大规模RFID系统中基于CPK-ECC的双向认证协议

CPK-ECC based mutual authentication protocol for large-scale RFID system

针对现有射频识别(RFID,radio frequency identification)认证协议扩展性较差的问题,分析了大规模RFID系统认证协议的设计需求与CPK的技术优势,提出基于CPK-ECC的认证协议。协议采用椭圆曲线加密方案与改进的快速数字签名算法,实现了双向认证与离线认证。进一步给出安全性分析,指出协议可以有效抵御已有安全与隐私攻击。与其他基于ECC的认证协议相比,协议支持无后端服务器认证,扩展性好,性能更优,适用于大规模RFID系统。

The existing RFID authentication protocols were short of scalability. Taking advantage of combined public key（CPK）, a CPK-ECC based authentication protocol was proposed considering the design demand of authentication protocols for large-scale RFID system. The protocol implements mutual and serverless authentication by adoption of the elliptic curve encryption scheme and the improved digital signature algorithm. Based on the security analysis, the proto-col can resist the existing security and privacy attacks effectively. Compared with other ECC-based protocols, the server-less protocol has better scalability and performance, suitable for large-scale RFID systems.