KR100980320B1 - Method of authenticating tag information transmission in RFID environment, Method of tag information transmision in RFID environment, Apparatus and System using by the same - Google Patents

Abstract

Disclosed are a method of authenticating tag information transmission in an RFID environment, a method of transmitting tag information in an RFID environment, an apparatus for authenticating tag information in an RFID environment, and a tag information transmitting system in an RFID environment.

The information transmission authentication method of a tag in an RFID environment according to the present invention,

When a tag receives a query for tag information from a reader, the tags are stored in a tag secret data table, and the plurality of tag secret data are stored in a tag secret data table. Storing permutation combination information in Permutation Index Number (PIN) data; Generating a tag first message by performing an exclusive OR operation on specific first tag secret data stored in the tag secret data table and a tag random number generated from the tag; Transmitting the tag first message, the tag secret data table, and the PIN data of the tag to a database server through a reader; The tag second message and the tag third message generated by performing an exclusive OR operation on the tag random number, respectively, with the second tag secret data and the third tag secret data stored in the tag secret data table from the database server. Receiving; And determining whether to extract the specific second tag secret data and the specific third tag secret data from each of the tag second message and the tag third message by using the tag random number. Authenticating that the transfer to the database server was normal.

According to the present invention, since a tag and a reader permutate their own secret values to generate permutation index number data and encrypt them using their random numbers, the tag and the reader's own privacy can not be exposed to the outside. In addition, by encrypting the information of the tag and the information of the reader using only an exclusive OR operation, the amount of computation involved in the encryption process is small, thereby increasing the availability of memory, and preventing a man-in-the-middle attack and a replay attack on the information of the tag. It has the effect of providing safety and reliability.

Description

A method of authenticating tag information in an RFID environment, a method of transmitting tag information in an RFID environment, an authentication apparatus for transmitting information of a tag in an RDF environment, and a tag information transmission system in an RFID environment. environment, Method of tag information transmision in RFID environment, Apparatus and System using by the same}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to network communication, and more particularly, provides a method for authentication of information transmission of a tag in an RFID environment, which provides high security in an RFID environment, increases a computation speed through a reduction in computation amount, and reduces an implementation cost. Tag information transmission method, a tag information transmission authentication device in an RFID environment, and a tag information transmission system in an RFID environment.

In recent years, networking in an intelligent-based society in a ubiquitous environment provides convenience for receiving the best service without the promise of place or time.

Intelligence-based society is based on three infrastructures, Broadband Integrated Network (BcN), USN, and IPv6, and is a society that provides informatization benefits in a ubiquitous network environment in which autonomous communication between objects occurs.

The Ministry of Information and Communication introduced the eight services through the IT839 strategy, established three infrastructures for it, and created a virtuous cycle of nine new growth engine industries, strengthening its status as the world's strongest IT advanced country and entering the ubiquitous society. I want to speed up.

Among them, the RFID system is a wireless recognition system composed of a tag, a reader, and a back-end database. The RFID system is rapidly being developed and distributed in 2000, and is expected to replace the barcode system in the future.

 RFID tags vary widely depending on their purpose, function, size, etc., but the most widely used RFID tag is expected to replace the barcode system in the future. In the case of barcode, it is a device that records only the kind of goods and recognizes it using light, and it can be implemented very simply if only the code system is standardized. Security or privacy issues need not be considered. On the other hand, the RFID tag has a unique code for each article is stored and utilized, such as the type of article, production history. In addition, the recognition range is wider than the barcode system, which is conveniently used for logistics management. However, this advantage causes new dysfunctions in terms of security and privacy protection. The personal information of the water can be leaked through the reader, there is a risk of copying the information of the tag forgery.

Information protection function required in RFID system can be divided into two categories.

The first is confidentiality and authentication, delivering information only to legitimate readers and tags, and not interfering with communication from eavesdroppers.

Second, privacy protection is a way to prevent privacy violations caused by the exposure of unwanted tag information.

In addition, security threats in RFID systems include physical attacks, eavesdropping, spoofing, and DoS attacks.

A physical attack is an attack that acquires a tag in a different way and copies the contents of the tag to another tag in a physical way to disguise it.

In addition, since eavesdropping communicates using RF, when the information is not encrypted, the communication contents are exposed to an unauthorized person. In fact, the signal transmitted from the reader is 900MHz, and even in a passive RFID system, even at a distance of 100M or more. Signal detection is possible.

On the other hand, spoofing is an aggressive attack method that intercepts and modifies the contents of communication, and DoS attack is a method of disturbing normal communication by disturbing normal communication by generating a jammer, which is a strong radio wave. This is substantially similar to Active Jamming, which is the physical security used early on.

As such, the computing environment for RFID has many limitations, unlike the general Internet environment. This restriction has more resource-side limitations than wireless Internet using cellular phones and the like. In other words, in order to establish an RFID environment for ubiquitous, the tag price installed on an object such as all goods or people should be implemented at less than 5 cents. Instead, in terms of performance and resources in a reader device or a back end system, It must be designed and operated to overcome the resource limitations of poor tag equipment. In this regard, the application of security technology should consider these operational and environmental aspects.

In practice, some of the tags managed by the RFID system store tables with the same secrets, while others store tables with different secrets.

Therefore, even if one table is exposed, information of a tag having another table can be protected from being exposed.

However, conventional low-cost passive tags cannot store large amounts of secrets due to hardware limitations.

This is because the security protocol for low-cost passive tag-based RFID systems provides high security to fully satisfy the confidentiality and authenticity of data using advanced encryption methods such as AES, DES, and PK. There is a problem that can not be used in low-cost passive tag-based RFID system because it is not cheap.

Therefore, the first problem to be solved by the present invention is to make the information of the tag accessible to the database by the authenticated reader, to provide the safety and reliability of the user, and to provide a low-cost passive tag through the reduction of the calculation amount. It is to provide a method for authenticating information transmission of a tag in an RFID environment that can be implemented.

In addition, a second problem to be solved by the present invention is to enable the information of the tag to access the database by an authenticated reader, to provide the safety and reliability of the user, low-cost passive tag through a reduction in the amount of calculation It is to provide a method of transmitting tag information in an RFID environment using the present invention.

