CN104680225A

CN104680225A - Security certificate and AES (Advanced Encryption Standard) encryption method of RFID (radio frequency identification device) (840MHz - 845MHz) automobile electronic mark

Info

Publication number: CN104680225A
Application number: CN201310642305.8A
Authority: CN
Inventors: 陈昊
Original assignee: JIANGSU BELLON Technology CORP
Current assignee: JIANGSU BELLON Technology CORP
Priority date: 2013-12-02
Filing date: 2013-12-02
Publication date: 2015-06-03

Abstract

The invention relates to a security certificate and AES (Advanced Encryption Standard) encryption method of an RFID (radio frequency identification device) (840MHz - 845MHz) automobile electronic mark. The method comprises the steps of encrypting data information d in an electronic tag memory by utilizing a secrete key Rx in an AES algorithm, storing an encrypted ciphertext m into the electronic tag memory, and preventing an attacker from stealing a message; encrypting the AES encryption secrete key Rx by virtue of the AES algorithm, storing an encrypted ciphertext Ex to the electronic tag memory, so that the user information existing in a plaintext form does not exist in the electronic tag, the confidentiality of the transmission data can be guaranteed, and the user information can be prevented from being acquired by the attacker by attacking the electronic tag; carrying out the XXTEA encryption by adopting an exclusive mark TID code of the electronic tag as a foundation by virtue of an encryption/decryption unit, and adopting the encrypted ciphertext as an access password and a deactivation password of the encrypted ciphertext. By virtue of the three layers of ciphertexts, the security of the electronic tag is guaranteed, the illegal access of an unauthorized reader-writer can be effectively prevented, and the security of the entire automobile electronic mark system can be guaranteed.

Description

The safety certification of RFID (840-845MHz) vehicle electron identifying and AES encryption

Technical field

The present invention relates to UHF RFID technical field of RFID, in particular in field of traffic control, based on safe handling and the access technique of the vehicle electron identifying of UHF RFID technique, specifically refer to safety certification and the AES encryption of RFID (840-845MHz) vehicle electron identifying.

Background technology

Along with the widespread use of ultra-high frequency RFID radio-frequency recognition technology in field of traffic control, its safety issue is more and more taken seriously.In ISO18000-6C/EPC C1G2 consensus standard, without any verification process between electronic tag and read write line, agreement does not specify the certification of electronic tag to read write line, this just causes compatible protocol but unwarranted read write line can data arbitrarily on reading electronic labels, and some important informations in electronic tag internal storage all can obtain by victim easily.And assailant can distort the information of electronic tag by write command, this can have serious consequences in traffic administration.Same read write line also cannot differentiate the legitimacy of electronic tag, and after the EPC code of electronic tag is intercepted and captured, assailant can forge the electronic tag with same-code, and read write line cannot differentiate the true and false of cloning electronic tag.Thus, in the traffic control system that security requirement is higher, especially when the electronic mark of electronic tag as automobile uses, information encryption and safety certification are necessary.

Summary of the invention

In sum, for prior art defect, carry out between existing super high frequency radio frequency recognition read-write machine and electronic tag authorize two-way authentication, data encryption technology solve the safety problem of Vehicle Electronic Identification System.

Vehicle Electronic Identification System safety problem to be solved by this invention is achieved through the following technical solutions:

The safety certification of RFID of the present invention (840-845MHz) vehicle electron identifying and the security system of AES encryption are formed by with lower part:

1. super high frequency radio frequency recognition read-write machine;

2. super high frequency radio frequency identification electronic tag;

3. safe unit.

In the present invention, the read write line of Vehicle Electronic Identification System communicates with rf wireless signal with between electronic mark.

In the present invention, safe unit supports AES enciphering and deciphering algorithm, RSA enciphering and deciphering algorithm and XXTEA enciphering and deciphering algorithm, the key of AES encryption algorithm can be generated, the private key pair of RSA cryptographic algorithms, with the key of XXTEA cryptographic algorithm, have and data are carried out based on the encryption of aes algorithm, RSA Algorithm and XXTEA algorithm, decipher function.Safe unit also has the function licensing personal code work, user key.Safe unit key Rx carries out aes algorithm encryption to the data message that will write in electronic tag internal memory, and the ciphertext after encryption is sent to read write line, and ciphertext writes in the internal memory of electronic tag by read write line; Meanwhile, safe unit carries out aes algorithm encryption again to described aes algorithm key Rx, and the key Ex obtained after encryption is sent to read write line, and read write line is also stored in electronic tag internal memory.In electronic tag, just there is not any data message existed with clear-text way like this, ensure that the confidentiality of transmission data, preventing assailant from obtaining user profile by attacking electronic tag; Safe unit carries out XXTEA encryption to the global unique identification code TID code of electronic tag simultaneously, using the ciphertext after encryption as the access password of electronic tag and deactivation password, only allow the read write line of access password could carry out read-write operation to electronic tag, thus improve the Information Security of vehicle electron identifying.

