CN106203579A - A kind of safe RFID label tag random number automatic update method - Google Patents
A kind of safe RFID label tag random number automatic update method Download PDFInfo
- Publication number
- CN106203579A CN106203579A CN201610513299.XA CN201610513299A CN106203579A CN 106203579 A CN106203579 A CN 106203579A CN 201610513299 A CN201610513299 A CN 201610513299A CN 106203579 A CN106203579 A CN 106203579A
- Authority
- CN
- China
- Prior art keywords
- random number
- label
- new
- automatic update
- update method
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
- G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
- G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
- G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
- G06K19/073—Special arrangements for circuits, e.g. for protecting identification code in memory
- G06K19/07309—Means for preventing undesired reading or writing from or onto record carriers
- G06K19/07318—Means for preventing undesired reading or writing from or onto record carriers by hindering electromagnetic reading or writing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F7/00—Methods or arrangements for processing data by operating upon the order or content of the data handled
- G06F7/58—Random or pseudo-random number generators
- G06F7/588—Random number generators, i.e. based on natural stochastic processes
Abstract
RFID authentication method to possess opposing and follow the tracks of the ability attacked, it is impossible to only realize by simple key updating, also needs to generate in the label random number, and is joined by random number in the calculating of verification process transmission information.But the design complexities that the generator of random number can cause label increases with cost, therefore, designs a random number automatic update method and has important Research Significance and use value.The present invention proposes a kind of safe RFID label tag random number automatic update method and replaces traditional tandom number generator, and random number is joined in the calculating of verification process transmission information, ensure that the RFID label tag feedback information when certification each time is all different, thus play the effect that label is anti-tracking.This random number automatic update method based in label originally with AES, such as HASH, MIXBITS, Rabin etc..This method solve the problem that in current rfid system, label cost of manufacture is high, improve safety and the authentication efficiency of RFID certification simultaneously.
Description
Technical field
The present invention relates to RF identification research field, be specifically related to label random number in a kind of safe rfid system from
Dynamic update method, wherein random number transmits the calculating of information in RFID verification process.
Background technology
Radio RF recognition technology (radio frequency identification, RFID) is that one utilizes radio frequency to believe
Number realize the transmission of contactless information, and pass through transmitted information and realize the technology of certification and identifying purpose.Along with RFID's
Universal, specification, the Cost And Performance of RFID label tag is required more and more higher, size is little, low cost, performance high and safety height claims
For weighing the standard of rfid system quality.
Rfid system generally includes back-end server system, rfid interrogator, RFID label tag three part.Place due to label
Manage limited ability, and people are difficult to the illegal reading of perception radiofrequency signal, cause leading between rfid interrogator and RFID label tag
There is security and privacy hidden danger in letter, is easily subject to the threat of various security attack.Attack to resist tracking, Godor G et al.
Proposing the certificate scheme that label information updates, but scheme can not resist desynchronization and attack, assailant can be disappeared by playback
Breath, makes read write line and label key between the two inconsistent, thus destroys subsequent authentication (Godor G, Imre between the two
S.Hash-based mutual authentication protocol for low-cost RFID systems[C]//
Proc of the 18th EUNICE Conf on Information and Communications
Technologies.Berlin:Springer,2012:76-87.)；Zhou et al. is based on the unclonable function of physics
(Physically Unclonable Function, PUF) proposes a kind of safety authentication protocol, adds random number in the label
Generator ensures the freshness of tag feedback information, thus possesses opposing and follow the tracks of attacking ability, but the adding of tandom number generator
Enter so that the cost of label is greatly increased (Zhou Enhui, Liu Yana.Physically unclonable function
based high performance privacy protection algorithm of RFID network[J]
.Application of Electronic Technique,2016,42(3):98-101.)；Shen et al. is based on non-linear letter
Number MIXBITS proposes a kind of safe RFID authentication protocol, ensures that label is anti-also in adding tandom number generator in label
The nonuniqueness of feedforward information, plays opposing tracer action, but same problem is exactly to add tandom number generator in the label
The cost making label brings many pressure (Shen Jinwei, Ling Jie.An improved ultra-lightweight
RFID authentication protocol[J].Computer Applications and Software,2015,32
(2):304-306.)；A kind of method that MA et al. proposes RFID two-way authentication based on Rabin AES, by updating key
Information ensures the freshness of tag feedback information, but still easily attacked by following the tracks of and desynchronization attack (MA Yuanjia,
LIU Daowei.Improved mutual authentication with backward security for RFID
protocols[J].Computer Engineering and Applications,2016,3,2:1-5.).Based on above
Narration understands, and RFID authentication method to possess opposing and follow the tracks of the ability attacked, it is impossible to only realize by simple key updating,
Also need to generate random number in the label, and random number is joined in the calculating of verification process transmission information.But the product of random number
Raw device can cause the design complexities of label to increase with cost, therefore, designs a random number automatic update method and has important
Research Significance and use value.