In addition, a third problem to be solved by the present invention is to provide an apparatus for authenticating information transmission of a tag in an RFID environment using the information transmission authentication method of a tag in the RFID environment.

Also. A fourth object of the present invention is to provide a tag information transmission system in an RFID environment using a tag information transmission authentication method in an RFID environment.

The present invention to solve the first problem,
When a tag receives a query for tag information from a reader, the tags are stored in a tag secret data table, and the plurality of tag secret data are stored in a tag secret data table. Storing permutation combination information in Permutation Index Number (PIN) data; Generating a tag first message by performing an exclusive OR operation on specific first tag secret data stored in the tag secret data table and a tag random number generated from the tag; Transmitting the tag first message, the tag secret data table, and the PIN data of the tag to a database server through a reader; The tag second message and the tag third message generated by performing an exclusive OR operation on the tag random number, respectively, with the second tag secret data and the third tag secret data stored in the tag secret data table from the database server. Receiving; And determining whether to extract the specific second tag secret data and the specific third tag secret data from each of the tag second message and the tag third message by using the tag random number. A method of authenticating information transmission of a tag in an RFID environment, the method comprising authenticating that the transmission to the database server was normal.

delete

The tag secret value is shared in advance between the tag and the database server.

The determining of whether to extract the specific second tag secret data and the specific third tag secret data may be performed by performing an exclusive OR operation on the tag second message and the tag third message with the tag random number, respectively. And extracting the second tag secret data and the specific third tag secret data.

The present invention to solve the second problem,
When a tag receives a query for tag information from a reader, the tags are stored in a tag secret data table by permutating the secret values of the tags, selecting a plurality of the permutated combined tag secret data, and storing the tag secret data in the tag secret data table. Storing permutation combination information of each data in permutation index number (PIN) data; Transmitting first tag secret data stored in the tag secret data table and a first message generated by a tag random number, the tag secret data table, and PIN data of the tag to the database server through the reader; Transmitting, at the database server, second and third tag secret data stored in the tag secret data table and a second message and a third message generated by the tag random number to the tag through the reader; A fourth message generated by the tag random data and the fourth tag secret data stored in the tag secret data table in the tag, and a fifth message of tag information encrypted by the tag random number and a server random number of the database server. Generating and transmitting to the reader; A reader secret data table which stores reader secret data in which the reader secret value of the leader and the reader secret number of the leader are randomly combined with the reader secret value, and the permutation combination information of the reader secret data. Transmitting, by the reader, the PIN data, the fourth message, and the fifth message to the database server; Authenticating the reader according to the fourth and fifth messages at the database server; The database server generates a seventh message from the reader secret value, the reader random number, and the tag information, and randomly generates an update value of tag secret data stored in the tag secret data table using the seventh message. Encrypting; And transmitting the encrypted update value to the reader in the database server, and transmitting the update value to the tag in the reader.

delete

delete

The transmitting of the tag to the tag may include determining whether the second and third tag secret data are extracted using the tag random number from the second message and the third message; And when the second and third tag secret data is extracted, authenticating the database server in the tag.

The seventh message may be generated by performing an exclusive OR on the data message attached with the reader secret value, the reader random number, and the tag information.

The transmitting of the update value to the tag may include extracting the update value from the reader by using the reader secret value and the reader random number stored in the reader, and transmitting the extracted update value to the tag. .

The present invention to solve the third problem,

A secret value storage unit for storing a unique tag secret value of a tag; A tag random number generation unit generating a random number of tags; A secret value permutation combination unit for permutating the secret values stored in the secret value storage unit of the tag when receiving a query for tag information from a reader; A tag secret data table for storing tag secret data permutated by the secret value permutation combining unit; A permutation index number data storage unit for storing permutation index number data which is permutation combination information of the tag secret data stored in the tag secret data table; An operation unit generating a tag message by an exclusive OR operation of specific tag secret data stored in the tag secret data table and a tag random number generated by the tag random number generator; The tag message generated by the operation unit, the tag secret data table, the permutation index number data are transmitted to a reader, and the exclusive OR operation of the specific tag secret data and the tag random number stored in the tag secret data table from a database server. Transceiving unit for receiving the database server message generated according to; And an authentication unit configured to perform authentication of the database server according to the database server message.

The secret value permutation combination unit may further include a secret value selection module that selects a plurality of specific secret values from a secret value storage unit storing a unique secret value of the tag.

In addition, the operation unit may include a tag secret data selection module for selecting specific tag secret data stored in the tag secret data table.

Meanwhile, the tag secret value may be shared in advance between the tag and the database server.

The authentication unit may further include a controller configured to determine whether to extract the specific tag secret data using the tag random number from the database server message.

The control unit may extract the specific tag secret data by an exclusive OR operation of the database server message and the tag random number.

The present invention to solve the fourth problem,
In a tag information transmission system in an RFID environment including a tag, a reader for requesting tag information of the tag and a database server,
The tag is,
A tag secret value storage unit for storing a unique tag secret value and tag information;
A tag random number generator generating a random random number;
When receiving a query for tag information from a reader, a tag secret data table including tag secret data obtained by permuting the tag secret values is generated, and the tag permutation index number data which is permutation combination information of the tag secret data is stored. A tag permutation index number data generation unit;
A tag calculator configured to generate a tag message by performing an exclusive OR operation on the tag secret data and the tag random number; And
A tag transceiver for transmitting the tag secret data table, the tag permutation index number data, and the tag message to the database server through the reader, and receiving a corresponding database server message;
The leader
A reader secret value storage for storing a reader's own unique secret value;
A reader random number generator generating a random random number;
When a query for a reader message is received from the database server, a reader secret data table including reader secret data obtained through permutation of secret values stored in the reader is generated, and a reader permutation index that is permutation combination information of the reader secret data. A leader permutation index number data generator for generating number data;
A reader calculator configured to generate a reader message by performing an exclusive OR operation on the reader secret data and the reader random number; And
A reader transceiver for transmitting the reader secret data table, the reader permutation index number data, and the reader message to a database server, and receiving a corresponding database server message;
The database server
A server storage unit which stores data transmitted from the tag and the reader;
A server operator configured to generate the database server message using data stored in the server storage; And

It provides a tag information transmission system in an RFID environment including an update value generator for randomly generating the update value of the tag message.

