基于哈希函数与对称密钥的高效安全RFID系统设计

需积分: 3 54 浏览量更新于2024-10-26 收藏 222KB PDF 举报

随着物联网（IoT）的发展，无线射频识别（Radio Frequency Identification, RFID）技术在实现无处不在的智能化环境中扮演了关键角色。然而，随之而来的是对RFID系统安全性的日益关注，因为它们面临着诸如数据隐私、身份验证、攻击防御等问题。为了满足现代社会对RFID系统安全性的高标准，包括不可区分性（Indistinguishability）、前向安全性（Forward Security）、抗重放攻击（Replay Attack）、标签销毁（Tag Killing）以及所有权转移（Ownership Transfer）等要求，研究者们正在不断寻求创新解决方案。以往的研究方法往往侧重于解决单一或部分问题，但鲜有系统能够同时满足所有这些要求。本论文提出了一种结合哈希函数和对称密钥加密系统的高效且安全的RFID安全方法。通过利用哈希函数的强大特性，可以确保数据的完整性与唯一性，从而实现不可区分性。同时，通过使用对称密钥加密，可以在保证数据安全的同时，保持通信过程中的高效性，避免了公钥加密可能带来的性能开销。前向安全性是指即使未来被破解，过去的数据也不会受到影响，这在防止数据泄露和追踪方面至关重要。我们的方法通过定期更换密钥并应用时间敏感的操作，确保了这一特性。至于抗重放攻击，我们通过采用一次性密钥和序列号的机制，使得每次请求都具有独一无二的标识，难以被重复利用。标签销毁是另一个关键需求，它允许用户完全清除RFID标签的存储信息，防止被恶意利用。我们的设计允许在确保数据已删除的前提下，还能保证标签的正常功能，实现了这一目标。最后，所有权转移则涉及到数据的所有权转移过程中的安全，我们的方案支持无缝且安全的数据所有权转移，确保了系统的灵活性和合规性。这篇论文提出的RFID安全方法不仅填补了现有技术的空白，通过综合运用密码学手段和优化的设计策略，兼顾了高安全性与高效性。这对于推动RFID技术在实际应用中的广泛应用和健康发展具有重要意义。未来，随着物联网的进一步普及，此类安全措施将愈发关键，以保护个人隐私和企业资产，维护信息系统的稳定运行。

An Efﬁcient and Secure RFID Security Method

with Ownership Transfer

Kyosuke Osaka† Tsuyoshi Takagi† Kenichi Yamazaki‡ Osamu Takahashi†

†Future University-Hakodate

116-2, Kamedanakano, Hakodate,

041-8655, Japan

‡NTT DoCoMo, Inc.

3-5, Hikarinooka, Yokosuka,

239-8536, Japan

Abstract

Radio Frequency Identiﬁcation (RFID) has come under

the spotlight as technology supporting ubiquitous society.

But now, we face several security problems and challenges

in RFID systems. Recent papers have reported that RFID

systems have to achieve the following requirements: (1)

Indistinguishability, (2) Forward Security, (3) Replay At-

tack, (4) Tag Killing, and (5) Ownership Transfer. We have

to design RFID system that achieves the above-mentioned

requirements. The previous methods achieve only some

of them individually, and no RFID system has been con-

structed that achieves all requirements. In this paper, we

propose an RFID security method that achieves all require-

ments based on a hash function and a symmetric key cryp-

tosystem. In addition, our proposed method provides not

only high-security but also high-efﬁciency.

1 Introduction

RFID has been used by manufacturing management,

custody control, management of humans and farm animals,

arrangement of books at some libraries, etc. From now, in-

tended purpose of RFID will be diversiﬁed, and will be used

in every nook and cranny. But now, we face several security

problems and challenges in RFID systems.

We consider that the RFID system is constructed as Tag,

Reader, and Database. The security problems in RFID sys-

tem arise from the following: data transmission between

Tag and Reader is unencrypted, Tags do not provide tamper

resistant because Tags are inexpensive micromini devices.

Hence Tag and Reader communicate in insecure. Therefore,

we face new threats in the RFID systems. Recent papers

have reported that RFID systems have to achieve the fol-

lowing requirements: (1) the security that the attacker can

not distinguish output of Tag (Indistinguishability [10]), (2)

the security that past data are secure even if present data on

Tag leaked out to the attacker (Forward Security [10]), (3)

the security against the attack that the attacker spoofs as le-

gitimate Tag (Replay Attack [11]), (4) the security against

the DoS attack that broadcasts large amount of Query to

Tag, then stops its working (Tag Killing [3]), (5) ownership

is transferable without invasion of owner’s privacy (Owner-

ship Transfer [13]). The previous methods have been pro-

posed to achieve only some of the above-mentioned require-

ments individually [1, 6, 10, 13, etc.]. No RFID system has

been constructed that achieves all requirements.

In this paper, we propose an RFID security method that

achieves all requirements based on a hash function and a

symmetric key cryptosystem. Proposed method provides

not only high-security but also high-efﬁciency.

This paper is constructed as follows: Section 2 describes

the RFID security systems and security requirements. It

also reviews the previous methods. Section 3 describes pro-

tocol and security of the proposed method. It also com-

pares the security and efﬁciency of the proposed method

with those of the previous methods. Section 4 describes

conclusion.

2 RFID Security Systems

RFID security system consists of the three components

(Database, Reader, and Tag). We describe the protocol of

the RFID security system that is treated in this paper.

Database holds the unique IDs of each Tag, and admin-

istrates the information related to the ID (e.g. time and

location, manufacturer name, ownership, etc.). We call it

Info(ID). During the protocol, the IDs are secretly held

by only Database all of the time, and the IDs are crypto-

graphically converted and distributed outside Database. We

call the converted IDs OutConv.ID

(j)

corresponding to

the IDs, where j is the number of communication start-

ing with j =1. In summary OutConv.ID

(j)

is the j-th

Authorized licensed use limited to: BEIHANG UNIVERSITY. Downloaded on June 10,2010 at 09:00:26 UTC from IEEE Xplore. Restrictions apply.

下载后可阅读完整内容，剩余5页未读，立即下载

LukeChen_1985

粉丝: 2
资源: 47

基于哈希函数与对称密钥的高效安全RFID系统设计

The R*-tree: An Efficient and Robust Access Method 的中文翻译

Discretized Streams: An Efficient and Fault-Tolerant Model for Stream Processing

An Efficient and Secure Itinerary-Based Data Aggregation Algorithm for WSNs

ESLD: An efficient and secure link discovery scheme for software-defined networking

LNETWORK: an efficient and effective method for constructing phylogenetic networks

Efficient and adaptively secure broadcast encryption systems

An Efficient Initial Guess for the ICP Method.rar

Fully Decentralized Cooperative Localization of a Robot Team: An Efficient and Centralized Equivalent Solution

An Efficient Method for Document Categorization Based on Word2vec and Latent Semantic Analysis

An efficient and recyclable water-soluble palladacycle precatalyst for Suzuki coupling in aqueous solvents under aerial conditions

最新资源