移动RFID安全认证机制研究

发布时间：2018-03-25 16:27

本文选题：移动RFID　切入点：安全认证　出处：《河南理工大学》2016年博士论文

【摘要】：针对移动无线射频识别(Radio Frequency Identification,RFID)系统的两种体系架构,研究和设计了两种移动RFID认证协议,并在二者基础上提出了一种自适应机制,从而构成一套完整的移动RFID认证机制,解决了移动RFID系统中的身份认证和隐私保护问题并提高了标签效率。具体研究工作和贡献如下:(1)基于随机动态共享密钥的有后端数据库移动RFID认证协议研究和设计了一种基于随机动态共享密钥的有后端数据库移动RFID认证协议。协议扩展了使用伪随机数进行身份认证的传统方法,不仅将伪随机数用于保持认证数据的新鲜性,还使其作为更新共享密钥的种子,实现了共享密钥的随机、动态更新,解决了动态密钥存在关联的安全问题;提出了一种分表存储当前和历史共享密钥的新方法,实现了认证协议最后一次同步密钥的惟一存储,从而解决了持续去同步化攻击情况下的拒绝认证和密钥自动同步问题。通过对协议进行的安全和效率方面的分析与比较,以及使用BAN逻辑进行的安全性证明,协议安全有效,弥补了同类RFID认证协议在安全和效率方面存在的不足。(2)可防范阅读器失窃的无后端数据库移动RFID认证协议研究和设计了一种可防范阅读器失窃的无后端数据库移动RFID认证协议。在协议中提出了一种阅读器和标签使用不同密钥进行密钥分配的方法,解决了阅读器失窃带来的标签信息泄露风险;提出了一种基于伪随机数的标签认证方法,无需在标签中存储阅读器相关的认证信息,解决了阅读器的认证范围受限和标签存储量大的问题。协议的BAN逻辑安全性证明以及安全和效率分析与比较表明,协议安全且具有恒定的标签效率,弥补了同类RFID认证协议在阅读器失窃和实用性受限等方面存在的不足。(3)自适应后端数据库的移动RFID认证机制研究和设计了一种自适应后端数据库的新型RFID认证机制,由阅读器先进行针对性的预备认证计算,并根据计算结果判断是否连接后端数据库进行标签的认证工作,这种机制能够在有后端数据库移动RFID认证协议和无后端数据库移动RFID认证协议之间自动切换并兼顾了二者的优点,并且具备了同类RFID认证协议所没有的自适应性特征。研究结果表明,本文提出的移动RFID认证机制满足移动RFID系统在安全和效率方面的需求,可以作为完整的移动RFID安全认证机制应用于被动式标签数量庞大的移动RFID系统。
[Abstract]:Aiming at the two architectures of Radio Frequency Identification (RFID) system, two kinds of mobile RFID authentication protocols are studied and designed, and an adaptive mechanism is proposed on the basis of which a complete set of mobile RFID authentication mechanism is constructed. The problem of identity authentication and privacy protection in mobile RFID system is solved and the tag efficiency is improved. The research work and contribution are as follows: 1) Research and design of mobile RFID authentication protocol with back-end database based on random dynamic shared key. A mobile RFID authentication protocol with back-end database based on random dynamic shared key is proposed. The protocol extends the traditional method of identity authentication using pseudorandom number. The pseudo-random number is not only used to keep the authentication data fresh, but also used as the seed to update the shared key, which realizes the random and dynamic updating of the shared key, and solves the security problem of the correlation between the dynamic key and the pseudo-random number. In this paper, a new method for storing the current and historical shared keys is proposed, which realizes the unique storage of the authentication protocol's last synchronization key. In order to solve the problem of denial authentication and key automatic synchronization in the case of continuous de-synchronization attack, the protocol is proved to be secure and effective by analyzing and comparing the security and efficiency of the protocol and using BAN logic. The research and design of the mobile RFID authentication protocol without back-end database which can prevent the theft of reader, a kind of non-back-end database migration, which can prevent the theft of reader, is designed and made up for the deficiency of security and efficiency of the similar RFID authentication protocol. Dynamic RFID Authentication Protocol. In the protocol, a key distribution method using different keys for readers and tags is proposed. It solves the risk of tag information leakage caused by reader theft, and proposes a label authentication method based on pseudorandom number, which does not need to store reader related authentication information in the tag. The problem of limited authentication range and large storage of tag is solved. The BAN logic security proof of the protocol and the analysis and comparison of security and efficiency show that the protocol is secure and has constant tag efficiency. The mobile RFID authentication mechanism of adaptive back-end database is researched and designed. A new type of RFID authentication mechanism of adaptive back-end database is designed, which makes up for the deficiency of the similar RFID authentication protocol in the aspects of reader theft and limited practicability. The reader first carries on the targeted preparatory authentication calculation, and according to the calculation result determines whether to connect the back-end database to carry on the tag authentication work, This mechanism can automatically switch between the back-end database mobile RFID authentication protocol and the non-back-end database mobile RFID authentication protocol. The research results show that the mobile RFID authentication mechanism proposed in this paper meets the security and efficiency requirements of the mobile RFID system. It can be used as a complete mobile RFID security authentication mechanism for mobile RFID systems with a large number of passive tags.
【学位授予单位】：河南理工大学
【学位级别】：博士
【学位授予年份】：2016
【分类号】：TP391.44;TP309

【相似文献】