WO2012019397A1 - 一种射频识别标签识别的方法及系统 - Google Patents
一种射频识别标签识别的方法及系统 Download PDFInfo
- Publication number
- WO2012019397A1 WO2012019397A1 PCT/CN2010/079018 CN2010079018W WO2012019397A1 WO 2012019397 A1 WO2012019397 A1 WO 2012019397A1 CN 2010079018 W CN2010079018 W CN 2010079018W WO 2012019397 A1 WO2012019397 A1 WO 2012019397A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- random number
- reader
- encryption algorithm
- rfid tag
- data
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
- G06K7/10—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation
- G06K7/10009—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves
- G06K7/10257—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves arrangements for protecting the interrogation against piracy attacks
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
- G06K7/0008—General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
- H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
Definitions
- the present invention relates to the field of radio frequency identification (RFID), and more particularly to a method and system for RFID tag identification.
- RFID tags are composed of coupling elements and chips, are attached to objects, and identify objects by storing data of objects, including unique identification.
- the code (ID), the feature information of the object, etc., the feature information of the object is information that can characterize the object, such as the balance information of the bus card, and the RFID tag is widely used in various fields such as product anti-counterfeiting, logistics, product monitoring, and the like.
- Radio frequency is a wireless communication technology. All devices in the range of RF transmission and reception can receive and transmit electromagnetic waves. In the current UHF RFID air interface standard, most of the data transmission does not increase the security mechanism.
- the air interface refers to the tag and the reader.
- the communication interface between the reader/writer is used to identify the RFID tag, read the data in the RFID tag, or write data to the RFID tag.
- the data of the reader and the RFID tag are all transmitted in plaintext during the communication process. This means that the illegal reader and the RFID tag communicate with each other to obtain the data of the RFID tag. , which leads to the possibility of data leakage.
- the RFID tag identification process has no security mechanism.
- the reader/writer writes data to the RFID tag
- the XOR random number (RN16) is used to perform an exclusive OR operation with the data. Encryption, the specific example is shown in Figure 1:
- Step 101 The reader/writer counts the RFID tag, and sends an acquisition ID command to the RFID tag.
- the reader sends a label inventory command to all RFID tags in the radio frequency range, and the RFID tag
- the RN16 is generated by the RN16 by its own random number generator, and the RN16 is encoded in the form of a data frame, and then the RN16 is sent to the reader according to the anti-collision algorithm.
- the RN 16 is parsed by the writer, and the parsing may be the RN 16 in the read data frame.
- the anti-collision algorithm means that the RFID tag sends the RN 16 to the reader according to the set sequence, so as to avoid sending to the reader at the same time, and generating Interference, making the RN16 an error, causing the reader to fail to parse;
- the reader/writer sends a read ID command to the RFID tag, and the read ID command includes the RN16.
- the RFID tag receives the read ID command including the RN16, compares the received RN16 with the RN16 generated by itself, determines that the two are the same, sends the ID to the reader, and the reader receives the ID.
- the reader can communicate with the RFID tag based on the acquired ID to read and write data in the RFID tag.
- the reading and writing includes: the reader sends a read data command to the RFID tag, the RFID receives the read data command, and sends the data to the reader/writer; the reader/writer performs an exclusive OR operation on the data to be written into the RFID tag with the RN16, Obtaining the encrypted write data, and transmitting a write data command to the RFID tag, the write data command includes the encrypted write data, the RFID tag receives the write data command, and the encrypted write data is reversed according to the RN16. XOR operation, get the write data and save.
- the above method has the following problems. As long as the RFID tag is in the range of the RF transceiver of the reader, the reader can obtain the ID, and the illegal reader can read the data in the RFID tag according to the acquired ID, resulting in data leakage. In addition, since the RFID tag transmits the RN 16 to the reader/writer through the plaintext, the illegal reader/writer can also acquire the RN16, and write data to the RFID tag according to the RN16 and the ID, thereby destroying the security of the data. Summary of the invention
- the main object of the present invention is to provide a method and system for RFID tag identification, which increases the security of ID identification and ensures the secure transmission of RFID tag data, which is beneficial to the development of RFID technology.
- the technical solution of the present invention is achieved as follows:
- the invention provides a method for RFID identification of radio frequency identification, the reader/writer counts the RFID tag, the RFID tag generates a random number and sends it to the reader, and the reader sends the read unique identification code ID command containing the random number to the RFID tag. , the method also includes:
- the RFID tag encrypts the ID according to the random number and the preset encryption algorithm, and sends the ID to the reader/writer, and the reader acquires the ID.
- the RFID tag encrypts the ID according to the random number and the preset encryption algorithm, including: the RFID tag encrypts the random number according to a preset encryption algorithm, becomes a key, and then according to a preset encryption algorithm and a secret
- the key pair ID is encrypted; or, the random number is used as a key, and the ID is encrypted according to a preset encryption algorithm and a random number.