The tag may further include an authentication unit configured to perform authentication of the database server according to the database server message.

The tag permutation index number data generation unit may include a secret value selection module that selects a plurality of specific secret values from a tag storage unit storing a unique secret value of the tag.

In addition, the operation unit may include a tag secret data selection module for selecting specific tag secret data stored in the tag secret data table.

The authentication unit may further include a controller configured to determine whether to extract the specific tag secret data using the tag random number from the database server message.

According to the present invention, since a tag and a reader permutate their own secret values to generate permutation index number data and encrypt them using their random numbers, the tag and the reader's own privacy can not be exposed to the outside. In addition, by encrypting the information of the tag and the information of the reader using only an exclusive OR operation, the amount of computation involved in the encryption process is small, thereby increasing the availability of memory, and preventing a man-in-the-middle attack and a replay attack on the information of the tag. It has the effect of providing safety and reliability.

Some of the tags managed by the RFID system store tables with the same secrets, while others store tables with different secrets.

However, tags cannot store large amounts of secrets due to hardware constraints.

Therefore, the present invention proposes a security method in an RFID system that can have the same performance as storing a maximum secret value in consideration of hardware constraints and then storing a larger amount of secret value.

인 12개의 서로 다른 순서를 가지는 2개의 비밀값을 사용할 수가 있게 된다. If the reader's request is passed, the tag permutates the secrets it stores. For example, suppose you are storing four different secrets, and you want to use two secrets in one session.

You can use two secret values with 12 different sequences.

If you use a larger number of secrets, you have more cases, which is more effective in maintaining security. Then, the information related to the permutation is stored in permutation index number (PIN) data and transmitted to the receiving object so that the order of secret values can be permuted for accurate communication with the communicating object.

개가 된다. 하지만, 이를 모두 관리하는 것은 무리가 있을 수 있으므로, 임의의 다양한 비밀값들을 지정하고, 이 값들을 조합하여 태그가 사용가능한 테이블(Valid Table Set)을 지정한다.If the bit length of the secrets it manages is 64 bits, the number of secrets available is approximately

It becomes a dog. However, managing all of them can be unreasonable, so specify any of a variety of secret values and combine these values to specify a valid table set.

Then, check the name of the table sent by the tag to see if it is a usable table name. This can limit the possibility of an attacker using any combination of secrets.

The tag applied to the present invention is based on the Class 1 Generation 2 standard proposed by EPC Global of 128 bits in length, and stores 128 bits of EPC code.

The protocol designed here performs mutual authentication between system objects and encryption of data transmitted and received using a one-time pad technique.

The One-Time Pad technique can provide complete confidentiality of data by encrypting two values using any random number (pseudonym) equal to or greater than the bit length of a given data. .

However, in order to satisfy the complete confidentiality of the data, the random number used in data encryption must be used only once, and the length of the bit must be equal to or longer than the padding data bit length.

1 shows a schematic diagram of an RFID environment.

Referring to FIG. 1, the RFID environment includes a RFID server 100 requesting tag information, an RFID tag 110 providing its own tag information, and a database server 120 previously storing information on the RFID tag 100. ).

Hereinafter, the RFID reader 100, the RFID tag 110, and the database server 120 shown in FIG. 1 will be described in detail together with the accompanying drawings.

2 is a schematic diagram of tag secret value table management in an RFID environment according to the present invention.

)과 상기 비밀값 저장 테이블 내에 저장된 태그들(201 내지 209) 각각의 비밀값이 어떠한 순서로 순열조합 되었는지를 알려주는 순열 인덱스 넘버(Permutation Index Number: PIN) 데이터를 전송함을 도시하고 있다.Referring to FIG. 2, when the encryption protocol according to the present invention proceeds, a plurality of tags 201 to 209 store a secret value table of each of the tags to the server (not shown) through the reader 210.

And permutation index number (PIN) data indicating the order in which the secret values of the tags 201 to 209 stored in the secret value storage table are permutated.

As shown in FIG. 2, when a query request message of the reader 210 is transmitted to the plurality of tags 201 to 209, each of the tags permutates secret values stored therein.

개의 서로 다른 비밀값들을 저장하고 있다고 가정하고,

개의 비밀값을 하나의 세션에서 사용하고자 하면, 총

의 서로 다른 순열을 가지는 비밀값을 사용할 수 있게 된다. As mentioned above, each of the tags

Suppose we are storing two different secret values,

If you want to use two secrets in one session,

You can use secrets with different permutations.

If a larger number of secrets can be stored, the number of cases is increased according to the permutation based on the number of stored secrets, which is more effective in maintaining security.

Each tag 201 to 209 is a reader so that information related to the permutation is stored in permutation index number data so that the order of secret values can be permutated equally for accurate communication with the communicating object. The permutation combination information data is transmitted to 210.

Table 1 below defines each variable in the transmission of the security protocol according to the present invention.

Referring to FIG. 2, in the security protocol configured according to the present invention, when the reader 210 makes a query request for tag information to each tag 201 to 209, each tag has its own secret storage table and stored secret. A permutation combination information table based on the number of values is sent to each reader.

This can be seen in the procedure of the security protocol to securely transmit the tag information of the tag itself according to the EPC code stored in the tag to the reader, and again to transmit the tag information to the database server via the reader.

3 is a flowchart illustrating a method for authenticating information transmission of a tag in an RFID environment according to the present invention.

Referring to FIG. 3, first, when a tag receives a query for tag information from a reader, a permutation combination of secret values of the tags and the plurality of permutated combined tag secret data are stored in a tag secret data table. The permutation combination information of each of the tag secret data is stored in permutation index number (PIN) data (step 310).

In accordance with the present invention, tags, readers, and database servers share a secret value to protect their information.

That is, the tag shares the tag secret value of the tag itself with the database server, and the reader shares the reader secret value of the reader with the database server.

