基于伪随机数发生器的移动RFID双向认证算法  

Mobile RFID Bidirectional Authentication Algorithm Based on Pseudo Random Number Generator

作　　者：郝伟伟 吕磊 HAO Wei-wei;LYU Lei(Information Center,Administration for Market Regulation of Henan Province,Zhengzhou 450008,China;School of Information Science and Technology,Henan University of Technology,Zhengzhou 450008,China)

机构地区：[1]河南省市场监督管理局信息中心,河南郑州450008 [2]河南工业大学信息科学与工程学院,河南郑州450008

出　　处：《计算机技术与发展》2022年第5期93-98,共6页Computer Technology and Development

基　　金：国家自然科学基金(61705060)。

摘　　要：经典式的射频识别系统中读写器与后台服务器之间通过有线方式交换数据,无法满足现在人们不断增长的各种需求,移动式射频识别系统的出现,则能够解决经典式射频识别系统的困境。为能够适应移动式射频识别系统的运用,需要设计移动式的双向认证协议,以保障服务器与读写器间采用无线方式发送信息的安全性。文中提出一种轻量级的可适用于移动式RFID系统的双向认证算法,该算法基于伪随机发生器实现对发送信息的加密;为能够确保每轮消息的新鲜性,所有消息在加密的时候,全部混入随机数,使得每轮消息值不同;因随机数的随机性、互异性,使得前后消息值之间无任何关联性,增加攻击者破解难度。对多个经典协议从不同类型的攻击角度分析,表明文中算法具备良好的安全性能,同时可弥补其他算法的缺陷或不足;在计算量角度对比分析各算法,指出文中算法计算时间复杂度优于其他对比算法。In the classic RFID system, the data exchange between the reader and the server can’t meet the growing needs of people. The emergence of mobile RFID system can solve the dilemma of the classic RFID system. In order to adapt to the application of mobile RFID system, it is necessary to design a mobile two-way authentication protocol to ensure the security of wireless information transmission between server and reader. In this paper, a lightweight two-way authentication algorithm for mobile RFID system is proposed, which encrypts the sent information based on pseudo-random generator. In order to ensure the freshness of each round of messages, all messages are mixed with random numbers when they are encrypted, so that the value of each round of messages is different. Because of the randomness and mutuality of random numbers, there is no correlation between the front and back message values, which makes it more difficult for attackers to crack. The analysis of several classical protocols from different types of attacks shows that the proposed algorithm has good security performance, and can make up for the defects of other algorithms. From the point of view of the amount of computation, it is pointed out that the time complexity of the proposed algorithm is better than other algorithms.

关 键 词：射频识别技术 移动系统 伪随机数发生器 双向认证算法 新鲜性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]