一种支持三方认证的轻量级RFID双向认证协议  

Lightweight Mutual Authentication Protocol Between Three Communication Agents

作　　者：吴恺凡 殷新春[1,2] WU Kai-fan;YIN Xin-chun(College of Information Engineering,Yangzhou University,Yangzhou 225127,China;Guangling College,Yangzhou University,Yangzhou 225128,China)

机构地区：[1]扬州大学信息工程学院,江苏扬州225127 [2]扬州大学广陵学院,江苏扬州225128

出　　处：《小型微型计算机系统》2022年第10期2205-2213,共9页Journal of Chinese Computer Systems

基　　金：国家自然科学基金面上项目(61472343)资助.

摘　　要：针对RFID系统存在的无线信道通信安全以及隐私保护问题,提出一种名为随机运算的轻量级技术.它可以使标签在公共信道通信时保持匿名,并通过洗牌算法来决定秘密值更新时使用的轻量级运算.结合随机运算方法,提出了一个支持三方验证的轻量级RFID认证协议RLMP3.标签只需要执行不同轻量级运算就能够更新假名.同时使用物理不可克隆函数来增加标签的伪造难度和生成假名的不可预测性.服务器能够通过二次剩余难题验证终端设备身份.该协议实现了服务器、阅读器和标签之间的互相认证.理论分析和仿真测试表明,RLMP3方案能够在实现3个主体互相认证的同时保护标签的隐私,并且标签的存储开销、标签和阅读器的在线计算以及通信开销都较低,适用于资源受限的RFID应用场景.To solve the identity authentication problem of RFID tags in the anonymous state,a lightweight technology calledRandom selection of Operatorsis used which has been proposed in our previous study.Itcan be used in the communication process to concealthetags′identity,and decide which calculation to use when the secret value is updated by the shuffling algorithm.Combined with the above methods,a lightweight anonymous RFID authentication protocol named RLMP3 based on the random operation is proposed.A tag only needs to perform a few simple bit operations supported by the electronic tag′s hardware to update pseudonyms.The physical unclonable function is used to increase the difficulty of tag forgery and the unpredictability of generating pseudonyms.The server can verify the identity of readers and tags by introducing the quadratic residue algorithm.The authentication amongserver,reader and tag is achieved.Theoretical analysis and simulation show that RLMP3 can realize the mutual authentication of three subjects while protecting the privacy of tags.Moreover,it saves the storage overheadof labels,online computation overheadof labels and readers,and communication overhead of labels.Thusthe proposed RLMP3is suitable for RFID application scenarios with limited resources.

关 键 词：无线射频识别 K-匿名 物理不可克隆函数 二次剩余 双向认证 形式化验证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]