)에 관한 질의(query)를 하면, 태그는 자신의 태그 정보에 대한 정보 노출을 방지하기 위하여 태그 자신이 저장하고 있는 비밀값들을 순열 조합한다. 여기서, 상기 비밀값들은 시스템 설정자가 사전에 미리 정해 놓은 태그의 비밀값들을 의미한다.Then, in the RFID environment, the reader gives the tag information (Tag ID:

When a query is made, the tag permutates the secret values stored by the tag itself in order to prevent information exposure of the tag information. Here, the secret values refer to secret values of a tag previously set by the system setter.

) 중 복수 개를 선택하고, 선택된 복수 개의 태그 비밀 데이터(

)를 태그 비밀 데이터 테이블(

)에 저장한다.On the other hand, the tag is a tag secret data (a permutated combination of the secret values (

) And select a plurality of tag secret data (

Tag secret data table (

).

The permutation combination information of tag secret data of the selected tag is stored in permutation index number (PIN) data.

That is, in the present invention, the tag selects a plurality of secret values stored in the tag, and forms the tag secret data by permuting the selected secret values.

As described above, since the tag secret data is data obtained by permuting the unique secret values of the tag, when the data about the permutation combining order of the secret values of the tag is not stored, the tag secret data is later stored from the tag secret data. Cannot be restored.

Therefore, in the present invention, when storing the secret value in the tag, and the tag permutation index number data, which is the permutation combination information of the tag secret data generated based on the plurality of secret values selected from the secret value of the tag, a large amount of Tag secret data can be generated, and the tag secret data can be used based on the permutation combination data.

Next, an exclusive OR operation is performed on the specific first tag secret data stored in the tag secret data table and a tag random number generated from the tag to generate a tag first message (step 320).

과 태그에서 생성된 난수(

)를 배타적 논리합 연산을 수행하여 태그 제 1 메시지(

)를 생성하는 것이다.This is the first tag secret data among the secret values stored between the tag and the server.

And random numbers generated from tags (

) Performs an exclusive OR operation on the tag first message (

) Is generated.

In operation 330, the tag first message, the tag secret data table, and the permutation index number data of the tag are transmitted to a database server through a reader.

과 태그에서 생성된 태그 난수(

)를 배타적 논리합 연산을 수행하여 생성된 태그 제 1 메시지(

), 상기 태그 비밀 데이터 테이블 및 상기 태그의 순열 인덱스 넘버 데이터를 리더에 전송한다.That is, the first secret data among the secret values stored between the tag and the server

Tag random numbers generated from and tags (

) Is generated by performing an exclusive OR operation on the tag first message (

), And transmits the tag secret data table and permutation index number data of the tag to a reader.

In this process, the reader only serves to transmit data transmitted from the tag to the database server, and does not use or process the data transmitted from the tag.

The reader sends the data sent from the tag back to the database server, which stores the tag first message, tag secret data table and permutation index number of the tag sent from the tag.

Next, a tag second message and a tag third message generated by performing an exclusive OR operation on the tag random number and specific second tag secret data and specific third tag secret data stored in the tag secret data table from the database server. In step 340, the tag receives the tag.

, 태그의 순열 인덱스 넘버(PIN) 데이터

및 상기 태그 제 1 메시지를 수신한 데이터 베이스 서버는 상기 태그 비밀 데이터 테이블

에 저장된 비밀 데이터 중 특정의 제 2 태그 비밀 데이터

을 선택하고, 상기 선택된 제 2 태그 비밀 데이터

와 상기 태그에서 생성된 태그 난수

를 배타적 논리합 연산을 수행하여 태그 제 2 메시지

를 생성한다.That is, the tag secret data table from the reader

Permutation index number (PIN) data of the, tag

And the database server that receives the tag first message includes the tag secret data table.

Secondary tag secret data of specific secret data stored in

Select and select the selected second tag secret data

And a tag random number generated from the tag

Perform an exclusive OR operation on the tag second message

.

에 저장된 비밀 데이터 중 특정의 제 3 태그 비밀 데이터

을 선택하고, 상기 선택된 제 3 태그 비밀 데이터

와 상기 태그에서 생성된 난수

를 배타적 논리합 연산을 수행하여 태그 제 3 메시지

를 생성한다.And, the server similarly the tag secret data table of the tag

Certain third tag secret data among secret data stored in

Select and select the selected third tag secret data

And a random number generated from the tag

Perform an exclusive OR operation on the tag third message

.

와 상기 태그 비밀 데이터 테이블

에 저장된 비밀 데이터를 이용하여 생성한 태그 제 2 메시지

및 태그 제 3 메시지

를 상기 태그에게 전달하기 위하여 상기 리더에게 생성한 상기 메시지 한 쌍을 전송한다.The server then generates a random number generated by the tag.

And the tag secret data table

Tag 2 message created using secret data stored in

And tag the third message

The message pair generated by the reader is transmitted to the tag.

및 태그 제 3 메시지

을 태그에 전송하고, 상기 태그는 서버로부터 전송된 메시지를 수신하여 태그에서 생성된 난수가 상기 데이터 베이스 서버로 정상적으로 전송되었는지를 확인할 수 있다.Reader is a tag second message sent from the database server

And tag the third message

Is transmitted to a tag, and the tag may receive a message transmitted from a server to check whether the random number generated from the tag is normally transmitted to the database server.

및 태그 제 3 메시지

로부터 상기 태그 난수를 이용하여 각각 상기 특정 제 2 태그 비밀 데이터 및 특정 제 3 태그 비밀 데이터의 추출여부를 판단한다.Next, the tag second message

And tag the third message

It is determined whether the specific second tag secret data and the specific third tag secret data are extracted using the tag random numbers from the respective symbols.

및 태그 제 3 메시지

와 상기 태그 난수

를 각각 배타적 논리합 연산하여 판단할 수 있다.Here, the determination of whether to extract the specific second tag secret data and the specific third tag secret data is the tag second message.

And tag the third message

And the tag random number above

Can be determined by performing an exclusive OR operation.

