对有源RFID的边信道攻击

发布时间：2018-03-28 07:45

本文选题：有源RFID　切入点：边信道　出处：《电子科技大学》2017年硕士论文

【摘要】：随着人们对信息存储和信息查询的要求越来越高,有源RFID的应用也越来越广泛。对其安全通信的过程是否安全也成为人们日渐关注的一个问题,特别是在边信道攻击技术发展起来的今天。边信道攻击技术是通过分析密码保护电路泄露的边信息,这种方式相对传统的密钥破解的方法,可以说是以一种另辟蹊径的方式破解密钥,这给密码领域带来了严重的威胁。因此,边信道攻击技术能否破解涉及到大量数据通信,存储查询的有源RFID系统的安全加密的密钥,本论文将对此进行研究分析。本论文将以有源RFID系统中的保障标签与阅读器之间安全通信的加密算法AES为攻击对象,结合边信道攻击技术,搭建能够采集大量电磁信息样本的自动化采集平台,通过差分电磁攻击技术和相关性电磁分析技术对采集的电磁样本进行分析,最后破解有源RFID系统中实现的AES加密算法。首先对有源RFID系统的硬件架构,软件系统以及安全协议进行简要介绍,通过AES的加密流程对其最主要的四种核心操作的分析,对其运算过程进行分析研究。其次,简单介绍了边信道攻击的几种主要攻击技术和边信道攻击的技术基础。结合AES加密算法,分析了AES加密算法中S盒运算可以作为电磁分析的攻击点,然后对选取的差分电磁分析算法和相关性电磁分析算法进行了模拟验证,证明其攻击的有效性。在对攻击对象和攻击方法研究之后,设计并实现了对有源RFID系统电磁信息的自动化采集平台。分别利用电磁探针和放大器组成的采集电路对标签的电磁信息进行采集和自制线圈和放大器组成的采集电路进行电磁信息采集。并验证了自制线圈和放大器组合的采集电路的可行性。最后,通过自制线圈和放大器组成的采集电路对S盒运算泄露的电磁信息进行大量采集。最后,对标签采集的大量电磁信息样本数据进行差分电磁分析和相关性电磁分析,然后对比这两种分析方法的结果。两种分析算法的结果都显示,在足够的样本数据的情况下,均能够破解有源RFID系统中实现的AES加密算法。有源RFID的安全通信过程,在边信道的攻击方法下并不安全,应采取一定的防御措施。
[Abstract]:With the increasing demand for information storage and information query, the application of active RFID is becoming more and more extensive. Especially with the development of the edge channel attack technology, the edge channel attack technology is based on the analysis of the edge information leaked by the cipher protection circuit, which is compared with the traditional method of key cracking. It can be said that the key is cracked in a different way, which brings a serious threat to the cryptographic field. Therefore, can the side-channel attack technology break the secure encryption key of the active RFID system which involves a large number of data communications and stores queries? This thesis will study and analyze this. This thesis will take the secure communication algorithm AES between the safeguard label and the reader in the active RFID system as the attack object, and combine with the edge channel attack technology. Build an automatic acquisition platform which can collect a large number of electromagnetic information samples, and analyze the collected electromagnetic samples by differential electromagnetic attack technology and correlation electromagnetic analysis technology. Finally, the AES encryption algorithm implemented in the active RFID system is analyzed. Firstly, the hardware architecture, software system and security protocol of the active RFID system are briefly introduced, and the four main core operations of the active RFID system are analyzed through the encryption flow of AES. Secondly, several main attack techniques of edge channel attack and the technical foundation of edge channel attack are briefly introduced. Combined with AES encryption algorithm, The S-box operation in AES encryption algorithm can be used as the attack point of electromagnetic analysis. Then the selected differential electromagnetic analysis algorithm and the correlation electromagnetic analysis algorithm are simulated and verified. To prove the effectiveness of the attack. After studying the object and method of the attack, The automatic acquisition platform for electromagnetic information of active RFID system is designed and realized. The electromagnetic information of tag is collected by the circuit composed of electromagnetic probe and amplifier, and the self-made coil and amplifier are collected respectively. The circuit carries on the electromagnetic information collection. And the feasibility of the self-made coil and amplifier combination acquisition circuit is verified. Finally, A large number of electromagnetic information leaked from S-box operation is collected by a collection circuit composed of a self-made coil and an amplifier. Finally, a large number of electromagnetic information samples collected by the label are analyzed by differential electromagnetic analysis and correlation electromagnetic analysis. Then comparing the results of the two analysis methods, the results of the two analysis algorithms show that under the condition of sufficient sample data, the AES encryption algorithm implemented in the active RFID system can be deciphered, and the secure communication process of the active RFID can be solved. In the side channel attack method is not safe, should take certain defense measures.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP391.44;TN918.4

【参考文献】