基于伪ID的改进的双向认证协议  

An Improved Pseudo ID-based Mutual Authentication Protocol

作　　者：陈惠红[1] 陈志刚[2] CHEN Hui-hong;CHEN Zhi-gang(School of Information Engineering,Guangzhou Panyu Polytechnic University,Guangzhou 511483,China;School of Software,Central South University,Changsha 410083,China)

机构地区：[1]广州番禺职业技术学院信息工程学院,广东广州511483 [2]中南大学软件学院,湖南长沙410083

出　　处：《控制工程》2021年第10期2038-2044,共7页Control Engineering of China

基　　金：广东省教育厅重点平台及科研项目(2018GKTSCX47);广州市教育系统创新学术团队项目(1201610034)。

摘　　要：针对基于伪ID的射频识别技术(RFID)认证协议存在安全漏洞问题,提出一种改进的基于伪ID的射频识别认证协议。为能够抵抗攻击者发起的穷举攻击,改进协议将所有传送的信息加密之后采用密文传送的方式,在信息加密的过程中,攻击者未知的变量至少达到两个以上,因此保证了协议中隐私的安全性。改进协议将哈希函数应用在信息加密上,由于哈希函数的显著特征是具备单向性,就会使协议的后向安全性得到明显提高。最后对协议进行了安全性和性能性分析,足以表明协议不仅具有较低的计算量,同时也满足了协议所需的安全性需求。Aiming at the security vulnerability of the radio frequency identification(RFID)authentication protocol based on pseudo ID,an RFID authentication protocol based on pseudo ID is proposed in this paper.In order to resist the exhaustive attacks initiated by attackers,the improved protocol encrypts all transmitted information and then uses cipher text transmission.In the process of information encryption,at least two variables are unknown to attackers,thus ensuring the security of privacy in the protocol.The improved protocol uses hash function to encrypt information.Because hash function has unidirectional characteristics,the protocol has high backward security.The security analysis and performance analysis of the protocol show that the protocol has low computational complexity and meets the security requirements of the protocol.

关 键 词：物联网 射频识别 伪ID 哈希函数 认证协议 双向认证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]