基于循环组的RFID安全认证协议

Security Mutual Authentication Protocol of Radio-Frequency Identification Based on Cyclic Group

针对射频识别(RFID)系统存在的信息隐私和安全问题,分析典型的RFID安全认证协议及其劣势,提出了基于循环组的RFID系统相互认证协议。该协议不在标签侧执行伪随机函数,而是执行简单的异或和取模运算,并基于匿名集和信息泄漏度量标签受攻击时分析系统的隐私性能和安全级别。与常见认证协议相比,所提出的协议具备运算效率高、内存需求低等优势。性能分析和仿真实验表明,该协议能够抵抗重放、异步和中间人等典型攻击,与其它认证协议相比具有更强的安全性和更好的隐私保护能力,并能满足RFID标签低成本的要求。

Aiming at the problems of privacy and security in radio-frequency identification(RFID)system, we analyzed the typical RFID security and privacy authentication protocol and their disadvantages, and then proposed a mutual authentication protocol based on the cyclic group for RFID system. Rather than execute the pseudo-random function on the tag side, our protocol is based on simple module and exclusive OR operations. Additionally, it measures the privacy protection ability and security level based on the anonymous set and information leakage. Compared with existing authentication protocol, the proposed protocol has the advantages of high computational efficiency and lower memory requirements. Results of simulation experiments show that our protocol has good performance insecurity and privacy protection. It can handle many typical attacks effectively, such as replay, asynchronous and man-in-the-middle, etc. Furthermore, it can satisfy the low-cost requirement of RFID tags.