基于移动智能终端的超轻量级移动RFID安全认证协议

doi:10.3969/j.issn.1671-1122.2017.05.004

信息网络安全 ›› 2017, Vol. 17 ›› Issue (5): 22-27.doi: 10.3969/j.issn.1671-1122.2017.05.004

基于移动智能终端的超轻量级移动RFID安全认证协议

杨玉龙^1,²(), 彭长根^2,³, 郑少波¹, 朱义杰^1,²

1. 贵州航天计量测试技术研究所,贵州贵阳 550009
2. 贵州大学密码学与数据安全研究所,贵州贵阳 550025
3. 贵州省公共大数据重点实验室(贵州大学), 贵州贵阳 550025

收稿日期:2017-03-28 出版日期:2017-05-20 发布日期:2020-05-12
作者简介:
作者简介：杨玉龙（1988— ),男,湖北,硕士,主要研究方向为密码学与数据安全;彭长根（1963—）,男,贵州,教授,博士,主要研究方向为密码学、信息安全;郑少波（1982—),男,湖北,高级工程师,主要研究方向为网络安全;朱义杰（1989—）,男,山东,硕士,主要研究方向为密码学与可信计算。
基金资助:
国家自然科学基金[61662009,61262073];贵州省科技厅科技支撑计划[黔科合支撑(2016)2315]

Ultra-lightweight Security Authentication Protocol for Mobile RFID Systems Based on Mobile Smart Terminal

Yulong YANG^1,²(), Changgen PENG^2,³, Shaobo ZHENG¹, Yijie ZHU^1,²

1. Institute of Guizhou Aerospace Measurement Testing Technology, Guiyang Guizhou 550009, China
2. Institute of Cryptography & Data Security, Guizhou University, Guiyang Guizhou 550025, China;
3. Guizhou Provincial Key Laboratory of Public Big Data (Guizhou University), Guiyang Guizhou 550025, China

Received:2017-03-28 Online:2017-05-20 Published:2020-05-12

摘要/Abstract

摘要：

文章对比分析了传统RFID系统与移动RFID系统在结构上的区别,指出传统RFID认证协议通常难以适应移动RFID系统,由此提出了一种适用于移动RFID系统的基于移动智能终端的超轻量级安全认证协议。协议采用位逻辑运算、伪随机数、单向Hash函数等设计实现。安全性分析指出,协议能有效抵抗标签的匿名性、标签的位置隐私、前向安全、重放攻击等已有的各种攻击。与现有的结构类似的超轻量级RFID认证协议和移动RFID认证协议相比,文章协议扩展性更好,安全性和性能更优。

关键词: 移动RFID系统, 移动智能终端, 超轻量级, 安全认证, 隐私保护

Abstract:

This paper compares and analyzes the differences between the traditional RFID system and the mobile RFID system in structure, and points out that traditional RFID authentication protocols are usually difficult to adapt to mobile RFID systems. In order to solve the problem, this paper proposes an ultra-lightweight security authentication protocol based on the mobile smart terminal for mobile RFID systems. The protocol is designed by only using bit logic operation, pseudo random number, one-way Hash function and so on. The security analysis shows that the protocol can effectively resist the existed various attacks such as tag anonymity, tag location privacy, forward security, replay attack. Compared with the existing ultra-lightweight RFID authentication protocol and mobile RFID authentication protocol with similar structures, the protocol has better scalability, security and performance.

Key words: mobile RFID systems, mobile smart terminal, ultra-lightweight, security authentication, privacy protection

中图分类号:

TP309

杨玉龙, 彭长根, 郑少波, 朱义杰. 基于移动智能终端的超轻量级移动RFID安全认证协议[J]. 信息网络安全, 2017, 17(5): 22-27.

Yulong YANG, Changgen PENG, Shaobo ZHENG, Yijie ZHU. Ultra-lightweight Security Authentication Protocol for Mobile RFID Systems Based on Mobile Smart Terminal[J]. Netinfo Security, 2017, 17(5): 22-27.

图/表 6

参考文献 24

[1]	JUELS A.RFID Security and Privacy: A Research Survey[J]. IEEE Journal on Selected Areas in Communications, 2006, 24(2): 381-394.
[2]	LEE H, KIM J.Privacy Threats and Issues in Mobile RFID[C]//IEEE. Availability, Reliability and Security, 2006. ARES 2006. The First International Conference on, April 20-22,2006. Vienna, Austria.NJ:IEEE, 2006: 5.
[3]	PERIS-LOPEZ P, HERNANDEZ-CASTRO J C, ESTEVEZ-TAPIADOR J M, et al. M2AP: A Minimalist Mutual-Authentication Protocol for Low-Cost RFID Tags[EB/OL]. 2017-3-12.
[4]	PERIS-LOPEZ P, HERNANDEZ-CASTRO J C, ESTEVEZ-TAPIADOR J M, et al. EMAP: An Efficient Mutual-Authentication Protocol for Low-Cost RFID Tags[A]//On the Move to Meaningful Internet Systems 2006: OTM 2006 Workshops[M]. Heidelberg :Springer Berlin Heidelberg, 2006: 352-361.
[5]	PERIS-LOPEZ P, HERNANDEZ-CASTRO J C, ESTEVEZ-TAPIADOR J M, et al. LMAP: A Real Light-Weight Mutual Authentication Protocol for Low-Cost RFID Tags[EB/OL]. 2017-3-12.
[6]	CHIEN H Y.SASI: A New Ultralightweight RFID Authentication Protocol Providing Strong Authentication and Strong Integrity[J]. IEEE Transactions on Dependable and Secure Computing, 2007, 4(4): 337-340.
[7]	蒋政君,田海博,张方国.基于PUF的RFID防伪技术研究综述[J]. 信息网络安全,2016(4):38-43.
[8]	PERIS-LOPEZ P, HERNANDEZ-CASTRO J C, ESTEVEZ-TAPIADOR J M, et al. Advances in Ultralight-Weight Cryptography for Low-cost RFID Tags: Gossamer Protocol[C]// Information Security Applications, International Work-Shop. Wisa 2008, September 23-25, 2008.Jeju Island, Korea. Heidelberg:Springer-Verlag Berlin,2008: 56-68.
[9]	AHMED E G, SHAABAN E, HASHEM M.Lightweight Mutual Authentication Protocol for Low Cost RFID Tags[J]. International Journal of Network Security & Its Applications, 2010, 2(2):27-37.
[10]	LEE Y C, HSIEH Y C, YOU P S, et al.A New Ultralightweight RFID Protocol with Mutual Authentication[C]//IEEE.Information Engineering, 2009. ICIE’09. WASE International Conference on. July 10-11, 2009. Taiyuan, China.NJ: IEEE, 2009: 58-61.
[11]	PERIS-LOPEZ P, HERNANDEZ-CASTRO J C, ESTEVEZ-TAPIADOR J M, et al. Security Flaws in a Recent Ultralightweight RFID Protocol[EB/OL].2017-3-12.
[12]	TIAN Yun, CHEN Gongliang, LI Jianhua.A New Ultralightweight RFID Authentication Protocol with Permutation[J]. IEEE Communications Letters, 2012, 16(5):702-705.
[13]	马庆,郭亚军,曾庆江,等.一种新的超轻量级RFID双向认证协议[J]. 信息网络安全,2016(5):44-50.
[14]	CHEN Yalin, CHOU J S, SUN H M.A Novel Mutual Authentication Scheme Based on Quadratic Residues for RFID Systems[J]. Computer Networks, 2008, 52(12):2373-2380.
[15]	YEH T C, WU C H, TSENG Y M.Improvement of the RFID Authentication Scheme Based on Quadratic Residues[J]. Computer Communications, 2011, 34(3):337-341.
[16]	DOSS R, SUNDARESAN S, ZHOU Wanlei.A Practical Quadratic Residues-based Scheme for Authentication and Privacy in Mobile RFID Systems[J]. Ad Hoc Networks, 2013, 11(1):383-396.
[17]	NIU Ben, ZHU Xiayan, CHI Haotian, et al.Privacy and Authentication Protocol for Mobile RFID Systems[J]. Wireless Personal Communications, 2014, 77(3):1713-1731.
[18]	梁颖升,王琼霄,马存庆,等. 一种基于移动终端的可信消息传输方案设计[J]. 信息网络安全,2015(9):158-162.
[19]	LIU A X, BAILEY L A.PAP: A Privacy and Authentication Protocol for Passive RFID Tags[J]. Computer Communications, 2009, 32(7-10):1194-1199.
[20]	KULSENG L, YU Zhen, WEI Yawen, et al.Lightweight Mutual Authentication and Ownership Transfer for RFID Systems[C]// IEEE. INFOCOM, 2010 Proceedings IEEE, March 14 - 19, 2010. San Diego, California, USA.NJ:IEEE, 2010:1-5.
[21]	CHO J S, YEO S S, KIM S K.Securing against Brute-force Attack: A Hash-based RFID Mutual Authentication Protocol Using a Secret Value[J]. Computer Communications, 2011, 34(3):391-397.
[22]	LIU A T, CHANG K C, LO Y S,et al.The Increase of RFID Privacy and Security with Mutual Authentication Mechanism in Supply Chain Management[J]. International Journal of Electronic Business Management, 2012, 10(1):1-7.
[23]	MORSHED M, ATKINS A, YU Hongnian.An Efficient and Secure Authentication Protocol for RFID Systems[J]. International Journal of Automation and Computing , 2012,9(3):257-265.
[24]	CHANG Yafen, LIN S C, CHANG Panyu.A Location-Privacy-Protected RFID Authentication Scheme[C]//IEEE. Communications (ICC), 2011 IEEE International Conference on, June 5-9, 2011. Kyoto, Japan.NJ:IEEE, 2011:1-4.

基于移动智能终端的超轻量级移动RFID安全认证协议

Ultra-lightweight Security Authentication Protocol for Mobile RFID Systems Based on Mobile Smart Terminal

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 6

参考文献 24

相关文章 15

编辑推荐

Metrics

本文评价

[1]	唐春明, 林旭慧. 隐私保护集合交集计算协议[J]. 信息网络安全, 2020, 20(1): 9-15.
[2]	汪金苗, 王国威, 王梅, 朱瑞瑾. 面向雾计算的隐私保护与访问控制方法[J]. 信息网络安全, 2019, 19(9): 41-45.
[3]	郝文江, 林云. 互联网企业社会责任现状与启示研究[J]. 信息网络安全, 2019, 19(9): 130-133.
[4]	周权, 许舒美, 杨宁滨. 一种基于ABGS的智能电网隐私保护方案[J]. 信息网络安全, 2019, 19(7): 25-30.
[5]	李怡霖, 闫峥, 谢皓萌. 车载自组织网络的隐私保护综述[J]. 信息网络安全, 2019, 19(4): 63-72.
[6]	傅彦铭, 李振铎. 基于拉普拉斯机制的差分隐私保护k-means++聚类算法研究[J]. 信息网络安全, 2019, 19(2): 43-52.
[7]	赵志岩, 吴剑, 康凯. 一种兼顾业务数据安全的隐私保护世系发布方法[J]. 信息网络安全, 2019, 19(12): 29-37.
[8]	胡荣磊, 何艳琼, 曾萍, 范晓红. 一种大数据环境下医疗隐私保护方案设计与实现[J]. 信息网络安全, 2018, 18(9): 48-54.
[9]	李佩丽, 徐海霞, 马添军, 穆永恒. 区块链技术在网络互助中的应用及用户隐私保护[J]. 信息网络安全, 2018, 18(9): 60-65.
[10]	马蓉, 陈秀华, 刘慧, 熊金波. 移动群智感知中用户隐私度量与隐私保护研究[J]. 信息网络安全, 2018, 18(8): 64-72.
[11]	赖成喆, 王文娟. 面向车队的安全且具备隐私保护的移动性管理框架[J]. 信息网络安全, 2018, 18(7): 36-46.
[12]	王乐, 杨哲荣, 刘容京, 王祥. 基于属性加密算法的可穿戴设备系统隐私保护方法研究[J]. 信息网络安全, 2018, 18(6): 77-84.
[13]	张磊, 王斌, 于莉莉. 基于马尔可夫预测的连续查询隐私保护方法[J]. 信息网络安全, 2018, 18(5): 12-12.
[14]	张磊, 王斌, 于莉莉. 基于Hash函数的属性泛化隐私保护方案[J]. 信息网络安全, 2018, 18(3): 14-25.
[15]	汪生, 李根, 庄洪林, 金志刚. 一种V2G智能化能源管理的认证机制[J]. 信息网络安全, 2018, 18(12): 23-30.