및 특정 제 3 태그 비밀 데이터

의 추출은 정상 전송을 인증하는 것이다.As such, when the specific second tag secret data and the specific third tag secret data are extracted, it means that the transmission by the step S330 is normal. Second tag secret data

And specific third tag secret data

The extraction of is to authenticate the normal transmission.

Overall, the tag can confirm that data transmission is normally performed to the reader and the database server, thereby enabling reliable data transmission.

4 is a flowchart illustrating a tag information transmission method in an RFID environment according to the present invention.

In the method for transmitting tag information in the RFID environment, which will be described later, detailed descriptions overlapping with the information transmission authentication method of the tag in the RFID environment will be omitted.

Referring to FIG. 4, first, when a tag receives a query for tag information from a reader, the tags are secretly combined with each other, and a plurality of tag secret data of the permutated combinations are selected to generate a tag secret data table. The permutation combination information of each of the tag secret data is stored in permutation index number (PIN) data (step 410).

Then, the first tag secret data stored in the tag secret data table and the first message generated by the tag random number, the tag secret data table, and the PIN data of the tag are transmitted to the database server through the reader ( 420 courses).

Then, the database server transmits the second and third tag secret data stored in the tag secret data table and the second message and the third message generated by the tag random number to the tag through the reader. (430 course).

Next, the fourth tag secret data stored in the tag secret data table and the fourth message generated by the tag random number in the tag, and the tag information encrypted by the tag random number and a server random number of the database server. 5 generates a message and transmits it to the reader (step 440).

와 서버에서 생성한 서버 난수

를 연결하여 태그 자신의 태그 정보를 암호화할 일회용 난수

를 생성한다.In other words, the tag is a tag random number generated from its own tag.

Random numbers generated by the server and server

Disposable random number to encrypt your own tag information by linking

.

또는 제 3 메시지

에 삽입된 형태로 서버 난수를 수신할 수 있다.To this end, the tag may receive a server random number generated by the database server, the second message sent from the database server

Or third message

You can receive server random numbers in the form inserted in.

및 제 5 메시지

를 리더로 전송한다.As such, after confirming that the tag random number generated from the tag is normally delivered to the database server, the tag generates a fourth message and a fifth message, and generates the fourth message.

And fifth message

Send to the reader.

는 상기 태그의 태그 비밀 데이터 테이블

에 저장된 제 4 태그 비밀 데이터

과 상기 태그에서 생성한 태그 난수

를 배타적 논리합 연산하여 생성된다.4th message

The tag secret data table of the above tag

4th tag secret data stored in

And a tag random number generated from the tag

Is generated by performing an exclusive OR operation.

와 서버에서 생성한 서버 난수

를 연결하여 태그 자신의 태그 정보

를 암호화할 일회용 난수

가 생성된 후,

와 태그 자신의 태그 정보

를 배타적 논리합 연산하여 생성된다.The fifth message is a tag random number generated by the tag as described above.

Random numbers generated by the server and server

Tag your own tag information

Disposable random numbers to encrypt

After is generated,

Tag your own tag information with

Is generated by performing an exclusive OR operation.

delete

The tag transmits the fourth message and the fifth message thus generated to the reader.

Next, a reader secret data table that stores reader secret data in a permutated combination of the reader secret value of the reader, the sixth message generated by the reader random number of the leader, and the reader secret value of the reader, and the reader secret data table. The PIN data, the fourth message, and the fifth message, which store permutation combination information, are transmitted to the database server (step 450).

과 리더에서 생성한 리더 난수

를 배타적 논리합 연산하여 제 6 메시지를 생성한다.In other words, the reader has its own secret value already shared with the server.

Random numbers generated by the user and the leader

Exclusive OR operation to generate a sixth message.

, 상기 리더의 리더 비밀 데이터 테이블의 순열 조합 정보를 저장하고 있는 PIN 데이터

을 생성한다.Then, the reader secret data table that stores the reader's own secret

PIN data that stores permutation combination information of the reader secret data table of the reader.

.

, 및 상기 리더의 리더 비밀 데이터 테이블의 순열 조합 정보를 저장하고 있는 PIN 데이터

을 상기 데이터 베이스 서버에 전송한다.Then, the reader, along with the fourth message and the fifth message sent from the tag, the sixth message generated by the reader itself, the reader secret data table

And PIN data storing permutation combination information of the reader secret data table of the reader.

Send to the database server.

Then, the database server authenticates the reader according to the fourth and fifth messages, and updates the secret data of the tag stored in the tag secret data table using the seventh message generated according to the tag information. The value is randomly generated and encrypted (step 460).

과 리더에서 생성된 난수

를 이용하여 태그 정보

를 암호화 하는 제 7 메시지를 생성한다.That is, the database server receives data from the reader, and the secret value of the reader included in the received data.

Random numbers generated by tags and readers

Tag information using

Generate a seventh message to encrypt.

를 생성하는 과정은 리더의 비밀값

과 상기 리더에서 생성한 난수

를 연결한 리더 암호화값

와 태그 정보

를 배타적 논리합 연산하여 수행될 수 있다.That is, the seventh message to encrypt the tag information

The process of creating a reader secret

And random numbers generated by the leader

Reader encryption value

And tag information

May be performed by performing an exclusive OR operation.

Finally, the database server transmits the encrypted update value to the reader, and the reader transmits the update value to the tag (step 470).

를 이용하여 서버에서 랜덤하게 생성된 업데이트 값

을 암호화하여 리더에게 전송한다.That is, the database server finally generates the seventh message

Randomly generated update value in server using

Encrypt it and send it to the reader.

This is to prevent leakage of tag information by enhancing the security of tag information even if the tag always has the same tag secret value, even if an attacker's secret value leakage occurs continuously.

를 이용하여 서버에서 랜덤하게 생성된 업데이트 값

을 암호화한 데이터를 리더에게 전송하면, 리더에서 제 7 메시지를 리더 자신의 비밀값

과 상기 리더에서 생성한 난수

를 이용하여 복호화하여 서버에서 랜덤하게 생성된 업데이트 값

을 추출해낸다.Thus, the database server generates the seventh message

Randomly generated update value in server using

When the encrypted data is sent to the reader, the reader sends the seventh message to the reader's own secret value.