Summary of the invention
It is an object of the invention to overcome the shortcoming and defect of prior art, propose a kind of safe RFID label tag random number
Automatic update method replaces traditional tandom number generator, and is joined by random number in the calculating of verification process transmission information,
Ensure that the RFID label tag feedback information when certification each time is all different, thus play the effect that label is anti-tracking.Should
Random number automatic update method based in label originally with AES, such as HASH, MIXBITS, Rabin etc..The party
Method solves the problem that in current rfid system, label cost of manufacture is high, improves safety and the certification effect of RFID certification simultaneously
Rate.
A kind of safe RFID label tag random number automatic update method, is contained in following steps:
(1) produce random number after read write line authenticating tag to preserve in the label；
(2) label preserves the random number that read write line transmits, and parameter tK is put the 1 legal renewal of expression；
(3) read write line sends request to label；
(4) when label receives read write line request, parameter tK is judged, if tK=1, enter step (6), if tK=0,
Enter step (5)；
(5) use AES that random number is encrypted computing, play regeneration function, tK is set to 0 simultaneously；
(6) random number is applied to this verification process, and carries out subsequent action.
Read write line possesses random number and produces ability, and label possesses storage random number ability, and amendment parameter tK ability.
After read write line label in read-write region sends request, the value of parameter tK can be differentiated by label, and energy
Enough perform AES computing.
Label can select required encrypted content when performing AES computing, can enter the value of tK after having encrypted
Row amendment.
Certification complete after label have the ability when receiving update content perform random number renewal step.
The RFID label tag random number automatic update method of the present invention has the advantage that and beneficial effect:
(1) present invention has abandoned traditional tandom number generator, uses the AES carried in label to enter random number
Row updates, and employs same group of gate circuit with AES, is greatly saved the design cost of label, also simplify label simultaneously
The complexity of design；
(2) AES used in the present invention is through security proving, has high safety, and encrypts
Algorithm can't duplicate result, fully meets the demand of freshness；
(3) in the present invention, after each legitimate authentication, all the random number in label can be carried out legal renewal, similar random
Number format, the algebraically association of random number before and after minimizing；
(4) this invention ensures that the freshness of tag feedback information, and then improve the safety of RFID authentication protocol, make
Certification is fully able to opposing and follows the tracks of attack.
Accompanying drawing explanation
Fig. 1 random number automatically updates schematic diagram；
In Fig. 2 example, random number automatically updates figure；
The application example figure of Fig. 3 update method.
Detailed description of the invention
Below in conjunction with application example accompanying drawing, the present invention is described in further detail, used in this example is
Rabin AES, Shamir A. had carried out Security Proof (Shamir A.SQUASH-A new to this AES
MAC with provable security properties for highly constrained devices such as
RFID tags[C]//Proc of Fast Software Encryption.Berlin:Springer,2008:144-157)。
But the implementation of the present invention is not limited only to this.
The present invention is realized by following steps, such as Fig. 1:
(1) label initial phase preserves two a length of L random number RnewAnd Rold, and preserve tK=1 and represent random number
Legal renewal (tK=0 represents the most legal renewal of random number).Wherein RnewUse as label random number when certification next time, and
R after legitimate authentication every timenewAnd RoldWill be updated, but without preserving in read write line；
(2) when read write line sends request to label, first label can judge the most legal renewal of random number, i.e. judge tK
Whether equal to 1.If tK=1, then set to 0 and used RnewUse as normal random number；If tK=0, then the explanation last time recognizes
Card occurs abnormal, now can use in label for the function F of encryption original random number R preservednewAnd RoldIt is encrypted
Computing Rnew'=F < Rnew,Rold>, and the random number as this uses, and original RnewThen it is assigned to Rold；
(3) after each legitimate authentication, read write line can produce the random number R of a length of Lnew' be sent in label update Rnew,
And by last RnewIt is assigned to Rold, tK is put 1 expression legal renewal random number simultaneously.