The present invention includes following three flow processs:

1. the hair fastener flow process of Vehicle Electronic Identification System;

2. Vehicle Electronic Identification System is to the authorization flow of electronic tag;

3. reading writing working flow process between the base station read write line of Vehicle Electronic Identification System and electronic tag.

Safety certification of the present invention can realize read write line to the certification of electronic tag, electronic tag to the certification of read write line.Two-way authentication can prevent the unauthorized access of unauthorized device.Only have the valid reader of mandate and legal label all by the read-write operation that certification just can be carried out below, effectively can resist the attacks such as existing tracking, unauthorized access, label personation, thus improve the security of whole Vehicle Electronic Identification System.

Accompanying drawing illustrates:

In order to be illustrated more clearly in technical scheme of the present invention, be described to the accompanying drawing used required in embodiment or description of the prior art below.

Fig. 1 is the security system structural drawing of the embodiment of the present invention 1 Vehicle Electronic Identification System;

Fig. 2 is the hair fastener process flow diagram of the embodiment of the present invention 2 Vehicle Electronic Identification System;

Fig. 3 is that the embodiment of the present invention 3 Vehicle Electronic Identification System is to the authorization flow figure of electronic tag;

Fig. 4 reads and writes process flow diagram between the embodiment of the present invention 4 base station read write line and electronic tag;

Fig. 5 is the structure flow chart of the security system of the embodiment of the present invention 5 Vehicle Electronic Identification System.

Embodiment:

The electronic tag frequency of operation general range being used as vehicle electron identifying is 840-960MHz, and the air interface protocol wherein adopted has ISO18000-6C/EPC Classl Gen2 etc.Particularly, involved in the various embodiments of the present invention operating frequency range being used as the ultrahigh frequency electronic tag of vehicle electron identifying is 840-845MHz.

In order to realize object of the present invention, the embodiment of the present invention proposes, when hair fastener, by hair fastener read write line, operation is encrypted to the unique identification TID code of electronic tag and the data that will write in electronic tag internal memory, generation key and ciphertext are stored in electronic tag, make before base station read write line carries out read-write operation to electronic tag, access password is obtained by secret key decryption, when only having and be stored in the access password coupling in electronic tag, just allow legal base station read write line to carry out reading to electronic tag and obtain ciphertext, decryption oprerations, thus the security of information in raising vehicle electron identifying.

Below in conjunction with accompanying drawing, embodiments of the invention are described in detail.

Embodiment 1:

As shown in Figure 1, the embodiment of the present invention 1 provides a kind of encryption and decryption security system of Vehicle Electronic Identification System, and its system comprises safe unit, super high frequency radio frequency recognition read-write machine, super high frequency radio frequency identification electronic tag.Wherein:

Safe unit supports AES enciphering and deciphering algorithm, RSA enciphering and deciphering algorithm and XXTEA enciphering and deciphering algorithm, and to use subscriber authorisation personal code work and user key;

Read write line comprises hair fastener read write line and the base station read write line of Vehicle Electronic Identification System, is respectively used to realize in embodiment 2, embodiment 3 and embodiment 4 process of electronic tag, the various functions of access;

Any information about vehicles is not stored expressly in electronic tag, the information stored and key are all stored in electronic tag internal memory after encryption, have to pass through certification, legal read write line can be accessed, prevent assailant from carrying out obtaining information by attacking electronic tag, thus improve the security of whole Vehicle Electronic Identification System.

Embodiment 2:

As shown in Figure 2, be the hair fastener flow process of the embodiment of the present invention 2 Vehicle Electronic Identification System, hair fastener read write line associates with safe unit, obtains encryption key by safe unit, and concrete hair fastener flow process is as follows:

1) the key Rx of safe unit difference stochastic generation AES encryption algorithm, the key R of AES encryption algorithm, the root key Kg of XXTEA cryptographic algorithm;

2) TID of the electronic tag inquired is given safe unit by hair fastener read write line;

3) safe unit key K g carries out XXTEA encryption to the TID of electronic tag, produces the access password AP and the deactivation password KP that obtain electronic tag;

4) the access password AP that returned by safe unit of hair fastener read write line and deactivation password KP writes in the reserved memory of electronic tag;

5) safe unit key Rx carries out AES encryption to the cleartext information that will write in electronic tag, and the ciphertext obtained after encryption is returned to hair fastener read write line, and ciphertext writes in the internal memory of electronic tag by hair fastener read write line;

6) safe unit obtains encrypted secret key Ex to carrying out AES encryption algorithm with key R to key Rx;

7) key Ex is returned to read write line by safe unit, and key Ex writes in the internal memory of electronic tag by read write line.

Embodiment 3:

As shown in Figure 3, the authorization flow of Vehicle Electronic Identification System to electronic tag is as follows:

1) the double secret key KCi/KSi of safe unit difference stochastic generation RSA cryptographic algorithms,

2) safe unit uses client public key KCi to carry out rsa encryption to key R and obtains key Rm; Wherein key R

3) safe unit authorized user code, as being assigned to user's one group of sequence as personal code work, or stochastic generation personal code work;

4) safe unit uses personal code work to carry out aes algorithm encryption to root key Kg, obtains user key Kgm;

5) private key for user KSi and user key Kgm authorizes separately to use user by safe unit.

