一种基于散列函数的RFID安全认证方法

A secure authentication method based on hash ,function for RFID system

RFID系统中有限的标签芯片资源,导致数据与信息的安全成为RFID系统的重要问题之一,散列函数的单向性为RFID的识别和认证提供了一种既可靠又有效的途径。在分析了现有几种典型散列认证协议的基础上,提出了一种新的基于散列函数的安全认证协议。本协议旨在解决手持式、无线连接的RFID阅读器与标签、服务器间的识别,利用散列函数实现服务器、阅读器以及电子标签三者之间的相互认证。经过安全性与性能的分析,新协议在采用较小的存储空间和较低的运算开销的情况下,可抵抗已知的大多数攻击,有效地保证了RFID系统中数据和隐私的安全,实现了终端与服务器间的双向认证和匿名认证,非常适合于在大型分布式系统中使用。

Limited by the tag chip resource of a radio-frequency identification （RFID） system, the data and informa- tion security has been an important issue of an RFID system. The one-way Hash function provides an efficient and reliable approach for the identification and authentication of the RFID system. Based on the analysis of several typi- cal Hash authentication protocols, a novel secure authentication protocol based on the Hash function was proposed. The protocol was intended to tackle the identification among the handheld RFID reader, tags and server. Specifically, the protocol utilizes the Hash function to achieve the mutual authentication between the above three objects. The per- formance analysis shows that the proposed protocol can resist the most known attacks with reduced storage capacity and lower computation overhead. Therefore, the proposed strategy effectively ensures the data and privacy security of the RFID system, achieving the bidirectional anonymous authentication between the terminal and server, which is very suitable for the distributed large-scale RFID system.