- the reader acquires the ID: the reader receives the encrypted ID, encrypts the random number according to a preset encryption algorithm, becomes a key, and then encrypts according to a preset encryption algorithm and a key pair.
- the latter ID is decrypted; or, the random number is used as a key, and the encrypted ID is decrypted according to a preset encryption algorithm and a random number.
- the method further includes: the reader sends a read data command including the ID to the RFID tag, and the RFID tag determines that the received ID matches the self ID, according to the preset encryption algorithm.
- the data is encrypted and sent to the reader, and the reader decrypts the data according to a preset encryption algorithm.
- the method further includes: the reader/writer encrypts the data to be written into the RFID tag according to a preset encryption algorithm, acquires the encrypted write data, and sends the ID to the RFID tag. And the written data command of the encrypted write data, the RFID tag receives the write data command, determines that the received ID matches the self ID, and decrypts the encrypted write data according to the preset encryption algorithm to obtain the write data. And save.
- the invention also provides a system for RFID tag identification, the system comprising:
- a reader/writer for sending a tag inventory command to an RFID tag, receiving an RFID tag transmission a random number, sending a read ID command to the RFID tag according to the random number, obtaining an ID;
- the RFID tag is configured to send the generated random number to the reader/writer; receive the read ID command, encrypt the ID according to the random number and the preset encryption algorithm, and send the ID to the reader/writer.
- the RFID tag specifically includes a random number generator and a data processing module; a random number generator is configured to receive the label inventory command, generate a random number, and send the data to the data processing module, and the data processing module is configured to receive the random number Reading the ID command, determining that the received random number matches the random number generated by the random number generator, encrypting the random number into a key according to a preset encryption algorithm, and encrypting the ID according to a preset encryption algorithm and a key; or The random number is used as a key, and the ID is encrypted according to a preset encryption algorithm and a random number, and the encrypted ID is sent to the reader/writer.
- the reader/writer is specifically configured to: receive the encrypted ID, encrypt the random number into a key according to a preset encryption algorithm, and decrypt the encrypted ID according to the preset encryption algorithm and the key; or The random number is used as a key, and the encrypted ID is decrypted according to a preset encryption algorithm and a random number.
- the reader/writer is further configured to: send a read data command to the data processing module according to the obtained ID, receive the encrypted data sent by the data processing module, and decrypt the encrypted data according to the preset encryption algorithm, Obtaining data in the data processing module; the data processing module is further configured to: receive the read data command including the ID, determine that the received ID matches the self ID, encrypt the data according to the preset encryption algorithm, and then send the data to the reader .
- the reader/writer is further configured to encrypt the data to be written into the data processing module according to a preset encryption algorithm, obtain the encrypted write data, and send the ID and the encrypted write data to the data processing module.
- the data processing module is further configured to: receive the write data command, determine that the received ID matches the self ID, and decrypt the encrypted write data according to the preset encryption algorithm to obtain the write data. And save.
- the ID when ID is identified, the ID is encrypted, and the security of the ID identification is enhanced; in addition, the data of the reader/writer reading and writing the RFID tag is encrypted. Ensuring the secure transmission of RFID tag data is conducive to the development of RFID technology.
- FIG. 1 is a schematic flow chart of a method for implementing RFID tag identification in the prior art
- FIG. 2 is a schematic flow chart of a method for implementing RFID tag identification in the present invention
- FIG. 3 is a schematic diagram of the system composition for implementing RFID tag identification in the present invention. detailed description
- the reader counts the RFID tag and sends a read ID command to the RFID tag.
- the RFID tag encrypts the ID and sends it to the reader, and the reader obtains the ID.
- a method for RFID tag identification as shown in Figure 2, the specific steps are as follows:
- Step 201 The reader/writer counts the RFID tag, and sends a read ID command to the RFID tag; the reader/writer sends a tag inventory command to the RFID tag, and the transmission is broadcasted by the reader to all RFID tags in the radio frequency range thereof; After the tag receives the tag inventory command, its internal random number generator generates RN16. At the same time, the RN16 is encoded and sent to the reader according to the anti-collision algorithm. Each RN16 generated by the RFID tag is different, and the code may be The RN16 is packaged into a data frame, and the reader/writer parses out the RN16, and the parsing may be the RN16 in the read data frame.
- the anti-collision algorithm refers to the RFID tag sending to the reader/writer according to the set sequence. RN16, avoid sending to the reader at the same time, causing interference, causing RN16 to make an error, causing the reader to be unable to parse.
- the reader transmits a read ID command to the RFID tag broadcast, and the read ID command includes the RN16.
- Step 202 The RFID tag encrypts the ID and sends the ID to the reader/writer.
- the RFID tag receives the read ID command including the RN16, compares the received RN16 with the RN16 generated by itself, determines that the two match, and encrypts the ID according to the preset encryption algorithm. Then send it to the reader.
