基于标签生命周期的射频识别系统安全和隐私风险研究  

Study on the Security and Privacy Risks of RFID System Based on RFID Tag Life Cycle

作　　者：康迎曦[1] 唐志军[2] 席在芳[2] 

机构地区：[1]湖南工程学院电气系 [2]湖南科技大学信息与电气工程学院

出　　处：《中国安全科学学报》2010年第9期105-111,共7页China Safety Science Journal

基　　金：国家自然科学基金资助(61074051);湖南省教育厅资助项目(09C398)

摘　　要：针对无线射频识别(RFID)技术应用的日益重要性和RFID系统的安全性现状,基于RFID技术机理,从安全和隐私风险的角度阐述RFID技术及其应用业务进程,并分析RFID技术所面临的主要安全和隐私危险问题。在此基础上,基于标签生命周期(RTLC)方法,详细分析标签在使用过程中所存在的安全漏洞和威胁性,信息资产的完整性和可用性,以及隐私情况。然后从实际应用的角度提出减轻安全和隐私风险的具体措施,以期为解决RFID应用中存在的各种安全和隐私问题提供帮助。分析表明,采用RTLC方法,并根据业务进程的不同阶段采取相应的安全措施可以降低或缓解RFID系统的安全和隐私风险。In view of the increasing importance of RFID technology application and the existing security situation of RFID system,RFID technology and its business process are discussed from security and privacy risk points of view based on the mechanics of RFID technology.Furthermore,main security and privacy problems are analyzed in detail for RFID technology.On this basis,the security vulnerability and threats existing in the use of RFID tag are analyzed in detail based on RTLC,and the integrity and availability of the information assets are identified as well as its implications for privacy.Then some measures are proposed to mitigate the security and privacy risk from the perspective of practical application,so as to provide help for solving various security and privacy problems in RFID application.It is concluded that the security and privacy risks in RFID system can be reduced or mitigated by using the tag life cycle analysis method and taking corresponding safeguards according to the different stages of business process.

关 键 词：无线射频识别(RFID) 标签生命周期(RTLC) 安全 隐私 风险 业务进程 

分 类 号：X924.4[环境科学与工程—安全科学]