EPC网络中可证明安全的EPCIS通信方案  

Provable security EPC information service communication scheme for EPC network

作　　者：李景峰[1] 潘恒[2] 郭卫锋[1] 

机构地区：[1]解放军信息工程大学密码工程学院,河南郑州450004 [2]中原工学院计算机学院,河南郑州450007

出　　处：《通信学报》2013年第S1期235-239,245,共6页Journal on Communications

摘　　要：针对EPC信息服务存在的安全问题,提出一种EPC信息服务安全通信方案ESCM,方案使用数字签名、消息认证码等安全机制,实现了分属查询应用程序和外域EPCIS服务器之间的相互认证服务与密钥协商服务,能够保护EPCIS通信的机密性和完整性。利用Canetti-Krawczyk模型证明了ESCM方案是会话密钥安全的。此外,性能分析表明该方案的通信开销、计算开销较少,适合EPC网络特性。To resolve the security drawbacks of EPC information services, a provable security EPC information service communication scheme—ESCM was designed. By using some cryptographic mechanisms such as the digital signature and the message authentication code, the ESCM could implement mutual authentication and session key agreement between the EPC Information service servers and querying application belonging to a different trust domain. Security analysis shows that the session key agreement of ESCM is provably secure in the Canetti-Krawczyk model. Furthermore, the ESCM has efficient computation and communication cost.

关 键 词：EPC信息服务 射频标识 CANETTI-KRAWCZYK模型 

分 类 号：TN918.4[电子电信—通信与信息系统]