题名面向移动RFID安全认证协议的研究和设计
作者陶源
学位类别硕士
答辩日期2016-05-29
授予单位中国科学院大学
授予地点北京
导师周喜
关键词RFID 双向认证 移动性 低成本 哈希函数
学位专业计算机应用技术
中文摘要无线射频识别(RFID)技术利用无线射频信号实现非接触式自动识别,具有快速、可靠、准确及抗干扰能力强等优点,广泛应用于商品识别、公共交通、物流追踪、军事反恐、数字图书馆管理以及身份认证等领域。但由于RFID技术具有开放性以及标签大小和能力受到限制,系统容易遭受各类攻击,威胁其安全和隐私。目前,为保护RFID系统的安全性和隐私性,国内外学者专家提出各种安全保护机制。这些安全机制可分为物理方法和逻辑方法,其中逻辑方法可分为重量级、中量级以及轻量级协议,其中基于哈希函数的中量级协议在实际中具有广泛应用。考虑到系统安全和标签成本,本文重点对大量基于哈希函数的中量认证协议的安全性进行对比分析,并总结这些协议存在的问题。针对这些认证协议的不足,结合移动RFID系统的安全和隐私需求,本文提出一种基于Hash函数的移动双向认证协议。该协议可抵抗跟踪攻击、假冒攻击、中间人攻击、重放攻击、拒绝服务器攻击等,并从安全性和复杂度两方面对协议进行分析总结。最后将本文提出的协议应用于某车用气瓶电子监管系统,主要对应用该协议的子系统气瓶充气系统重新进行分析设计,详细介绍其身份认证的实现过程,并利用软件模拟多种情况的认证过程,证明该协议的可行性和安全性,可提高该系统的安全和隐私性,进一步加强车用天然气瓶的使用安全。
英文摘要Radio Frequency Identification (RFID) technology uses radio frequency signals to achieve non-contact automatic identification technology, with fast, reliable, accurate and anti-jamming ability, etc.. This technology is widely used in the identification of goods, public transport , logistics tracking, anti-terrorism military , digital library management, authentication and other fields. However, due to the openness of RFID technology and the limit of tag, RFID system is vulnerable to various attacks. This is a serious threat to security and privacy of the RFID systems.Currently, in order to protect the RFID system security and privacy, a variety of security mechanisms can be divided into physical methods and logical methods. Taking into account the system to ensure safety and reduce cost of tags, this paper analyzes many middleweight authentication protocols based on Hash function, summarizes their disadvantages.Combining with the security and privacy needs of mobile RFID system, this paper propose a Hash function based mobile mutual authentication protocol. The protocol may be resistant to track attacks, impersonation attacks, middle attacks, replay attacks, denial of server attacks, and from both the security. Then this paper analyzes security and complexity of the protocol.Finally, the proposed protocol is applied to a vehicle with a cylinder electronic monitoring system, and its subsystems pneumatic cylinder system is re-analyzed and designed. This paper details the identity authentication process and simulates the authentication process in many cases. The results demonstrate the feasibility of the protocol and security. And the proposed protocol applied to the authentication module can improve the system security and privacy.
内容类型学位论文
源URL[http://ir.xjipc.cas.cn/handle/365002/4558]  
专题新疆理化技术研究所_多语种信息技术研究室
作者单位中国科学院新疆理化技术研究所
推荐引用方式
GB/T 7714
陶源. 面向移动RFID安全认证协议的研究和设计[D]. 北京. 中国科学院大学. 2016.
个性服务
查看访问统计
相关权益政策
暂无数据
收藏/分享
所有评论 (0)
暂无评论
 

除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。


©版权所有 ©2017 CSpace - Powered by CSpace