抗穷举攻击的改进的RFID双向认证协议  

IMPROVED RFID MUTUAL AUTHENTICATION PROTOCOL AGAINST EXHAUSTIVE ATTACK

作　　者：周扬帆 Zhou Yangfan(Department of Electronic Information,Hunan Financial and Industrial Vocational Technical College,Hengyang 421002,Hunan,China;College of Computer Science and Electronic Engineering,Hunan University,Changsha 410082,Hunan,China)

机构地区：[1]湖南财经工业职业技术学院电子信息系,湖南衡阳421002 [2]湖南大学信息科学与工程学院,湖南长沙410082

出　　处：《计算机应用与软件》2022年第8期320-324,337,共6页Computer Applications and Software

基　　金：湖南省自然科学基金项目(2019JJ60023)。

摘　　要：针对文献[16]提出的认证协议进行安全性分析,得出无法抗暴力破解攻击的不足,在该协议框架基础上,设计一个改进的协议。改进的协议为能够抵抗穷举攻击,在信息进行加密过程中确保至少两个参数对于攻击者来说是不知晓的,同时只传送密文,以此确保隐私信息的安全性;结合置换交叉合成运算对信息加密,该创新型的加密算法采用位运算方式实现,依据加密参数自身汉明重量值的不同,进行相对应的不同操作,从而增加攻击者的破解难度。对协议进行安全和性能分析,改进的协议在安全角度优于其他类型协议,具备较高的安全需求,同时具有计算量低的特征。Aiming at the security analysis of the authentication protocol in the reference[16],we find that it can’t resist the attack of brute force cracking.Based on the framework of the protocol,we design an improved protocol.In order to resist the exhaustive attack,the improved protocol ensured that at least two parameters were not only known to the attacker,but also transmits ciphertext in the process of information encryption,so as to ensure the security of privacy information.It encrypted information by combining the replacement cross synthesis operation.The innovative encryption algorithm was realized by bit operation.According to the different Hamming weight value of the encryption parameter itself,the corresponding different operations were carried out,so as to increase the difficulty of the attacker.By analyzing the security and performance of the protocol,we can conclude that the improved protocol is superior to other types of protocols in terms of security,with high security requirements and low computation.

关 键 词：物联网 射频识别系统 穷举攻击 置换交叉合成 双向认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]