一种抗恶意攻击的RFID双向认证协议  

Defending RFID authentication protocol against malicious attacks

作　　者：张顺[1] 陈海进[1] 

机构地区：[1]南通大学江苏省专用集成电路设计重点实验室,江苏南通226019

出　　处：《计算机工程与应用》2012年第25期112-117,共6页Computer Engineering and Applications

基　　金：江苏省普通高校研究生科研创新计划项目(No.CXZZ11_0638);南通大学研究生科技创新计划项目(No.YKC11059);南通大学自然科学类科研基金交通运输专项项目(No.11ZJ001)

摘　　要：针对现有无线射频识别(RFID)认证机制存在的安全缺陷,提出一种新型抗恶意攻击的RFID双向认证协议,并基于GNY逻辑给出了协议的安全性证明。该协议将公钥加密算法和对称密钥加密算法相结合,采用阅读器双重认证及预认证阶段刷新密钥的方法,通过在标签中添加保护密钥同步的恶意攻击标记Tm,解决了当前协议中存在的认证效率较低,标签密钥更新失败导致位置跟踪和非法更新标签/服务器内部密钥造成拒绝服务(DoS)等问题,可抵抗重传,标签/阅读器假冒,通信量分析和去同步化等多种恶意攻击。分析结果表明:该协议具有安全性好,效率高,计算复杂度低等特点,适合于标签的大规模应用。Aiming at security vulnerabilities of the existing Radio Frequency Identification （RFID） authentication protocols, a novel anti-malicious attack mutual authentication protocol for RFID is proposed. The formal proof of the proposed authentication protocol is given based on GNY logic. The scheme combines public key encryption and symmetric cryptosystem, which adopts the method of reader dual-authentication and key refreshing during pre- authentication phase. The protocol achieves the anti-desynchronization requirement by adding flag T,. of malicious attacks into the tag, which solves problems of low authentication efficiency, location tracking due to failure of renewing the key of tag, and Denial of Service （DOS） resulting from illegally updating inner keys of tag/server in the existed schemes. It can resist several malicious attacks including replay, tag/reader impersonation, traffic analysis and desynchronization, etc. Analysis results show that the new protocol is of good security, high efficiency and limited computational complexity, which fit for large scale tag applications.

关 键 词：无线射频识别 恶意攻击 隐私保护 认证协议 可扩展性 GNY逻辑 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]