基于变模与自更新密钥矩阵的高效RFID安全认证协议

Efficient RFID Security Authentication Protocol Based on Variable Modulus and Self-updating Key Matrix

为构建适合低成本标签且高效、安全的RFID认证协议,本文基于传统密钥矩阵加密算法,提出一种可实现标签认证过程中密钥矩阵的模参数在线更新的变模密钥矩阵加密算法,通过矩阵初等变换方法使得密钥矩阵可以实现自更新,以进一步弱化明文与密文的相关性,相比传统密钥矩阵加密算法提高了安全性.在密钥矩阵的加解密过程中引入Winograd算法,仅增加少量加法运算,可大幅度减少乘法运算数量,减小了标签认证过程的计算量.计算结果表明,当明文长度n大于8时,使用Winograd算法后的安全协议加解密过程的的乘法运算次数比普通矩阵乘法次数减少近50%.此外,可根据不同的应用场景,选择不同的模p值,提高特定应用场景下的协议安全性.通过BAN逻辑化分析以及协议安全性分析,证明了本文协议能够有效防范RFID系统常受到的多种典型攻击.

In order to construct an efficient and secure authentication protocol for low-cost RFID tags,a new variable modulus key matrix encryption algorithm is proposed in this paper.This algorithm can realize the online update of the module parameters of the key matrix in the process of RFID tag authentication.At the same time,the encryption or decryption matrix can be self-updated through the matrix elementary transformation method,so that the algorithm can further weaken the correlation between plaintext and ciphertext.The security is improved compared with traditional key matrix encryption algorithms.Meanwhile,the Winograd algorithm is used in the encryption and decryption process of the key matrix to reduce the amount of computation in the tag authentication process.By adding a small number of addition operations,the number of multiplication operations can be greatly reduced,thereby improving the real-time performance of tag authentication.Through calculation and analysis,it is concluded that when the plaintext length n is greater than 8,the number of multiplication operations in the encryption process is reduced by nearly 50%after using Winograd algorithm.In addition,this authentication protocol can select different values of modulus p for different applications to improve the security,irrespective of the storage limitation of low-cost RFID tags.Finally,by BAN logic analysis and protocol security analysis,it shows that the RFID security authentication protocol based on the variable modulus key matrix proposed in this paper can effectively prevent many typical attacks on RFID systems.