一种安全的射频识别双向认证协议  

Secure Bidirectional Authentication Protocol for RFID

作　　者：占善华[1,2] ZHAN Shanhua(Department of Information Management,Guangdong Justice Police Vocational College,Guangzhou 510006,China;School of Computer Science and Technology,Guangdong University of Technology,Guangzhou 510006,China)

机构地区：[1]广东司法警官职业学院信息管理系,广州510006 [2]广东工业大学计算机学院,广州510006

出　　处：《计算机工程与应用》2019年第5期83-88,186,共7页Computer Engineering and Applications

基　　金：国家自然科学基金(No.61672171;No.61772141);广东省教育厅重大科研项目(No.2016KZDXM052);广东司法警官职业学院第三届院级课题(No.2017YB007)

摘　　要：在RFID系统中,标签与读写器之间采用无线方式进行通信,易被攻击者窃取相关隐私信息,为保证两者之间通信安全,提出一种基于二次剩余定理的双向认证协议。协议采用二次剩余定理对传输数据进行加密,基于大数分解难题,有效保证数据的安全;且加密过程中,随机数的混入,使得消息每次均不相同,增大破解难度;超轻量级按位运算的引入,在一定程度上,能够降低系统整体计算量及成本;数据库端引入随机数查重校验机制,使系统能够抵抗去同步化等攻击。安全性分析表明协议较其他此类经典协议具有更高的安全性,能够保障传输数据的可靠性;性能分析表明协议较其他此类经典协议具有较低的计算量及成本。In the RFID system,the tag and the reader communicate wirelessly,which is easily attacked by the attacker to intercept the relevant private information.In order to ensure the communication security between the both,a bidirectional authentication protocol based on the quadratic residue theorem is proposed.The protocol uses the quadratic residue theorem to encrypt the transmitted data and it is based on the complex problem of factoring large number,so the protocol can ensure the security of the data effectively.Furthermore,random numbers are mixed into the encryption process,which makes the messages different each time so as to increase the difficulty of cracking.Besides,the use of ultra-lightweight bitwise operation,to a certain extent,can reduce the overall system computing and cost.In addition,the database introduces the check mechanism for random numbers to enable the system to resist attacks such as desynchronization attack.Security analysis shows that the security of this protocol is higher than other same kind of classical protocols which can guarantee the reliability of data transmission.Performance analysis shows that the protocol has less computational complexity and lower cost than other same kind of classical protocols.

关 键 词：射频识别 随机数 双向认证 按位运算 二次剩余定理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]