一种适用于NFC移动设备的双向认证安全方案

发布时间：2019-03-04 20:47

【摘要】：近场无线通信(NFC)是一种已经被广泛应用的短距无线通信技术。其中最常见的是将NFC技术应用于移动支付和门禁访问控制等应用。从技术上讲,这些应用利用NFC模拟卡模式将NFC设备模拟成银行卡或门禁卡,然后等待外部阅读器验证。在这类应用场景下,选取合适的安全认证方案是非常重要的。首先,介绍了现有的NFC认证系统和安全方案并分析了系统安全需求和潜在的安全风险。然后,采用Hash、AES和口令Key动态更新机制,提出了一种适用于NFC移动设备的双向认证安全方案,并设计了自同步机制。最后,利用GNY逻辑以形式化证明的形式证明了方案的安全性,分析表明该方案能解决伪造、重放攻击、窃听、篡改、异步攻击等安全问题。
[Abstract]:Near-field wireless communication (NFC) is a short-range wireless communication technology which has been widely used. One of the most common is the application of NFC technology in mobile payment and access control applications. Technically, these applications use NFC analog card mode to simulate NFC devices as bank cards or gate cards, and then wait for external readers to verify. In this kind of application scenario, it is very important to choose the appropriate security authentication scheme. Firstly, the existing NFC authentication system and security scheme are introduced, and the security requirements and potential security risks of the system are analyzed. Then, using the dynamic update mechanism of Hash,AES and password Key, a two-way authentication security scheme for NFC mobile devices is proposed, and the self-synchronization mechanism is designed. Finally, the security of the scheme is proved by using GNY logic in the form of formal proof. The analysis shows that the scheme can solve the security problems such as forgery, replay attack, eavesdropping, tampering, asynchronous attack and so on.
【作者单位】：宁波大学信息科学与工程学院;宁波水表股份有限公司;
【基金】：国家自然科学基金资助项目(No.61672302) 浙江省重中之重学科资助项目(No.XKXL1509) 宁波市科技局产业技术创新及成果产业化重点资助项目(No.2013B10034) 宁波市智能水表与测控技术科技创新团队项目~~
【分类号】：TN92;TP309;TP391.44

【相似文献】