一种高安全的融合指纹识别与NFC技术的门禁系统认证协议  

An Fingerprint Recognition and NFC Integrated Access Control Authentication Protocol with High Security

作　　者：金志刚[1] 解冰珊 Jin Zhigang;Xie Bingshan(School of Electronic Information Engineering, Tianjin University, Tianjin 300072, China;Tianjin International Engineering Institute, Tianjin University, Tianjin 300072, China)

机构地区：[1]天津大学电子信息工程学院,天津300072 [2]天津大学国际工程师学院,天津300072

出　　处：《南开大学学报（自然科学版）》2017年第5期1-7,共7页Acta Scientiarum Naturalium Universitatis Nankaiensis

基　　金：国家自然科学基金(61571318);青海省科技项目(2015-ZJ-904)

摘　　要：针对现有门禁控制系统存在的无法保证用户身份合法、操作繁琐、成本高昂的问题,提出了1种融合指纹识别和NFC技术的门禁系统认证协议,针对安全性进行了设计.首先在手机内部通过随机信息的交换生成动态AES密钥,对指纹特征信息以1次1密方式加密传输.然后手机和门禁读卡器间基于Diffie-Hellman算法计算加解密密钥,用AES加解密方式传输用户个人信息.最后由门禁系统完成个人信息的验证.基于CPN模型建立了协议关键环节的模型,协议克服了NFC卡模拟技术无用户身份合法性认证和明文传输等安全性上的不足,可以抵御非法接入攻击、重放攻击、对本机用户的个人信息窃听攻击和内部人员对其他人的窃听攻击.To solve the problems in existing access control systems, including lack of authentication of users＇ identity, cumbersome operation, and high cost, an authentication protocol for access control system integrating fingerprint identification and NFC technology was proposed aimed at security. Through the exchange of random information inside a mobile phone, a dynamic one-time Advanced Encryption Standard（AES） key was calculated to encrypt the fingerprint feature information. After that, utilized Diffie-Hellman algorithm to calculate a key to establish a secure channel between the mobile phone and the reader of access control system. Then transmitted the user＇s information using AES algorithm. At last, the access control system authorized the personal information. Employed CPN to model key points of the protocol and simulation results show that it can resist illegal access attack and replay attack, also prevent eavesdropping attacks on native users＇ personal information as well as eavesdropping attacks to others from inside.

关 键 词：门禁控制 指纹识别 NFC 身份认证 CPN 

分 类 号：TP391.4[自动化与计算机技术—计算机应用技术]