- the encrypting the ID according to the preset encryption algorithm includes: the RFID tag calculates the RN 16 according to the preset encryption algorithm A, acquires a key, and then encrypts the ID by using a preset encryption algorithm B according to the key. Encrypt the ciphertext, that is, the encrypted ID, or directly use RN16 as the key, encrypt the ID by the preset encryption algorithm B, and obtain the encrypted ID, the preset encryption algorithm A and the preset encryption.
- the algorithm B may be the same or different.
- the encryption algorithm in the prior art may be used as needed.
- the preset may be an operation rule for setting an encryption algorithm in advance, and performing encryption according to the operation rule.
- SHA-1 secure hash algorithm
- DES data encryption standard
- Step 203 The reader receives the encrypted ID and decrypts it to obtain an ID.
- the reader receives the encrypted ID, obtains a key according to the RN16 and the preset encryption algorithm A, and then decrypts the encrypted ID according to the key and the preset encryption algorithm B, or directly uses the RN16 as a key.
- the ID is decrypted according to the preset encryption algorithm B, and the ID is obtained.
- the encryption algorithm A is SHA-1
- the encryption algorithm B is the DES algorithm.
- the reader hashes the received RN16 according to the SHA-1 algorithm to obtain the key k, or directly uses RN16 as the key k;
- the reader can read and write data in the RFID tag according to the obtained ID.
- the reading and writing includes: the reader/writer sends a read data command to the RFID tag, where the read data command includes an ID, and the RFID tag receives the read data command including the ID, and compares with the ID of the own, and determines that the two are the same.
- the RFID data is encrypted according to a preset encryption algorithm and then sent to the reader, the reader receives the encrypted data, and decrypts according to a preset encryption algorithm; or the reader/writer is to be written into the RFID tag.
- the signed data is encrypted according to a preset encryption algorithm, and the reader sends a write data command to the RFID tag, where the write data command includes the encrypted data, the ID, the RFID tag receives the write data command, and the received ID Compared with its own ID, it is determined that the two are the same, and the encrypted data is decrypted according to the preset encryption algorithm and saved.
- the invention also provides a system for RFID tag identification, as shown in FIG. 3, the system comprises:
- the RFID tag 301 is configured to receive the label inventory command sent by the reader/writer 302, and generate the RN 16 to send to the reader/writer 302; receive the read ID command sent by the reader/writer 302, and encrypt the ID according to the RN16 and the preset encryption algorithm. , sent to the reader 302;
- the reader/writer 302 is configured to send a label inventory command to the RFID tag 301, receive the RN16 sent by the RFID tag 301, and send a read ID command to the RFID tag 301 according to the RN16 to obtain an ID.
- the reader 302 obtains the ID, specifically: receiving the encrypted ID, and decrypting the received encrypted ID according to the RN16 and a preset encryption algorithm to obtain an ID.
- the RFID tag 301 specifically includes: a random number generator 3011, a data processing module 3012; a random number generator 3011, configured to receive a tag inventory command sent by the reader/writer 302, and generate the RN 16 to send to the data processing module 3012;
- the data processing module 3012 is configured to send the label inventory command to the random number generator 3011, encode the RN16 generated by the random number generator 3011, and send the RN16 to the reader/writer 302.
- the encoding may be to package the RN16 into a data frame. Format
- the reader/writer 302 is specifically configured to parse out the RN 16, and the parsing includes reading the RN 16 in the data frame.
- the data processing module 3012 is further configured to: receive a read ID command, where the read ID command includes the RN16, compare the received RN16 with the RN16 generated by the random number generator 3011, and determine that the two are the same, according to the preset encryption algorithm.
- A encrypts the RN16 into a key, and then according to the pre-
- the encryption algorithm B is set to encrypt the ID by the key, or directly, the RN 16 is used as a key, and then the ID is encrypted according to the preset encryption algorithm B.
- the preset encryption algorithm A and the encryption algorithm B may be the same. Alternatively, the encryption algorithm in the prior art, such as the 3DES algorithm, may be preset as needed.
- the reader/writer 302 is specifically configured to receive the encrypted ID according to a preset encryption algorithm.
- the RN 16 encrypts the key, and then decrypts the encrypted ID by the key according to the preset encryption algorithm B, or uses the RN 16 as a key to perform the encrypted ID according to the preset encryption algorithm B. Decrypt.
- the reader/writer 302 is further configured to send a read data command to the data processing module 3012, receive the encrypted data sent by the data processing module 3012, and perform decryption according to a preset encryption algorithm; the read data command includes an ID. ;
- the data processing module 3012 is further configured to: receive a read data command including an ID, compare the ID with its own ID, determine that the two match, and encrypt the data according to a preset encryption algorithm and send the data to the reader/writer 302.
