可证明安全的轻量级RFID所有权转移协议.pdf

第38卷第8期
电子与信息学报
Vol 38NO.8
2016年8月
Journal of Electronics Information Technology
ug.
可证明安全的轻量级RFID所有权转移协议
陈秀清0曹天杰瞿靖轩
徐州医科大学医学信息学院徐州221008
(中国矿业大学计算机科学与技术学院徐州22100
摘要:设计安全的无线射频识别协议有助于实现“智慧城市”的规划和构建完善的智慧网络。安全的RFID所
有权转移协议要求同时具备安全性和隐私性,标签的前向不可追踪性和后向不可追踪性是RFID系统实际应用中
需要考量的两个重要的隐私性能。针对现有供应链系统中所有权转移协议存在的各种安全隐私问题,该文改进了原
有前向不可追踪性定义的错过密钥更新过程的不合理的假设,提出了强前向不可追踪性的概念。提出了一个基于二
次剩余定理的轻量级RFID所有权转移协议,并使用改进的模型和定义形式化证明了协议的安全性和隐私性。证
明结果表明新方案既可以抵御内部读卡器恶意假冒攻击,追踪攻击,标签假冒攻击和异步攻击,又满足强前向不可
追踪性和后向不可追踪性等隐私性能;新协议在实现低成本和高效率认证的基础上,比其他协议安全性和隐私性更
好
关键词:无线射频识别;所有权转移协议;强前向不可追踪性;后向不可追踪性:二次剩余定理
中图分类号:TP391.45
文献标识码:A
文章编号:1009-5896(2016)08-2091-08
DOL:10.1199/JEIT151049
Provable Secure for the Lightweight RF ID Ownership Transfer Protocol
CHEN Xinuging CAO Tianjie ZHAI Jingxuan
o( School of Medicine Information, Xuzhou Medical University, Xuzhou 221008, China)
College of Computer Science and Technology, China University of Mining and Technology, Xuzhou 221008, China)
Abstract: In order to implement the"wisdom city" planning and build perfect wisdom network, it is important to
design the security Radio Frequency Identification(RFID )protocol. A secure RFID ownership transfer protocol
should be evaluated in terms of the security and privacy properties. In particular, there are two important privacy
properties included forward untraceable and backward untraceable in the practical application of R. ID system. In
order to solve the various security and privacy problems, this paper enhances the unreasonable assumption that the
key-update session in the definition of forward untraceable, then proposes the definition of
strong forward untraceable. In addition, this paper designs the lightweight RFID ownership transfer protocol based
on quadratic residues, and uses the enhanced model and definitions to formal prove the security and privacy
properties. Moreover, the proof results not only show that the scheme resists against inner reader malicious
im-personation attack, tracing attack, tag impersonation attack and desynchronization attack, but also formally
prove that the proposed protocol meets strong forward untraceable and backward untraceable properties. In
ddition, the analysis results demonstrate that the protocol based on low-cost and high efficiency is superior to
other protocols in the security and performance properties
Key words: Radio Frequeny Identification (RFID Ownership transfer protocols; Strong forward untraceable
Backward untraceable; Quadratic residues
1引言
RFID)技术在带给各行各业的商业应用更多便利和
无线射频识别( Radio Frequency Identification,
更高效的服务的同时,也将“智慧城市”由想法落
实为现实的各种应用,如智能公交系统、智能医疗
收稿日期:2015-09-17:改回日期:20160513:网络出版:20160624系统、智能旅游系统等。而智慧城市的全方位处理
基金项目:困家自然科学基金(130823江苏台第四期“23高3层能力要有很好的现实应用,则需要具备完善的安全
通信作者:曹天杰ticas@cumt.edu.cn
次人才培养工程"科研项日(BRA20140472,江苏省“六大人オ高峰”和隐私性能的PFD安全协议。文献1-5都是基于
科研项目(2014WLW-023
次剩余定理设计的RFID协议。在所有权转移协
The National Natural Science Foundation of
China (61303263), The 333 Project of Jiangsu Province
议中,带有RFID标签的物品在其生命周期内的所
(BRA201407,The" Six-top-talents High-level Talent Cultivation有权是不断变化的。如果消费者使用物品时出现问
Project Research Funds of Jiangsu Province(2014-wlw-023)