面向物联网的轻量级RFID安全认证协议研究

发布时间：2018-09-11 13:13

【摘要】：物联网已成为当前世界新一轮经济和科技发展的战略制高点之一,物联网的发展对于促进经济发展和社会进步有着重要的现实意义。射频识别(Radio Frequency Identification, RFID)技术是实现物联网的关键技术之一,作为一种自动识别技术,它是利用射频信号实现无接触的信息传递,以达到识别物体的目的。近年来,随着RFID系统在各行各业的应用,在保证安全性的前提下,尽量缩减系统的开销已经成为一个重要课题。在此背景下,本文介绍了物联网的体系结构和RFID系统的分类及其工作原理,对RFID技术在物联网中的应用进行了总结,并且对物联网和RFID安全认证协议的国内外研究现状进行了概括,其中,对当前流行的轻量级认证协议进行了重点介绍。然后,分析了RFID认证协议面临的典型攻击,并列举了一些常见的RFID系统的安全隐患。在此基础上,文中分析了有关的一些RFID认证协议,比较了优势和劣势。此外,本文以轻量级认证协议LMAP++为例,通过分析,指出了协议易受到跟踪攻击,并针对此漏洞提出了解决办法,形成了新的认证协议。新的协议沿袭了LMAP++协议成本低、轻量级的优点,并通过修改传递参数的方法提高了协议的安全度。最后,对改进后的协议用数据验证方法、攻击检验方法和形式化逻辑方法证明了其安全性,分析了其算法复杂度、存储状况,并通过软件仿真模拟其工作过程以说明其性能。本文改进后的协议保留了原协议计算简便、认证效率高的特性,在计算过程中只采用了简易的比特运算,不仅成本很低,而且其安全性也在原协议的基础上得到了很大改善。在物联网应用得到高速普遍发展的背景下,具有低成本以及高安全性的RFID安全认证协议可以满足大规模部署RFID设备的需要,在物流、交通、电力、医疗等领域发挥其重要作用。
[Abstract]:The Internet of things has become one of the strategic commanding points of the new round of economic and technological development in the world. The development of the Internet of things has important practical significance for promoting economic development and social progress. Radio frequency identification (Radio Frequency Identification, RFID) technology is one of the key technologies to realize the Internet of things. As an automatic identification technology, it uses radio frequency signal to realize contactless information transmission, so as to identify objects. In recent years, with the application of RFID system in various industries, it has become an important issue to reduce the cost of the system under the premise of ensuring security. In this context, this paper introduces the architecture of the Internet of things, the classification of the RFID system and its working principle, and summarizes the application of RFID technology in the Internet of things. And the research status of Internet of things and RFID security authentication protocol at home and abroad has been summarized, among which, the current popular lightweight authentication protocol has been emphatically introduced. Then, the typical attacks of RFID authentication protocol are analyzed, and some common security risks of RFID system are listed. On this basis, some RFID authentication protocols are analyzed, and the advantages and disadvantages are compared. In addition, this paper takes the lightweight authentication protocol LMAP as an example, points out that the protocol is vulnerable to trace attack, and puts forward a solution to this vulnerability, forming a new authentication protocol. The new protocol inherits the advantages of low cost and lightweight of LMAP protocol, and improves the security of the protocol by modifying the transfer parameters. Finally, the security of the improved protocol is proved by using data verification method, attack verification method and formal logic method. The algorithm complexity and storage state are analyzed, and its working process is simulated by software simulation to illustrate its performance. The improved protocol retains the characteristics of simple calculation and high authentication efficiency. It only uses simple bit operation in the calculation process, which not only has a very low cost, but also improves its security greatly on the basis of the original protocol. With the rapid development of Internet of things (IoT) applications, the RFID security authentication protocol with low cost and high security can meet the needs of large-scale deployment of RFID equipment and play an important role in the fields of logistics, transportation, electricity, medical treatment and so on.
【学位授予单位】：北京交通大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP391.44;TN929.5

【共引文献】