一种无可信第三方的批量RFID所有权转移协议  

A Group RFID Tag Ownership Transfer Protocol without Trusted Third Party

作　　者：周志彬[1,2] 张少波[3] 罗恩韬 李超良[5] ZHOU Zhibin;ZHANG Shaobo;LUO Entao;LI Chaoliang(School of Information Science and Engineering,Central South University,Changsha Hunan 410083,China;College of Physics and Information Science,Hunan Normal University,Changsha Hunan 410012,China;School of Computer Science and Engineering,Hunan University of Science and Technology,Xiangtan Hunan 411201,China;School of Electronics and Information Engineering,Hunan University of Science and Engineering,Yongzhou Hunan 425199,China;College of Computer and Information Engineering,Hunan University of Commerce,Changsha Hunan 410205,China)

机构地区：[1]中南大学信息科学与工程学院,湖南长沙410083 [2]湖南师范大学物理与信息科学学院,湖南长沙410012 [3]湖南科技大学计算机科学与工程学院,湖南湘潭411201 [4]湖南科技学院电子与信息工程学院,湖南永州425199 [5]湖南商学院计算机与信息工程学院,湖南长沙410205

出　　处：《信息网络安全》2018年第6期18-27,共10页Netinfo Security

基　　金：国家自然科学基金[61632009;61472451;61402161];湖南省教育厅科研重点课题[16A115]

摘　　要：当贴有RFID标签的物品的所有权发生变化时,如何在新旧所有者之间进行安全可靠的交接,是RFID标签所有权转移协议需要解决的问题。现有的所有权转移协议往往注重于单个物品的所有权转移,很少涉及批量物品所有权转移的应用场景。文章通过使用组证明协议以及椭圆曲线加密,提出了一种具有前向/后向隐私的群组标签所有权转移协议;支持多个标签所有权的批量转移,通过组证明记录标签的转移记录,确保数据完整性;使用椭圆曲线加密,通过群组密钥保障标签所有权转移中的安全与隐私。文章对协议进行了安全与性能分析,具备较高的安全性、可扩展性以及较低的性能开销。When ownership of an RFID tagged item changes, how to transfer securely between the old and new owners is a problem to be addressed in the RFID tag ownership transfer protocol. Existing ownership transfer agreements tend to focus on the transfer of ownership of a single item, rarely involving the transfer of ownership of bulk items. By using group proof protocol and elliptic curve encryption, a group RFID tag ownership transfer protocol with forward/backward privacy is proposed. It supports batch transfer of multiple tag ownership, and records the transfer by grouping proof to ensure data integrity; Use elliptic curve encryption to secure security and privacy in the ownership transfer through group keys. Through security and performance analysis, the protocol has high security, scalability, and lower performance overhead.

关 键 词：所有权转移 匿名性 椭圆曲线密码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]