基于椭圆曲线密码的RFID认证协议研究

发布时间：2018-07-08 07:46

本文选题：RFID + 椭圆曲线　；参考：《广西师范大学》2017年硕士论文

【摘要】：射频识别(Radio Frequency Identification,RFID)是一种自动识别技术。相对于条形码技术和磁条技术来说,RFID具有识别距离远、识别安全性高等优点,目前大量应用于仓库管理、交通运输、身份识别、医疗卫生等领域。特别的,RFID系统在医疗卫生领域不仅具有巨大的经济市场,而且直接关乎着病人的生命安全。由于RFID认证协议是保证该系统安全的重要部分,因此深受研究者重视。然而,在轻量级、中量级RFID认证协议中使用的加密算法容易被攻击者破解,因此不能满足该领域日益增长的安全隐私需求。重量级RFID认证协议使用公钥密码机制进行加密,因此具备更高的安全性,其中趋于成熟的椭圆曲线公钥密码机制被大量运用到认证协议中。然而,对当前基于椭圆曲线密码的RFID认证协议进行分析后发现,认证协议逻辑设计不合理和标签身份ID固定将会导致各种安全隐私问题的发生,如前向安全性和标签身份ID固定问题。这些安全问题限制了 RFID系统在该领域的进一步应用。同时,RFID系统只能顺序搜索后台数据库中标签的身份ID,在存有大量标签的医疗卫生系统中,这样的搜索方式将花费大量时间,因此认证协议的效率也不是很高。考虑到RFID认证协议的安全和效率,对该领域中基于椭圆曲线密码的RFID认证协议的研究有着非常重要的理论意义和实践价值。本文的研究成果包括以下几个方面:(1)指出了当前基于椭圆曲线密码的RFID认证协议存在的问题。对面向医疗卫生领域的RFID认证协议的研究现状进行分析,指出当前基于椭圆曲线密码的RFID认证协议存在两个方面的不足。一方面存在标签身份ID固定问题;另一方面,当前协议的认证效率很低。特别是在标签的数量达到千万级时,后台数据库查询标签身份ID的速度严重影响了整个协议的认证效率。(2)提出了一种改进的基于椭圆曲线密码的RFID认证协议(RFID Authentication Protocol Based on Elliptic Curve Cryptography,RAPBECC)。针对当前协议的不足,本文在前人协议的基础上,通过修改协议认证逻辑,加入标签身份ID动态更新机制和分组机制设计了该协议。(3)分析了 RAPBECC的安全隐私和认证效率。首先,在RAPBECC的安全、隐私和抗攻击方面进行分析并与JCH协议、MSF协议进行对比,结果表明RAPBECC不仅具有其他协议的所有安全属性还能够识别标签身份ID固定问题。然后,使用GNY逻辑对RAPBECC进行了形式化证明,结果表明RAPBECC是安全的。最后,分析了 RAPBECC的性能并与JCH协议、MSF协议进行对比,结果表明RAPBECC具有更高的认证效率。(4)验证了 RAPBECC的安全隐私和认证效率。首先对RAPBECC进行仿真,得到RAPBECC仿真系统,然后将RAPBECC仿真系统与MSF协议的仿真系统在认证效率和识别标签身份ID固定问题上进行对比实验,实验的结果表明RAPBECC仿真系统相对于MSF仿真系统具有更高的认证效率并且能够识别标签身份ID固定问题。
[Abstract]:Radio Frequency Identification (RFID) is an automatic identification technology. Compared with bar code technology and magnetic strip technology, RFID has many advantages such as long identification distance, high recognition security and so on. It is widely used in warehouse management, transportation, identification, medical and health, and so on. Special RFID system not only has a huge economic market in the field of medical and health care, but also directly relates to the life safety of patients. RFID authentication protocol is an important part to ensure the security of the system, so researchers pay much attention to it. However, the encryption algorithms used in lightweight, middleweight RFID authentication protocols are easy to be cracked by attackers, so they can not meet the growing security and privacy requirements in this field. The heavyweight RFID authentication protocol uses public key cryptography to encrypt, so it has higher security. Among them, elliptic curve public key cryptosystem is widely used in authentication protocol. However, after analyzing the current RFID authentication protocol based on elliptic curve cryptography, it is found that the illogical design of the authentication protocol and the fixed identification ID of the tag will lead to various security and privacy problems. Such as forward security and label identity ID fixed issues. These security problems limit the further application of RFID system in this field. At the same time RFID system can only search the identity ID of the label in the background database sequentially. In the medical and health system with a large number of tags such search will take a lot of time so the efficiency of authentication protocol is not very high. Considering the security and efficiency of RFID authentication protocol, it is of great theoretical significance and practical value to study RFID authentication protocol based on elliptic curve cryptography in this field. The research results of this paper include the following aspects: (1) the problems of current RFID authentication protocol based on elliptic curve cryptography are pointed out. This paper analyzes the research status of RFID authentication protocol in medical and health field, and points out that there are two shortcomings in the current RFID authentication protocol based on elliptic curve cryptography. On the one hand, the identity ID of label is fixed; on the other hand, the authentication efficiency of current protocol is very low. Especially when the number of tags reaches tens of millions, the speed of querying tag ID in backstage database seriously affects the authentication efficiency of the whole protocol. (2) an improved Authentication Protocol based on Elliptic Curve Cryptography (RAPBECC) is proposed. Aiming at the deficiency of current protocol, this paper designs the protocol by modifying protocol authentication logic, adding dynamic update mechanism of tag ID and grouping mechanism. (3) Security privacy and authentication efficiency of RAPBECC are analyzed. First of all, the security, privacy and anti-attack aspects of RAPBECC are analyzed and compared with JCH protocol and MSF protocol. The results show that RAPBECC not only has all the security attributes of other protocols, but also can identify tag identity ID fixed problem. Then, the GNY logic is used to formalize the RAPBECC, and the results show that RAPBECC is secure. Finally, the performance of RAPBECC is analyzed and compared with JCH protocol and MSF protocol. The results show that RAPBECC has higher authentication efficiency. (4) the security, privacy and authentication efficiency of RAPBECC are verified. First, the RAPBECC simulation system is simulated, and then the RAPBECC simulation system is compared with the MSF protocol simulation system on authentication efficiency and identification tag identity ID fixed problem. The experimental results show that the RAPBECC simulation system has higher authentication efficiency than MSF simulation system and can identify the identity ID fixed problem.
【学位授予单位】：广西师范大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP391.44;TP309

【相似文献】