基于单向伪随机函数的移动RFID系统认证协议

Mobile RFID system authentication protocol based on one-way pseudo random function

针对移动RFID系统认证中可能出现的成本、效率、安全问题,设计了一种基于单向伪随机函数的移动RFID认证协议。协议在满足Gen-2标准的前提下,综合采用位替换运算、异或运算和单向伪随机函数加密通信信息;协议充分利用标签、读写器、后端数据库三方共享密钥和三方通信信息,对信息进行加密传输和加密认证,降低系统成本;通过实现完整三方认证与密钥更新工作,避免协议遭受假冒、去同步化等攻击行为。最后,给出协议GNY理论逻辑证明以及安全、性能分析,表明新协议的可行性与安全性。

Aiming at the cost, efficiency and security of mobile RFID system authentication, a mobile RFID authen- tication protocol based on one-way pseudo random function was designed. The protocol reduced system cost by mak- ing full use of the three party of the shared key and communication information to encrypt transmission and authentica- tion. Through the implementation of three party authentication and key update work, the agreement suffered counterfeit, desynchronization and other attacks was avoided. Finally, the logical proof of GNY and its security and performance analysis were gived to show the feasibility and security of the new protocol.