- the reader/writer 302 is further configured to: encrypt the data to be written into the data processing module 3012 according to a preset encryption algorithm, obtain the encrypted write data, and send a write data command to the data processing module 3012, where the write data command Contains ID, encrypted write data;
- the data processing module 3012 is further configured to: receive a write data command, compare the received ID with its own ID, determine that the two match, and decrypt and save the encrypted write data according to a preset encryption algorithm.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- Toxicology (AREA)
- Computer Vision & Pattern Recognition (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Artificial Intelligence (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- General Engineering & Computer Science (AREA)
- Electromagnetism (AREA)
- General Health & Medical Sciences (AREA)
- Storage Device Security (AREA)
Description
一种射频识别标签识别的方法及系统 技术领域 本发明涉及射频识别 (RFID )领域, 特别是指一种 RFID标签识别的 方法及系统。 背景技术 随着 RFID技术的广泛应用 , RFID标签逐渐应用于人们的日常生活中, RFID标签由耦合元件及芯片组成, 附着于物体上, 通过存储物体的数据来 标识物体, 所述数据包括唯一识别码(ID ) 、 物体的特征信息等, 所述物 体的特征信息是可以表征物体特性的信息,例如公交卡的余额信息等, RFID 标签广泛应用于产品防伪、 物流、 产品监控等多种领域。
射频是一种无线通信技术, 处于射频收发范围内的所有设备都可以接 收和发射电磁波, 目前的超高频 RFID空口标准中,数据传输大多没有增加 安全机制, 所述空口指标签与读写器之间的通信接口, 所述读写器用于识 别 RFID标签后, 读取 RFID标签中的数据, 或向 RFID标签写入数据。 以 职业健康安全管理体系 (ISO18000 ) -6B标准为例, 读写器与 RFID标签在 通信过程中数据全部釆用明文传输,这就存在非法读写器与 RFID标签进行 通信, 获得 RFID标签的数据, 从而导致数据泄密的可能。
在产品电子代码(EPC )标准的空口通信中, RFID标签识别的过程没 有安全机制, 只在读写器对 RFID 标签进行写数据时, 利用 16位随机数 ( RN16 )与数据进行异或运算来加密, 具体示例如图 1所示:
步骤 101、 读写器清点 RFID标签, 向 RFID标签发送获取 ID命令; 读写器向其射频范围内的所有 RFID标签发送标签清点命令, RFID标
签接收标签清点命令后, 通过自身的随机数发生器产生 RN16, 对 RN16进 行编码,所述编码可以是将 RN16打包成数据帧的形式, 然后根据防碰撞算 法将 RN16发送给读写器, 读写器解析出 RN16, 所述解析可以是读取数据 帧中的 RN16, 所述防碰撞算法指 RFID标签按照设定的先后顺序, 向读写 器发送 RN16, 避免同时发送给读写器, 产生干扰, 使 RN16出错, 导致读 写器无法解析;
读写器向 RFID标签发送读取 ID命令,所述读取 ID命令中包含 RN16。 步骤 102、 RFID标签将 ID发送给读写器。
RFID标签接收包含 RN16的读取 ID命令,将接收的 RN16同自身产生 的 RN16相比较, 确定两者相同, 将 ID发送给读写器, 读写器接收 ID。 读 写器可根据获取的 ID同 RFID标签进行通信, 读写 RFID标签中的数据。 所述读写包括: 读写器向 RFID标签发送读取数据命令, RFID接收读取数 据命令, 将数据发送给读写器; 读写器将要写入 RFID标签的数据与 RN16 进行异或运算, 获取加密后的写入数据, 向 RFID标签发送写入数据命令, 所述写入数据命令包括加密后的写入数据, RFID标签接收写入数据命令, 根据 RN16将加密后的写入数据进行反异或运算, 获取写入数据并保存。
但是, 上述方法存在以下问题, 只要 RFID标签处于读写器的射频收发 范围内, 读写器都可以获取 ID, 非法读写器可根据获取的 ID读取 RFID标 签中的数据, 导致数据泄密, 另外, 由于 RFID标签向读写器发送 RN16是 通过明文发送,非法读写器同样可获取 RN16,根据 RN16及 ID向 RFID标 签写入数据, 破坏数据的安全性。 发明内容