And random numbers generated by the leader

The update value randomly generated in the server by decoding using

Extract

을 전송할 수 있게 되므로, 상기 태그는 서버에서 랜덤하게 생성된 업데이트 값

을 기반으로 태그 자신의 태그 비밀 데이터 테이블

에 저장된 태그의 비밀 데이터를 업데이트 한다. Finally, the update value randomly generated in the server with the tag in the reader

Since the tag can be transmitted, the tag is an update value randomly generated by the server

Based on own tag secret data table

Updates secret data of tag stored in.

이 연산되어 태그에게 전달되어야 한다.This is to reduce the likelihood of an attacker exposing a secret to a particular tag as the tag always has the same secret as described above, and the updated secret must be a valid table stored on the server (Valid). The update value so that it can be changed to

Must be computed and passed to the tag.

5 is a block diagram of an apparatus 500 for transmitting information of a tag in an RFID environment according to the present invention.

Referring to FIG. 5, the apparatus 500 for tag information transmission authentication according to the present invention includes a tag secret value storage unit 510, a tag secret value permutation combination unit 520, a tag secret data table 530, and a tag permutation index. The data storage unit 540, the tag operator 550, the tag transceiver 560, the authenticator 570, and the tag random number generator 580 may be configured.

The tag secret value storage unit 510 stores a tag secret value unique to the tag itself.

Meanwhile, when the tag secret value permutation combination unit 520 receives the reader's query from the tag transceiver 560, the tag secret value permutation combination unit 520 selects a plurality of secret values from among the secret values stored in the tag secret value storage unit 510 of the tag and performs permutation. To combine.

Accordingly, the tag secret value permutation combination unit 520 may include a secret value selection module that selects a plurality of specific secret values from the tag secret value storage unit 510 that stores the unique secret value of the tag. .

Here, the secret value means a secret value of a tag previously set by the system setter.

) 중 복수 개를 선택하고, 선택된 복수 개의 태그 비밀 데이터(

)을 태그 비밀 데이터 테이블(530)에 저장한다.In addition, the tag secret data table 530 may include tag secret data (permuted and combined) in the tag secret value permutation combination unit 520.

) And select a plurality of tag secret data (

) Is stored in the tag secret data table 530.

The tag permutation index number data storage unit 540 stores permutation combination information of tag secret data of the selected tag.

That is, in the present invention, the tag selects a plurality of secret values stored in the tag, and forms the tag secret data by permuting the selected secret values.

As described above, since the tag secret data is data obtained by permuting the unique secret values of the tag, when the data about the permutation combining order of the secret values of the tag is not stored, the tag secret data is later stored from the tag secret data. Cannot be restored.

Accordingly, when the secret value is stored in the tag and the permutation combination data obtained by permutation combining based on a plurality of secret values selected from the secret values of the tag is stored, a vast amount of tag secret data can be generated. The tag secret data may be used based on the permutation combination data.

The tag operator 550 generates an tag message by performing an exclusive OR operation on the specific tag secret data stored in the tag secret data table 530 and the tag random number generated by the tag random number generator 580.

Here, the tag operator 550 may include a tag secret data selection module for selecting specific tag secret data stored in the tag secret data table 530.

The tag transceiver 560 may generate tag permutation index number data of a tag secret data stored in the tag message, the tag secret data table 530, and the tag permutation index number data storage unit 540 generated by the tag calculator 550. Transmits to a reader (not shown), and receives from the database server (not shown) a database server message generated according to an exclusive OR operation of the specific tag secret data stored in the tag secret data table 530 and the tag random number. It plays a role.

The authenticator 570 authenticates the database server according to the received database server message.

 The database server transmits a server message generated by using the random number generated in the tag and the secret data stored in the tag secret data table to the tag through a reader, and the authentication unit 570 transmits from the database server. The received message may check whether the random number generated from the tag is normally transmitted to the database server.

It determines whether to extract specific tag secret data from the message transmitted from the database server using the tag random number.

Here, whether to extract specific tag secret data may be determined by an exclusive OR operation of a message transmitted from the database server and a tag random number.

Therefore, the authentication unit 570 may further include a control unit for determining whether to extract the specific tag secret data using the tag random number from the database server message, wherein the control unit is the database server message and the The specific tag secret data is extracted by an exclusive OR operation of tag random numbers.

As such, when the specific tag secret data is extracted, the tag secret data is normally transmitted from the tag to the database server.

Overall, the tag can confirm that data transmission is normally performed to the reader and the database server, thereby enabling reliable data transmission.

6 is a block diagram of a tag information transmission system in an RFID environment according to the present invention.

Referring to FIG. 6, a tag information transmission system in an RFID environment according to the present invention includes a tag 610 storing tag information, a reader 620 for requesting tag information of the tag, and a database server. 630.

The tag 610 includes a tag secret value storage unit 611, a tag permutation index number data generation unit 612, a tag operation unit 613, a tag random number generation unit 614, and a tag transmission / reception unit 615. Can be.

The reader 620 includes a reader secret value storage unit 621, a reader permutation index number data generator 622, a reader operator 623, a reader random number generator 624, and a reader transceiver 625. Can be.

In addition, the database server 630 may include a server storage unit 631, a server operator 632, and an update value generator 633.

In the tag 610, the tag secret value storage unit 611 stores a tag secret value and tag information Tag ID. The random number generator 614 generates a random random number in order to encrypt the tag secret value stored in the tag.

When the tag permutation index number data generation unit 612 receives a query of the reader 620 from the tag transceiver 615, the tag permutation index number data generation unit 612 selects a plurality of secret values from the secret values stored in the tag storage unit 611 and performs a permutation combination.

Here, the tag permutation index number data generation unit 612 may include a secret value selection module for selecting a plurality of secret values from a tag secret value stored in the tag secret value storage unit 611.

Here, the tag secret value means a secret value of a tag previously set by the setter of the system.

Meanwhile, the tag permutation index number data generation unit 612 has a tag secret data table. The tag permutation index number data generation unit 612 generates a permutated combined tag secret data by permutating the tag secret values, and selects a plurality of the tag secret data. The selected plurality of tag secret data is stored in the tag secret data table.