The described encryption function F in step (2), optimum scheme is to select unidirectional encryption function, i.e. cannot pass through
Ciphertext is released in plain text.The most traditional two-way AES design is complicated, power consumption is big, is not appropriate in lightweight RFID label tag
Middle use.The output of encryption function F must be the L position of regulation.The algorithm of the high security meeting this requirement at present has HASH letter
Number, MIXBITS function and Rabin function etc..
See accompanying drawing 2,3, first provide the implication of each symbol related in method described in this example:
R: read write line；
T: label；
KEY: the shared key between label and read write line, a length of L；
KEYold: the shared key that last certification uses；
KEYnew: the shared key that this certification uses；
The unique identifier of ID: label, stores with ciphertext form, a length of 2L；
The left-half of ID_L:ID；
The right half part of ID_R:ID；
The random number that r1, r2: read write line generates when sending request；
Rnew: read write line is determining the legal rear random number produced of label every time, preserves in the label；
Rold: raw nonrecoverable random number in label, it is used for updating random number Rnew；
Rabin<X>: One-way encryption algorithm, Rabin<X>=[X2mod M]L, wherein X is encrypted content, and M is modulus, []L
For taking the front L position of operation result；
M: modulus, M=2L-1；
XOR: XOR；
&: with computing.
Before providing and explaining in detail, first provide hypothesis: due between rfid system read write line and back-end server system
Transmission means be usually wire transmission, thus the transmission that acquiescence is between the two is safe, and both are regarded as an entirety.
As in figure 2 it is shown, below example is described in detail:
Message is 1.: Query, A=XOR<ID_L, r1>, B=XOR<ID_R, r2>
Read write line produces random number r1 and r2, calculates A=XOR<ID_L, r1>and B=XOR<ID_R, r2>, with certification
Request is sent to label in the lump.After label receives A and B, extract r1=XOR in conjunction with label coding ID_L and ID_R self preserved
<ID_L, A>and r2=XOR<ID_R, B>；Judge that tK, whether equal to 1, if tK=1, is then set to 0 rear and calculates C=by tK simultaneously
Rabin<KEY,r1,r2,Rnew>and D=XOR<r1, r2, Rnew> it is sent to read write line；Otherwise use the random number side of automatically updating
Method is to RnewIt is updated, then calculates C and D and be sent to reader.C and D here calculated includes Rnew, it is ensured that mark
Sign the freshness of feedback information, and then possess anti-tracking attacking ability.
Message is 2.: C=Rabin < KEY, r1, r2, Rnew>, D=XOR<r1, r2, Rnew>
After read write line receives C and D, extract R by Dnew=XOR<r1, r2, D>, then use KEYnewOr KEYoldCalculate
C'=Rabin < KEYnewOr KEYold,r1,r2,Rnew>, mate with the C received, thus carry out the legitimacy of authenticating tag.Recognize
Demonstrate,prove legal after update KEYold=KEYnewAnd KEYnew=Rabin < KEYold>, and generate new random number R simultaneouslynew', calculating
E=Rabin < KEYold>&RnewWith F=XOR < Rnew,Rnew' > it is sent to label.
Message is 3.: E=Rabin < KEYold>&Rnew, F=XOR < Rnew,Rnew'>
After label receives E, by with E'=Rabin < KEY>&RnewCoupling carrys out certification reader legitimacy.If read write line closes
Method, updates KEY=Rabin<KEY the most in the label>, Rnew,Rold, and tK is put the 1 legal renewal of expression.If read write line does not conforms to
Method, does not updates.It should be noted that R produced by read write linenew' need not again read write line preserves.
So far the mutual authentication process of random number automatic update method is used to terminate.
This example is to add label random number automatic update method in the authentication protocol that MA et al. proposes, and uses Rabin
Algorithm is as the AES in the present invention, it is achieved that the automatically updating of random number in label, replaces the random number that tradition is complicated
Generator, it is ensured that the freshness of tag feedback data, plays to resist and follows the tracks of the effect attacked, improve RFID authentication protocol
Safety.In like manner, the AESs such as HASH algorithm or MIXBITS algorithm that AES makes into lightweight can also realize
Same implementation result.