有鉴于此,本发明的主要目的在于提供一种 RFID标签识别的方法及系 统, 增加 ID识别的安全性, 保证 RFID标签数据安全传输, 有利于 RFID 技术的发展。
为达到上述目的, 本发明的技术方案是这样实现的:
本发明提供了一种射频识别 RFID标签识别的方法, 读写器清点 RFID 标签, RFID标签产生随机数发送给读写器, 读写器向 RFID标签发送包含 随机数的读取唯一识别码 ID命令, 该方法还包括:
RFID标签根据随机数及预置的加密算法对 ID进行加密, 发送给读写 器, 读写器获取 ID。
上述方案中, 所述 RFID标签根据随机数及预置的加密算法对 ID进行 加密包括: RFID标签根据预置的加密算法对随机数进行加密, 成为密钥, 然后根据预置的加密算法及密钥对 ID进行加密;或者,将随机数作为密钥, 根据预置的加密算法及随机数对 ID进行加密。
上述方案中, 所述读写器获取 ID包括: 读写器接收加密后的 ID, 根据 预置的加密算法对随机数进行加密, 成为密钥, 然后根据预置的加密算法 及密钥对加密后的 ID进行解密; 或者, 将随机数作为密钥, 根据预置的加 密算法及随机数对加密后的 ID进行解密。
上述方案中, 所述读写器获取 ID之后, 该方法进一步包括: 读写器向 RFID标签发送包含 ID的读取数据命令, RFID标签确定接收的 ID与自身 ID相符, 根据预置的加密算法对数据进行加密, 发送给读写器, 读写器根 据预置的加密算法对数据进行解密。
上述方案中, 所述读写器获取 ID之后, 该方法进一步包括: 读写器将 要写入 RFID标签的数据根据预置的加密算法进行加密,获取加密的写入数 据, 向 RFID标签发送包含 ID、 加密的写入数据的写入数据命令, RFID标 签接收所述写入数据命令, 确定接收的 ID与自身 ID相符, 根据预置的加 密算法对加密的写入数据进行解密, 获取写入数据并保存。
本发明还提供了一种 RFID标签识别的系统, 该系统包括:
读写器, 用于向 RFID标签发送标签清点命令, 接收 RFID标签发送的
随机数, 根据随机数向 RFID标签发送读取 ID命令, 获取 ID;
RFID标签, 用于将产生的随机数发送给读写器; 接收读取 ID命令, 根据随机数及预置的加密算法对 ID进行加密, 发送给读写器。
上述方案中, RFID标签具体包括随机数发生器、 数据处理模块; 随机 数发生器, 用于接收标签清点命令, 产生随机数, 发送给数据处理模块, 数据处理模块, 用于接收包含随机数的读取 ID命令, 确定接收的随机数同 随机数发生器产生的随机数相符, 根据预置的加密算法将随机数加密成密 钥, 根据预置的加密算法及密钥将 ID加密; 或者, 将随机数作为密钥, 根 据预置的加密算法及随机数, 将 ID加密, 将加密后的 ID发送给读写器。
上述方案中, 读写器具体用于, 接收加密后的 ID , 根据预置的加密算 法将随机数加密成密钥, 根据预置的加密算法及密钥对加密后的 ID进行解 密; 或者, 将随机数作为密钥, 根据预置的加密算法及随机数, 将加密后 的 ID进行解密。
上述方案中, 读写器进一步用于, 根据获取的 ID向数据处理模块发送 读取数据命令, 接收数据处理模块发送的加密后的数据, 根据预置的加密 算法对加密后的数据进行解密, 获取数据处理模块中的数据; 数据处理模 块进一步用于, 接收包含 ID的读取数据命令, 确定接收的 ID同自身 ID相 符, 则根据预置的加密算法将数据加密, 然后发送给读写器。
上述方案中, 读写器进一步用于, 将要写入数据处理模块的数据根据 预置的加密算法进行加密, 获取加密后的写入数据, 向数据处理模块发送 包含 ID、 加密后的写入数据的写入数据命令; 数据处理模块进一步用于, 接收写入数据命令, 确定接收的 ID同自身 ID相符, 则根据自身预置的加 密算法对加密后的写入数据进行解密, 获取写入数据并保存。
釆用本发明所述的方法及系统, 通过 ID识别时, 对 ID进行加密, 增 强了 ID识别的安全性; 另外, 对读写器读写 RFID标签的数据进行加密,
保证 RFID标签数据的安全传输, 有利于 RFID技术的发展。 附图说明
图 1为现有技术实现 RFID标签识别的方法流程示意图;
图 2为本发明中实现 RFID标签识别的方法流程示意图;
图 3为本发明中实现 RFID标签识别的系统组成示意图。 具体实施方式
本发明的基本思想是: 读写器清点 RFID标签, 向 RFID标签发送读取 ID命令, RFID标签对 ID进行加密发送给读写器, 读写器获取 ID。
下面通过具体实施例与附图对本发明进行详细说明。
一种 RFID标签识别的方法, 如图 2所示, 具体步骤如下:
步骤 201、 读写器清点 RFID标签, 向 RFID标签发送读取 ID命令; 读写器向 RFID标签发送标签清点命令,所述发送为读写器向其射频范 围内的所有 RFID标签广播发送; RFID标签接到标签清点命令后, 其内部 的随机数发生器产生 RN16, 同时, 将 RN16进行编码, 按照防碰撞算法发 送给读写器, 每个 RFID标签产生的 RN16均不相同, 所述编码可以是将 RN16打包成数据帧的形式, 读写器解析出 RN16, 所述解析可以是读取数 据帧中的 RN16, 所述防碰撞算法指 RFID标签按照设定的先后顺序, 向读 写器发送 RN16, 避免同时发送给读写器, 产生干扰, 使 RN16出错, 导致 读写器无法解析。
读写器向 RFID 标签广播发送读取 ID 命令, 所述读取 ID 命令包含 RN16。
步骤 202、 RFID标签对 ID进行加密, 发送给读写器;
RFID标签接收包含 RN16的读取 ID命令,将接收的 RN16同自身产生 的 RN16进行比较, 确定两者相符, 根据预置的加密算法对 ID进行加密,