Then, tag permutation index number data according to permutation combination information of the plurality of tag secret data stored in the tag secret data table is generated.

As described above, since the tag secret data is a data obtained by permuting a unique secret value of a tag, when the data about the permutation order of the secret value of the tag is not stored, the tag secret data is later stored from the tag secret value. Data cannot be restored.

Therefore, when the secret value is stored in the tag and the permutation combination data obtained by permutation combining based on a plurality of secret values selected from the secret values of the tag is stored, a vast amount of tag secret data can be generated. The tag secret data may be used based on a tag permutation index number data generation unit 612 that stores the permutation combination information.

Meanwhile, the tag operation unit 613 generates a tag message by an exclusive OR operation of the specific tag secret data stored in the tag permutation index number data generation unit 612 and the tag random number generated by the tag random number generation unit 614. .

This is to generate a tag message by the exclusive OR operation of a specific secret value and a random number generated from the tag among the secret values stored between the tag and the server.

Here, the tag calculator 613 may include a tag secret data selection module for selecting specific tag secret data stored in the tag secret data table.

In addition, the tag transceiver 615 reads a tag permutation index number data of tag secret data stored in the tag message, the tag secret data table, and the tag permutation index number data generation unit 612 generated by the tag calculator 613. And transmits to the reader transceiver 625 of 620, a database server message generated from an exclusive OR operation of the specific tag secret data and the tag random number stored in the tag secret data table from the database server 630. It serves to receive.

The tag 610 may further include an authentication unit (not shown), and the authentication unit may determine whether the random number generated in the tag is normally transmitted to the database server 630.

It checks whether the server message transmitted from the database server is authenticated by extracting specific tag secret data using the tag random number, and whether to extract specific tag secret data is a message transmitted from the database server. It can be determined by the exclusive OR operation of and the tag random number.

Accordingly, the authentication unit may further include a controller configured to determine whether to extract the specific tag secret data using the tag random number from the database server message, wherein the controller is an exclusive logical sum of the data server message and the tag random number. The specific tag secret data is extracted by an operation.

On the other hand, the reader secret value storage unit 621 stores the reader's own unique reader secret value.

The reader permutation index number data generation unit 622 generates reader permutation index number data in the same process as the tag permutation index number data generation unit 612.

When the reader transceiver 625 receives the tag message from the tag after authentication of the tag from the tag transceiver 615, the reader permutation index number data generation unit 622 stores the reader secret value stored in the reader secret value storage unit 621. Select a plurality of secret values and combine them permutation.

Here, the reader permutation index number data generator 622 may include a secret value selection module for selecting a plurality of secret values from the reader secret values stored in the reader secret value storage 621.

Here, the reader secret value means a secret value of a reader previously determined by the setter of the system.

Meanwhile, the reader permutation index number data generation unit 622 has a reader secret data table. The reader permutation index number data generation unit 622 generates a permutated reader secret data by permutating the reader secret values, and selects a plurality of the reader secret data. The selected plurality of reader secret data is stored in the reader secret data table.

Then, the reader permutation index number data according to the permutation combination information of the plurality of reader secret data stored in the reader secret data table is generated.

The reader operator 623 generates a reader message by an exclusive OR operation of the reader secret data and the reader random number generated by the reader random number generator 624.

Then, the reader transceiver 625 transmits the reader secret data table, the reader permutation index number data, and the reader message to the database server 630, and receives a corresponding database server message.

The server storage unit 631 is tag secret data transmitted by the tag transceiver 615 for authentication of the reader 620 and the database server 630, a tag message generated by a tag random number, and the tag secret data table. And stores permutation combination index number data of the tag, and stores other tag messages transmitted from tags and reader messages generated from readers.

The server operator 632 generates the database server message using the data stored in the server storage 631.

Meanwhile, the update value generator 633 randomly generates an update value for updating the tag message generated according to the tag secret value of the tag. Since details related to the update are the same as described above, detailed description thereof will be omitted.

 The invention can be implemented via software. When implemented in software, the constituent means of the present invention are code segments that perform the necessary work. The program or code segments may be stored on a processor readable medium or transmitted by a computer data signal coupled with a carrier on a transmission medium or network.

The computer-readable recording medium includes all kinds of recording devices in which data is stored which can be read by a computer system. Examples of computer-readable recording devices include ROM, RAM, CD-ROM, DVD ± ROM, DVD-RAM, magnetic tape, floppy disks, hard disks, optical data storage devices, and the like. The computer readable recording medium can also be distributed over network coupled computer devices so that the computer readable code is stored and executed in a distributed fashion.

Although the present invention has been described with reference to one embodiment shown in the drawings, this is merely exemplary and will be understood by those of ordinary skill in the art that various modifications and variations can be made therefrom. However, such modifications should be considered to be within the technical protection scope of the present invention. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

1 shows a schematic diagram of an RFID environment.

Figure 2 shows a schematic diagram of tag secret data table management in an RFID environment in accordance with the present invention.

3 is a flowchart illustrating a method for authenticating information transmission of a tag in an RFID environment according to the present invention.

4 is a flowchart illustrating a tag information transmission method in an RFID environment according to the present invention.

5 is a block diagram of an apparatus for authenticating information transmission of a tag in an RFID environment according to the present invention.

6 is a block diagram of a tag information transmission system in an RFID environment according to the present invention.