Above the specific embodiment of the present invention is described.It is to be appreciated that the invention is not limited in above-mentioned
Particular implementation, those skilled in the art can make various deformation or amendment within the scope of the claims, this not shadow
Ring the flesh and blood of the present invention.
Claims (6)
1. the RFID label tag random number automatic update method of a safety, it is characterised in that be contained in following steps:
(1) produce random number after read write line authenticating tag to preserve in the label；
(2) label preserves the random number that read write line transmits, and parameter tK is put the 1 legal renewal of expression；
(3) read write line sends request to label；
(4) when label receives read write line request, parameter tK is judged, if tK=1, enter step (6), if tK=0, enter
Step (5)；
(5) use AES that random number is encrypted computing, play regeneration function, tK is set to 0 simultaneously；
(6) random number is applied to this verification process, and carries out subsequent action.
A kind of safe RFID label tag random number automatic update method the most according to claim 1, it is characterised in that: read-write
Device possesses random number and produces ability, and label possesses storage random number ability, and amendment parameter tK ability.
A kind of safe RFID label tag random number automatic update method the most according to claim 2, it is characterised in that: read-write
After device label in read-write region sends request, the value of parameter tK can be differentiated by label, and is able to carry out encryption calculation
Method computing.
A kind of safe RFID label tag random number automatic update method the most according to claim 3, it is characterised in that: label
Required encrypted content can be selected when performing AES computing, the value of tK can be modified after having encrypted.
A kind of safe RFID label tag random number automatic update method the most according to claim 1, it is characterised in that: certification
After completing, label has the ability to perform the renewal step of random number when receiving update content.
A kind of safe RFID label tag random number automatic update method the most according to claim 1, it is characterised in that: concrete
Step is:
Label initial phase preserves two a length of L random number RnewAnd Rold, and preserve tK=1 and represent that random number is legal more
Newly, tK=0 represents the most legal renewal of random number, wherein, RnewUse as label random number when certification next time, and close every time
R after method certificationnewAnd RoldWill be updated, but without preserving in read write line；
When read write line sends request to label, first label can judge the most legal renewal of random number, i.e. judges that whether etc. tK
In 1, if tK=1, then set to 0 and used RnewUse as normal random number；If tK=0, then the last certification of explanation occurs
Abnormal, now can use in label for the function F of encryption original random number R preservednewAnd RoldIt is encrypted computing
Rnew'=F < Rnew,Rold>, and the random number as this uses, and original RnewThen it is assigned to Rold；
After legitimate authentication, read write line can produce the random number R of a length of L every timenew' be sent in label update Rnew, and by upper one
Secondary RnewIt is assigned to Rold, tK is put 1 expression legal renewal random number simultaneously.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610513299.XA CN106203579A (en) | 2016-06-30 | 2016-06-30 | A kind of safe RFID label tag random number automatic update method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610513299.XA CN106203579A (en) | 2016-06-30 | 2016-06-30 | A kind of safe RFID label tag random number automatic update method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106203579A true CN106203579A (en) | 2016-12-07 |
Family
ID=57464173
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610513299.XA Withdrawn CN106203579A (en) | 2016-06-30 | 2016-06-30 | A kind of safe RFID label tag random number automatic update method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106203579A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106603228A (en) * | 2016-12-21 | 2017-04-26 | 广东工业大学 | RFID key wireless generation method based on Rabin encryption |
| CN106792686A (en) * | 2016-12-13 | 2017-05-31 | 广东工业大学 | A kind of RFID mutual authentication methods |
| CN110650019A (en) * | 2019-09-20 | 2020-01-03 | 广州城市职业学院 | RFID authentication method and system based on PUF and security sketch |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101488179A (en) * | 2008-01-18 | 2009-07-22 | 华为技术有限公司 | Authentication method and apparatus for wireless radio frequency recognition system |