然后发送给读写器。
所述根据预置的加密算法对 ID进行加密包括: RFID标签根据预置的 加密算法 A对 RN16进行计算, 获取密钥, 然后根据密钥, 通过预置的加 密算法 B对 ID进行加密, 获取加密密文, 即加密后的 ID, 或者, 直接以 RN16作为密钥,通过预置的加密算法 B对 ID进行加密,获取加密后的 ID, 所述预置的加密算法 A及预置的加密算法 B可以相同也可以不同, 可根据 需要釆用现有技术中的加密算法, 所述预置可以是预先设定加密算法的运 算规则,根据运算规则进行加密。 以加密算法 A为安全散列算法( SHA-1 ), 加密算法 B为数据加密标准( DES )算法为例, RFID标签首先根据 SHA-1 算法对 RN16进行散列, 得到密钥 k, 或者直接以 RN16作为密钥 k; 然后 根据 DES算法对 ID进行加密, C= Ek(ID), 其中 E为 DES标准算法, k为 密钥, C为对 ID进行加密后的密文。
步骤 203、 读写器接收加密后的 ID并解密, 获取 ID。
读写器接收加密后的 ID, 根据 RN16及预置的加密算法 A, 获取密钥, 然后根据密钥及预置的加密算法 B对加密后的 ID进行解密, 或者直接以 RN16作为密钥, 根据预置的加密算法 B对 ID进行解密, 获取 ID。 假设加 密算法 A为 SHA-1 , 加密算法 B为 DES算法, 读写器根据 SHA-1算法对 接收的 RN16进行散列, 得到密钥 k, 或者直接以 RN16作为密钥 k; 然后 根据 DES算法对接收到的密文 C进行解密, ID=Dk(C), 其中 D为 DES标 准解密算法, k为密钥, C为加密后的密文。
读写器可根据获取的 ID对 RFID标签中的数据进行读写。 所述读写包 括: 读写器向 RFID标签发送读取数据命令, 所述读取数据命令中包括 ID, RFID标签接收包含 ID的读取数据命令,同自身的 ID比较,确定两者相同, 则将 RFID的数据根据预置的加密算法加密后发送给读写器,读写器接收加 密后的数据,根据预置的加密算法进行解密; 或者读写器将要写入 RFID标
签的数据根据预置的加密算法加密, 读写器向 RFID 标签发送写入数据命 令, 所述写入数据命令中包含加密后的数据、 ID , RFID标签接收写入数据 命令, 将接收的 ID同自身的 ID比较, 确定两者相同, 将加密后的数据根 据预置的加密算法进行解密后保存。
本发明还提供了一种 RFID标签识别的系统,如图 3所示,该系统包括:
RFID标签 301、 读写器 302;
RFID标签 301 ,用于接收读写器 302发送的标签清点命令,产生 RN16 发送给读写器 302; 接收读写器 302发送的读取 ID命令, 根据 RN16及预 置的加密算法对 ID进行加密, 发送给读写器 302;
读写器 302, 用于向 RFID标签 301发送标签清点命令, 接收 RFID标 签 301发送的 RN16;根据 RN16向 RFID标签 301发送读取 ID命令,获取 ID。
读写器 302获取 ID , 具体为: 接收加密后的 ID, 根据 RN16及预置的 加密算法将接收的加密后的 ID进行解密, 获取 ID。
RFID标签 301具体包括: 随机数发生器 3011、 数据处理模块 3012; 随机数发生器 3011 , 用于接收读写器 302发送的标签清点命令, 产生 RN16发送给数据处理模块 3012;
数据处理模块 3012, 用于将标签清点命令发送给随机数发生器 3011 , 将随机数发生器 3011产生的 RN16进行编码后发送给读写器 302; 所述编 码可以是将 RN16打包成数据帧的格式;
相应的, 读写器 302具体用于, 解析出 RN16, 所述解析包括读取数据 帧中的 RN16。
数据处理模块 3012还用于, 接收读取 ID命令, 所述读取 ID命令中包 含 RN16,将接收的 RN16同随机数发生器 3011产生的 RN16比较,确定两 者相同, 根据预置的加密算法 A对 RN16进行加密成为密钥, 然后根据预
置的加密算法 B, 通过密钥对 ID进行加密, 或者, 直接将 RN16作为密钥, 然后根据预置的加密算法 B对 ID进行加密, 所述预置的加密算法 A及加 密算法 B可以相同也可以不同, 可根据需要预置现有技术中的加密算法, 例如 3DES算法。
读写器 302具体用于, 接收加密后的 ID, 根据预置的加密算法 A对
RN16进行加密成为密钥, 然后 4艮据预置的加密算法 B, 通过密钥对加密后 的 ID进行解密, 或者, 以 RN16作为密钥, 根据预置的加密算法 B对加密 后的 ID进行解密。
读写器 302进一步用于, 向数据处理模块 3012发送读取数据命令, 接 收数据处理模块 3012发送的加密后的数据, 并根据预置的加密算法进行解 密; 所述读取数据命令中包含 ID;
数据处理模块 3012进一步用于, 接收包含 ID的读取数据命令, 将 ID 同自身的 ID比较, 确定两者相符, 将数据根据预置的加密算法加密后发送 给读写器 302。
读写器 302进一步用于, 将要写入数据处理模块 3012的数据根据预置 的加密算法加密, 获取加密后的写入数据, 向数据处理模块 3012发送写入 数据命令, 所述写入数据命令中包含 ID、 加密后的写入数据;
数据处理模块 3012进一步用于, 接收写入数据命令, 将接收的 ID同 自身的 ID比较, 确定两者相符, 将加密后的写入数据根据预置的加密算法 进行解密并保存。
以上所述, 仅为本发明的较佳实施例而已, 并非用于限定本发明的保 护范围, 凡在本发明的精神和原则之内所作的任何修改、 等同替换和改进 等, 均应包含在本发明的保护范围之内。