Claims (20)

When a tag receives a query for tag information from a reader, the tags are stored in a tag secret data table, and the plurality of tag secret data are stored in a tag secret data table. Storing permutation combination information in Permutation Index Number (PIN) data; Generating a tag first message by performing an exclusive OR operation on specific first tag secret data stored in the tag secret data table and a tag random number generated from the tag; Transmitting the tag first message, the tag secret data table, and the PIN data of the tag to a database server through a reader; The tag second message and the tag third message generated by performing an exclusive OR operation on the tag random number, respectively, with the second tag secret data and the third tag secret data stored in the tag secret data table from the database server. Receiving; And It is determined whether the specific second tag secret data and the specific third tag secret data are extracted by using the tag random number from each of the tag second message and the tag third message. And authenticating that the transmission to the base server was normal. The method of claim 1, The secret value of the tag The information transmission authentication method of the tag in the RFID environment, characterized in that shared between the tag and the database server in advance. delete The method of claim 1, Determining whether the specific second tag secret data and the specific third tag secret data are extracted In the RFID environment, it is determined whether the specific second tag secret data and the specific third tag secret data are extracted by performing an exclusive OR operation on the tag second message and the tag third message, respectively, with the tag random number. Information transmission authentication method of tag of. When a tag receives a query for tag information from a reader, the tags are stored in a tag secret data table by permutating the secret values of the tag, selecting a plurality of the permutated tag secret data, and storing the tag secret data in the tag secret data table. Storing permutation combination information of each data in permutation index number (PIN) data; Transmitting first tag secret data stored in the tag secret data table and a first message generated by a tag random number, the tag secret data table, and PIN data of the tag to the database server through the reader; Transmitting, at the database server, second and third tag secret data stored in the tag secret data table and a second message and a third message generated by the tag random number to the tag through the reader; A fourth message generated by the tag random data and the fourth tag secret data stored in the tag secret data table in the tag, and a fifth message of tag information encrypted by the tag random number and a server random number of the database server. Generating and transmitting to the reader; A reader secret data table which stores reader secret data in which the reader secret value of the leader and the reader secret number of the leader are randomly combined with the reader secret value, and the permutation combination information of the reader secret data. Transmitting, by the reader, the PIN data, the fourth message, and the fifth message to the database server; Authenticating the reader according to the fourth and fifth messages at the database server; The database server generates a seventh message from the reader secret value, the reader random number, and the tag information, and randomly generates an update value of tag secret data stored in the tag secret data table using the seventh message. Encrypting; And And transmitting, by the database server, the encrypted update value to the reader, and transmitting, by the reader, the update value to the tag. The method of claim 5, Sending to the tag Determining whether to extract the second and third tag secret data using the tag random number from the second message and the third message; And And if the second and third tag secret data is extracted, authenticating the database server in the tag. The method of claim 5, The seventh message is And generating an exclusive logical OR operation on the data message appended with the reader secret value, the reader random number, and the tag information. The method of claim 5, The step of transmitting the update value to the tag The reader extracts the update value by using the reader secret value and the reader random number stored in the reader, and transmits the extracted update value to the tag. A recording medium recorded with a program which can carry out the method of any one of claims 1, 2 and 4 to 8 on a computer. A tag secret value storage unit for storing a unique tag secret value of a tag; A tag random number generation unit generating a random number of tags; A tag secret value permutation combination unit for permutating the secret values stored in the secret value storage unit of the tag when receiving a query for tag information from a reader;  A tag secret data table for storing tag secret data permutated in the tag secret value permutation combining unit; A tag permutation index number data storage unit for storing permutation index number data which is permutation combination information of the tag secret data stored in the tag secret data table; A tag operation unit generating a tag message by an exclusive OR operation of specific tag secret data stored in the tag secret data table and a tag random number generated by the tag random number generation unit; The tag message generated by the tag operation unit, the tag secret data table, the tag permutation index number data is transmitted to a reader, and the exclusive logical sum of specific tag secret data and the tag random number stored in the tag secret data table from a database server. A tag transceiver for receiving a database server message generated according to an operation; And And an authentication unit configured to perform authentication of the database server according to the database server message. The method of claim 10, The tag secret value permutation combination unit And a secret value selecting module that selects a plurality of specific secret values from a tag secret value storing unit that stores a secret value unique to the tag. The method of claim 10, The tag operation unit And a tag secret data selection module for selecting specific tag secret data stored in the tag secret data table. The method of claim 10, The tag secret is The information transmission authentication device of the tag in the RFID environment, characterized in that shared between the tag and the database server in advance. The method of claim 10, The authentication unit And a control unit for determining whether to extract the specific tag secret data using the tag random number from the database server message. The method of claim 14, The control unit And extracting the specific tag secret data by an exclusive OR operation of the database server message and the tag random number. In a tag information transmission system in an RFID environment including a tag, a reader for requesting tag information of the tag and a database server, The tag is, A tag secret value storage unit for storing a unique tag secret value and tag information; A tag random number generator generating a random random number; When receiving a query for tag information from a reader, a tag secret data table including tag secret data obtained by permuting the tag secret values is generated, and the tag permutation index number data which is permutation combination information of the tag secret data is stored. A tag permutation index number data generation unit; A tag calculator configured to generate a tag message by performing an exclusive OR operation on the tag secret data and the tag random number; And A tag transceiver for transmitting the tag secret data table, the tag permutation index number data, and the tag message to the database server through the reader, and receiving a corresponding database server message; The leader A reader secret value storage for storing a reader's own unique secret value; A reader random number generator generating a random random number; When a query for a reader message is received from the database server, a reader secret data table including reader secret data obtained through permutation of secret values stored in the reader is generated, and a reader permutation index that is permutation combination information of the reader secret data. A leader permutation index number data generator for generating number data; A reader calculator configured to generate a reader message by performing an exclusive OR operation on the reader secret data and the reader random number; And A reader transceiver for transmitting the reader secret data table, the reader permutation index number data, and the reader message to a database server, and receiving a corresponding database server message; The database server A server storage unit which stores data transmitted from the tag and the reader; A server operator configured to generate the database server message using data stored in the server storage; And And an update value generator for randomly generating an update value for updating a tag message generated according to the tag secret value of the tag. The method of claim 16, The tag is Tag information transmission system in the RFID environment, characterized in that further comprising an authentication unit for performing authentication of the database server according to the database server message. The method of claim 16, The tag permutation index number data generation unit And a secret value selecting module that selects a plurality of specific secret values from a tag storage unit storing unique secret values of the tag. The method of claim 16, The tag operation unit And a tag secret data selection module for selecting specific tag secret data stored in the tag secret data table. The method of claim 17, The authentication unit And a controller configured to determine whether to extract specific tag secret data of the tag secret data table using the tag random number from the database server message.

Images