Embodiment 4:

As shown in Figure 4, between base station read write line and electronic tag, communication process is as follows:

1) safe unit uses personal code work to carry out AES deciphering to key K gm and obtains key K g, and key K g is the access password for decrypt electronic label, and user key Kgm authorizes separately to use user;

2) safe unit carries out XXTEA deciphering by key K g to the TID of the electronic tag that read write line inquires, and obtains the access password of electronic tag;

3) base station read write line utilizes ciphertext in access password reading electronic labels internal memory and key Ex, and ciphertext and key Ex are back to safe unit;

4) safe unit is obtained the authorization RSA Algorithm private key for user KSi, and uses private key for user KSi to carry out RSA deciphering to key Rm to obtain key R;

5) safe unit key R carries out aes algorithm deciphering as decruption key to key Ex to obtain key Rx, wherein to be key R carry out to key Rx the key that AES encryption obtains to key Ex, and key Ex is stored in the internal memory of electronic tag by hair fastener read write line;

6) safe unit key Rx carries out AES decrypt operation to ciphertext, obtains expressly;

7) if read write line performs write operation, safe unit carries out AES encryption to the data that will write in electronic tag internal memory after obtaining key Rx, and read write line is by internal memory corresponding in the ciphertext write electronic tag after encryption.

Embodiment 5:

As shown in Figure 5, the Structure and Process of the security system of Vehicle Electronic Identification System, comprises hair fastener flow process, authorization flow, Card Reader flow process and writes card flow process.Symbol description is as follows:

Genkey: give necessary random factor, the key that stochastic generation is unique;

Encode: the key of specifying and plaintext, obtain ciphertext through encryption and return ciphertext character string;

Decode: the key of specifying and ciphertext, obtains expressly through deciphering and returns expressly character string.

Claims

The safety certification of 1.RFID (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, this technology comprises: safe unit key Rx carries out AES encryption to the plaintext that will write in electronic tag internal memory, and is stored in electronic tag internal memory by ciphertext after encryption; Safe unit carries out AES encryption to key Rx, and is stored in electronic tag internal memory by the key Ex obtained after encryption; Safe unit carries out XXTEA encryption to the TID of electronic tag, and the access password that obtains and deactivation password after encryption to be stored in electronic tag in reserved memory.
2. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, the safe unit AES encryption algorithm of this system is encrypted the data message that will store, then by the internal memory of the ciphertext write electronic tag after encryption.
3. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, the key of safe unit AES encryption algorithm to described AES encryption algorithm of this system is encrypted again, and by the key storage that obtains after encryption in the internal memory of electronic tag.
4. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, the exclusive identification code TID of safe unit XXTEA cryptographic algorithm to described electronic tag of this system is encrypted, and obtains in the reserved memory of access password and deactivation password write electronic tag.
5. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, the super high frequency radio frequency recognition read-write machine of described Vehicle Electronic Identification System and the communications band of electronic tag are 840-845MHz.
6. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, described safety certification and AES encryption are applicable to Vehicle Electronic Identification System, electronics Vehicle Certificate system, electronic vehicle license plate system etc.Title call disunity, every encryption technology relating to RFID (840-845MHz) the radio frequency recognizing electronic label system being applied in field of traffic control is all in right.Electronic tag can be passive electronic label, half active electronic label and active electronic label three kinds of forms.
7. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, described RFID (840-845MHz) Vehicle Electronic Identification System is used for the environmental protection card of traffic administration, car annual check logotype, automobile vacation, deck identification, highway communication flow are investigated, the application of the various testing vehicle register identification of vehicle electron identifying such as various collecting vehicle information, the management of every profession and trade special vehicle in urban traffic control.
8. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, described field of traffic control comprises the payment field of the vehicle electron identifying such as urban traffic blocking charge, expressway tol lcollection, Path Recognition charge, parking lot fee collection management.
9. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, this encryption technology is applicable to domestic and international various ultrahigh frequency RFID electronic label chip, the chip of electronic tag comprises the series such as Monza4E, Monza4QT, Monza5, MX of Impinj (English is frequently outstanding), Alien (meaning connection) H3, H4 series, 4324,4325 family chips of EM.
10. the safety certification of RFID according to claim 1 (840-845MHz) vehicle electron identifying and AES encryption, it is characterized in that, described safety certification can realize read write line to the certification of electronic tag, electronic tag to the certification of read write line, and two-way authentication can prevent the unauthorized access of unauthorized device.Only have the valid reader of mandate and legal label all by the read-write operation that certification just can be carried out below, effectively can resist the attacks such as existing tracking, unauthorized access, label personation.Described AES encryption comprises hair fastener flow process, authorization flow, these three flow processs of read-write flow process.