Claims
1、一种射频识别 RFID标签识别的方法,读写器清点 RFID标签, RFID 标签产生随机数发送给读写器,读写器向 RFID标签发送包含随机数的读取 唯一识别码 ID命令, 其特征在于, 该方法还包括:
RFID标签根据随机数及预置的加密算法对 ID进行加密, 发送给读写 器, 读写器获取 ID。
2、 根据权利要求 1所述的方法, 其特征在于, 所述 RFID标签根据随 机数及预置的加密算法对 ID进行加密包括:
RFID标签根据预置的加密算法对随机数进行加密, 成为密钥, 然后根 据预置的加密算法及密钥对 ID进行加密; 或者
将随机数作为密钥, 根据预置的加密算法及随机数对 ID进行加密。
3、 根据权利要求 2所述的方法, 其特征在于, 所述读写器获取 ID包 括:
读写器接收加密后的 ID , 根据预置的加密算法对随机数进行加密, 成 为密钥, 然后根据预置的加密算法及密钥对加密后的 ID进行解密; 或者 将随机数作为密钥, 根据预置的加密算法及随机数对加密后的 ID进行 解密。
4、 根据权利要求 1至 3任一项所述的方法, 其特征在于, 所述读写器 获取 ID之后, 该方法进一步包括:
读写器向 RFID标签发送包含 ID的读取数据命令, RFID标签确定接收 的 ID与自身 ID相符, 根据预置的加密算法对数据进行加密, 发送给读写 器, 读写器根据预置的加密算法对数据进行解密。
5、 根据权利要求 1至 3任一项所述的方法, 其特征在于, 所述读写器 获取 ID之后, 该方法进一步包括:
读写器将要写入 RFID标签的数据根据预置的加密算法进行加密,获取 加密的写入数据, 向 RFID标签发送包含 ID、 加密的写入数据的写入数据 命令, RFID标签接收所述写入数据命令, 确定接收的 ID与自身 ID相符, 根据预置的加密算法对加密的写入数据进行解密, 获取写入数据并保存。
6、 一种 RFID标签识别的系统, 其特征在于, 该系统包括:
读写器, 用于向 RFID标签发送标签清点命令, 接收 RFID标签发送的 随机数, 根据随机数向 RFID标签发送读取 ID命令, 获取 ID;
RFID标签, 用于将产生的随机数发送给读写器; 接收读取 ID命令, 根据随机数及预置的加密算法对 ID进行加密, 发送给读写器。
7、 根据权利要求 6所述的系统, RFID标签具体包括随机数发生器、 数据处理模块;
随机数发生器, 用于接收标签清点命令, 产生随机数, 发送给数据处 理模块, 其特征在于,
数据处理模块, 用于接收包含随机数的读取 ID命令, 确定接收的随机 数同随机数发生器产生的随机数相符, 根据预置的加密算法将随机数加密 成密钥,根据预置的加密算法及密钥将 ID加密; 或者,将随机数作为密钥, 根据预置的加密算法及随机数, 将 ID加密, 将加密后的 ID发送给读写器。
8、 根据权利要求 7所述的系统, 其特征在于,
读写器具体用于, 接收加密后的 ID, 根据预置的加密算法将随机数加 密成密钥, 根据预置的加密算法及密钥对加密后的 ID进行解密; 或者, 将 随机数作为密钥,根据预置的加密算法及随机数,将加密后的 ID进行解密。
9、 根据权利要求 7或 8所述的系统, 其特征在于,
读写器进一步用于,根据获取的 ID向数据处理模块发送读取数据命令, 接收数据处理模块发送的加密后的数据, 根据预置的加密算法对加密后的 数据进行解密, 获取数据处理模块中的数据;
数据处理模块进一步用于, 接收包含 ID的读取数据命令, 确定接收的 ID同自身 ID相符,则根据预置的加密算法将数据加密,然后发送给读写器。
10、 根据权利要求 7或 8所述的系统, 其特征在于,
读写器进一步用于, 将要写入数据处理模块的数据根据预置的加密算 法进行加密, 获取加密后的写入数据, 向数据处理模块发送包含 ID、 加密 后的写入数据的写入数据命令;
数据处理模块进一步用于, 接收写入数据命令, 确定接收的 ID同自身
ID相符, 则根据自身预置的加密算法对加密后的写入数据进行解密, 获取 写入数据并保存。
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201010255022.4 | 2010-08-12 | ||
CN2010102550224A CN102375960A (zh) | 2010-08-12 | 2010-08-12 | 一种射频识别标签识别的方法及系统 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2012019397A1 true WO2012019397A1 (zh) | 2012-02-16 |
Family
ID=45567305
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2010/079018 WO2012019397A1 (zh) | 2010-08-12 | 2010-11-23 | 一种射频识别标签识别的方法及系统 |
Country Status (2)
Country | Link |
---|---|
CN (1) | CN102375960A (zh) |
WO (1) | WO2012019397A1 (zh) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106599982A (zh) * | 2016-10-17 | 2017-04-26 | 关卡系统股份有限公司 | 动态计数方法和设备 |
