信息网络安全 ›› 2015, Vol. 15 ›› Issue (9): 25-28.doi: 10.3969/j.issn.1671-1122.2015.09.006

• 入选论文 • 上一篇    下一篇

RFID安全协议追踪攻击的形式化分析

杨元原(), 陆臻, 顾健   

  1. 公安部第三研究所检测中心,上海 200031
  • 收稿日期:2015-07-15 出版日期:2015-09-01 发布日期:2015-11-13
  • 作者简介:

    作者简介: 杨元原(1981-),男,河南,博士,主要研究方向:RFID、智能卡安全;陆臻(1976-),男,浙江,副研究员,博士,主要研究方向:信息安全;顾健(1963-),男,江苏,研究员,博士,主要研究方向:信息安全。

  • 基金资助:
    公安理论及软科学研究计划[2014LLYJGASS066]

Formal Analysis of Tracking Attack for RFID Security Protocols

Yuan-yuan YANG(), Zhen LU, Jian GU   

  1. Testing Center of the Third Research Institute of the Ministry of Public Security, Shanghai 200031, China
  • Received:2015-07-15 Online:2015-09-01 Published:2015-11-13

摘要:

针对当前RFID安全协议可能存在的恶意追踪问题,文章提出了一个追踪攻击的形式化分析模型。该模型首先定义了攻击者消息元素集合的概念,之后根据攻击者消息元素集合中消息使用的代数运算,推导出攻击者的攻击行为,并由此确定攻击者行为集合。通过攻击者元素集合和攻击者行为集合,规范了攻击者攻击行为和攻击对象。之后通过引入标签特征值的概念,确定了RFID安全协议存在追踪攻击的条件,明确了攻击者发起追踪攻击的目标。最后,使用该模型对一个RFID安全协议进行了分析,计算出了该协议的标签特征值,由此发现了新的追踪攻击,证明了模型的可靠性。

关键词: RFID系统, 安全协议, 隐私性, 追踪攻击, 攻击者模型, 射频指纹

Abstract:

In order to solve the problem of malicious tracking attack that exists in RFID security protocols, a formal analysis model of tracking attack was proposed. At first, the model defined the concepts of attacker message element set. Then accroding to the algebraic calculation applied in the message in attacker message element set, the actions of attacker were deduced, and thus the attacker action set was determined. The concepts of attacker message element set and attacker action set regulated the actions and targets of attackers. Then the model introduced the concept of tag characteristic value, which confirmed the conditions that the tracking attack existed and clarified the attack target for tracking attack. Finally, using the proposed model, an RFID security protocol was analyzed. Through caculating the tag characteristic value of the protocol, a new tracking attack was found, which exactly proved the reliability of the model.

Key words: RFID system, security protocol, privacy, tracking attack, attacker model, radio frequency fingerprint

中图分类号: