基于安全和无后台服务器的RFID产品防伪系统研究

发布时间：2018-03-06 20:26

本文选题：射频识别　切入点：信息安全　出处：《首都师范大学》2014年硕士论文　论文类型：学位论文

【摘要】：射频识别即RFID技术因其便携、安全等特点在防伪领域具有广泛应用。现有的RFID防伪系统由标签、阅读器和后端数据库组成,通过RFlD认证协议来识别商品标签的真伪。本文分析了现有RFID防伪技术的特点,分析其存在的各种缺陷,结合商品生产的特点,提出了一种基于安全和无后台服务器的RFID双向认证协议,通过形式化验证的方法证明了协议的安全性,并从基本隐私泄露、追踪、克隆、监听、物理攻击和拒绝服务等六个方面分析了协议抵抗攻击的能力。在本文中使用无后台服务器机制,不要求RFID阅读器、标签与后端服务器同步,避免增加系统运行负荷。这种机制消除了RFID阅读器和后端服务器通信开销、数据传输安全和服务器自身安全带来的隐患,避免了使用后端服务器模式引起的通信量、服务器计算量、服务器扩展性、以及RFID阅读器、标签和后端服务器进行双向认证等问题。无后台服务器机制提高了RFID防伪系统的安全性、经济性、使用便携性和灵活性。 RFID的标签以及阅读器的计算量和存储量都有限,基于传统密码学方法的认证协议不适用于RFTD认证协议,而且有源RFID标签的电源有限,运行时间复杂度不能过高,因此本文提出的安全认证协议避免使用公钥加密机制。为了实现标签和阅读器的双向认证,本文中提出对阅读器的授权概念,每个阅读器都有唯一的标识ID,有一个可信任的认证机构向阅读器中写入认证标签需要的信息,用于向标签证明自己的合法身份以及验证标签,实现RFID阅读器和标签之间一种轻量级的安全双向认证协议。它不涉及复杂的计算,对于存储容量要求低,但是能够达到双向认证、通信完整、防止重放攻击、防止中间人攻击、防止拒绝服务攻击等安全需求,能够较好的维持效率和性能之间的平衡。和已有的技术相比,本项目的解决方案充分考虑了RFID芯片计算能力和存储能力受限制的特点,充分考虑到RFID防伪系统安全性、便携性、低成本等实际需求,实现了一种轻量级安全认证协议,实现安全、高效和便携的RFID产品防伪系统,对企业进行产品防伪、监控部门进行供应链跟踪具有重要的现实意义。
[Abstract]:Radio Frequency Identification (RFID) is widely used in the field of anti-counterfeiting because of its portability and security. The existing RFID security system consists of tags, readers and back-end databases. This paper analyzes the characteristics of the existing RFID anti-counterfeiting technology, analyzes its various defects, and combines the characteristics of commodity production. A RFID bidirectional authentication protocol based on secure and recoilless server is proposed. The security of the protocol is proved by formal verification, and the protocol is leaked, tracked, cloned and monitored from the basic privacy. Six aspects of physical attack and denial of service are analyzed to analyze the ability of protocol to resist attacks. In this paper, no back-end server mechanism is used, RFID reader is not required, tag is synchronized with back-end server, and system running load is avoided. This mechanism eliminates communication overhead between RFID reader and back-end server. Data transmission security and the security of the server itself, avoid the use of back-end server mode caused by the traffic, server computing, server scalability, and RFID reader, No background server mechanism improves the security, economy, portability and flexibility of RFID security system. The computation and storage of RFID tags and readers are limited. The authentication protocol based on traditional cryptography is not suitable for RFTD authentication protocols. Moreover, the power supply of active RFID tags is limited, and the complexity of running time should not be too high. Therefore, the security authentication protocol proposed in this paper avoids the use of public key encryption mechanism. In order to realize the bidirectional authentication of tags and readers, this paper proposes the concept of authorization for readers. Each reader has a unique ID, and a trusted certification authority writes to the reader the information needed to authenticate the tag to prove its legal identity to the tag and to authenticate the tag. A lightweight secure bidirectional authentication protocol between RFID reader and tag is implemented. It does not involve complex computation and requires low storage capacity, but it can achieve bidirectional authentication, complete communication, prevent replay attack and man-in-the-middle attack. To prevent denial of service attacks and other security requirements, a good balance between efficiency and performance can be maintained. Compared with the existing technology, the solution of this project fully takes into account the limited computing ability and storage capacity of RFID chip, and fully considers the security, portability, low cost and other practical requirements of RFID anti-counterfeiting system. A lightweight security authentication protocol is implemented to implement a secure, efficient and portable anti-counterfeiting system for RFID products. It is of great practical significance for enterprises to conduct anti-counterfeiting and monitoring departments to track supply chains.
【学位授予单位】：首都师范大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP391.44;TP309

【相似文献】