| CN103905202A (en) * | 2014-03-28 | 2014-07-02 | 广东工业大学 | RFID lightweight class bidirectional authentication method based on PUF |
| CN105530263A (en) * | 2016-01-08 | 2016-04-27 | 广东工业大学 | Ultra-lightweight RFID bidirectional authentication method based on label ID |
-
2016
- 2016-06-30 CN CN201610513299.XA patent/CN106203579A/en not_active Withdrawn
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101488179A (en) * | 2008-01-18 | 2009-07-22 | 华为技术有限公司 | Authentication method and apparatus for wireless radio frequency recognition system |
| CN103905202A (en) * | 2014-03-28 | 2014-07-02 | 广东工业大学 | RFID lightweight class bidirectional authentication method based on PUF |
| CN105530263A (en) * | 2016-01-08 | 2016-04-27 | 广东工业大学 | Ultra-lightweight RFID bidirectional authentication method based on label ID |
Non-Patent Citations (3)
| Title |
|---|
| HAN ZHU: "An Improved Forward-Secure Anonymous RFID Authentication Protocol", 《2011 7TH INTERNATIONAL CONFERENCE ON WIRELESS COMMUNICATIONS, NETWORKING AND MOBILE COMPUTING》 * |
| METE AKGUN: "Weaknesses of Two RFID Protocols Regarding De-synchronization Attacks", 《2015 INTERNATIONAL WIRELESS COMMUNICATIONS AND MOBILE COMPUTING CONFERENCE (IWCMC)》 * |
| 沈金伟: "一种改进的超轻量级RFID认证协议", 《计算机应用与软甲》 * |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106792686A (en) * | 2016-12-13 | 2017-05-31 | 广东工业大学 | A kind of RFID mutual authentication methods |
| CN106792686B (en) * | 2016-12-13 | 2020-01-07 | 广东工业大学 | RFID bidirectional authentication method |
| CN106603228A (en) * | 2016-12-21 | 2017-04-26 | 广东工业大学 | RFID key wireless generation method based on Rabin encryption |
| CN110650019A (en) * | 2019-09-20 | 2020-01-03 | 广州城市职业学院 | RFID authentication method and system based on PUF and security sketch |
| CN110650019B (en) * | 2019-09-20 | 2022-06-14 | 广州城市职业学院 | RFID authentication method and system based on PUF and security sketch |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101847199B (en) | Security authentication method for radio frequency recognition system | |
| CN101488854B (en) | Wireless RFID system authentication method and apparatus | |
| CN102034123B (en) | RFID (Radio Frequency Identification) triple safety certification method based on label ID (Identification) random division | |
| CN110381055B (en) | RFID system privacy protection authentication protocol method in medical supply chain | |
| CN108304902B (en) | Ultra-lightweight mobile RFID system bidirectional authentication method | |
| CN104184733B (en) | A kind of RFID lightweight mutual authentication methods encoded based on CRC | |
| US8332628B2 (en) | Method for accessing data safely suitable for electronic tag | |
| CN111147245A (en) | Algorithm for encrypting by using national password in block chain | |
| CN111970114B (en) | File encryption method, system, server and storage medium | |
| CN113365270B (en) | RFID multi-label joint authentication system and method based on application of Internet of things | |
| US9553729B2 (en) | Authentication method between a reader and a radio tag | |
| CN104115442A (en) | RFID bidirectional authentication method based on asymmetric secret key and Hash function | |
| CN104333537A (en) | RFID security authentication method based on physical unclonable function | |
| EP3128696B1 (en) | Entity authentication method and device | |
| CN102684872B (en) | Safety communication method for ultrahigh frequency radio-frequency identification air interface based on symmetrical encryption | |
| CN104333539A (en) | RFID security authentication method based on Chebyshev mapping | |
| CN113378148A (en) | Internet of things equipment identity authentication system and method based on block chain | |
| CN101488179A (en) | Authentication method and apparatus for wireless radio frequency recognition system | |
| US10484182B2 (en) | Encrypted text verification system, method, and recording medium | |
| CN103227793A (en) | RFID equipment layer information security transfer method and device based on random sequence | |
| CN104579688B (en) | It is a kind of based on Hash function can synchronized update key RFID mutual authentication method | |
| CN106203579A (en) | A kind of safe RFID label tag random number automatic update method | |
| CN106027237B (en) | Cipher key matrix safety certifying method based on group in a kind of RFID system | |
| CN103873257A (en) | Secrete key updating, digital signature and signature verification method and device | |
| CN110650019B (en) | RFID authentication method and system based on PUF and security sketch |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20161207 |
|
| WW01 | Invention patent application withdrawn after publication |