity caused by wireless transmission in mobile Radio Frequency IDentification（ RFID） system,a low-cost mobile mutual authentication protocol based on the Hash function was proposed by considering the complexity of the protocol and the implementation cost of the tag. In the protocol,the square operation was used to dynamically update the tag identifier. And the reader identifier,the pseudo random function and Hash function were used to enhance the identity authentication between the reader and the back-end server,which can improve the mobility of the system. Compared with the typical authentication protocols based on the Hash function and the tag ownership transfer protocol,this proposed protocol can resist tracking,impersonation,replay,man-in-the-middle,Denial of Service（ Do S） attacks,etc.,which can ensure the security of tag ownership transfer. The efficiency of calculation and storage was analyzed,and the results show that the calculation of the tag is reduced and the storage capacity is lower.