基于PKI和CPK的RFID系统混合密钥管理机制研究  

Study on Hybrid Key Management Mechanisms of RFID System Based on PKI and CPK

作　　者：张兵[1] 秦志光[1] 万国根[2] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都611731 [2]成都大学信息科学与技术学院,成都610106

出　　处：《电子科技大学学报》2015年第3期415-421,共7页Journal of University of Electronic Science and Technology of China

基　　金：国家863项目(2008AA04A107)

摘　　要：现有的RFID系统密钥管理通常基于RFID系统某一层设计,缺乏一种通用的架构和统一的密钥管理机制。该文基于RFID系统架构和组成元素,提出基于PKI和CPK的混合密钥管理方案。该方案对RFID设备与实体进行统一标识,建立统一的标识空间和统一的密钥空间,同时,将PKI密钥管理技术应用于RFID系统的后端系统,解决传统互联网身份认证和RFID后端现有安全方案的兼容问题;将CPK密钥管理技术应用于RFID系统的前端系统,实现前端系统密钥的"集中生成和分散存储",解决RFID系统处理对象多、单个对象资源少,对象之间可以直接证明标识的真伪而无需第三方参与的安全需求问题。提出的密钥管理架构和密钥管理机制可以应用于设备大规模部署、需要设备直接认证和离线认证的RFID系统中。The previous key management mechanisms in RFID systems are usually based on a certain layer, and lack of a common framework and a unified key management mechanism. In this article, a unified hybrid key management mechanism of RFID systems based on PKI and CPK is proposed. In the mechanism, the terminal nodes are identified according its tag, a unified identity space is established, and a unified key space is established. At the same time, PKI key management technology is used for the back-end devices of RFID systems to solve the compatibility problem of traditional Internet authentication and the existing security solutions; CPK key management technology is used for the front-end devices of RFID systems to implement the ＆quot;centralized generation and distributed storage＆quot; management of the front-end key, and the security issues are solved because there are more processing objects in the RFID system, less resource in a single device, and need more direct proof of identification of the authenticity of the device without the third party. The presented techniques can be used in the RFID applications that require large-scale deployment of equipment, equipment direct certification and offline certification requirements.

关 键 词：密钥管理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]