US11213773B2 (en) | 2017-03-06 | 2022-01-04 | Cummins Filtration Ip, Inc. | Genuine filter recognition with filter monitoring system |
Families Citing this family (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102324110A (zh) * | 2011-09-01 | 2012-01-18 | 苏州元澄智能科技有限公司 | 基于rfid技术的实名制票务系统 |
CN103065168B (zh) * | 2012-12-19 | 2016-05-11 | 深圳市江波龙电子有限公司 | 一种电子标签防伪方法及系统 |
CN103093172B (zh) * | 2013-02-04 | 2016-05-18 | 快车科技有限公司 | 一种标签阅读设备及标签识别系统 |
CN103455927A (zh) * | 2013-09-29 | 2013-12-18 | 苏州大学 | 基于rfid的紫砂壶防伪识别系统 |
CN108899076A (zh) * | 2018-06-12 | 2018-11-27 | 涓ユ不 | 一种医疗质控信息化系统及其控制方法 |
CN110232296B (zh) * | 2019-04-25 | 2020-06-30 | 苏州车付通信息科技有限公司 | Rfid标签与读写器加密通讯的系统 |
CN111601308B (zh) * | 2020-05-19 | 2023-08-08 | 南方电网数字电网科技(广东)有限公司 | 标签芯片的认证系统、方法、标签芯片及存储介质 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1734463A (zh) * | 2004-08-12 | 2006-02-15 | 株式会社Ntt都科摩 | 信息提供方法、信息提供系统以及中继装置 |
CN101008978A (zh) * | 2005-11-08 | 2007-08-01 | 萨热姆防务安全公司 | 射频标签识别 |
CN101488854A (zh) * | 2008-01-18 | 2009-07-22 | 华为技术有限公司 | 一种无线射频识别系统认证方法和设备 |
US20100011212A1 (en) * | 2008-07-11 | 2010-01-14 | Theodoros Anemikos | Radio frequency identification (rfid) based authentication methodology using standard and private frequency rfid tags |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2006131861A1 (en) * | 2005-06-07 | 2006-12-14 | Nxp B.V. | Method and device for increased rfid transmission security |
CN100461202C (zh) * | 2006-11-07 | 2009-02-11 | 中兴通讯股份有限公司 | EPC Gen2标准中标签清点流程的改进方法及装置 |
KR100817222B1 (ko) * | 2007-02-28 | 2008-03-27 | 롯데정보통신 주식회사 | 전자 상품 코드를 암호화/복호화하는 방법 및 이를 이용한rfid 시스템 |
-
2010
- 2010-08-12 CN CN2010102550224A patent/CN102375960A/zh active Pending
- 2010-11-23 WO PCT/CN2010/079018 patent/WO2012019397A1/zh active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1734463A (zh) * | 2004-08-12 | 2006-02-15 | 株式会社Ntt都科摩 | 信息提供方法、信息提供系统以及中继装置 |
CN101008978A (zh) * | 2005-11-08 | 2007-08-01 | 萨热姆防务安全公司 | 射频标签识别 |
CN101488854A (zh) * | 2008-01-18 | 2009-07-22 | 华为技术有限公司 | 一种无线射频识别系统认证方法和设备 |
US20100011212A1 (en) * | 2008-07-11 | 2010-01-14 | Theodoros Anemikos | Radio frequency identification (rfid) based authentication methodology using standard and private frequency rfid tags |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106599982A (zh) * | 2016-10-17 | 2017-04-26 | 关卡系统股份有限公司 | 动态计数方法和设备 |
US11213773B2 (en) | 2017-03-06 | 2022-01-04 | Cummins Filtration Ip, Inc. | Genuine filter recognition with filter monitoring system |
Also Published As
Publication number | Publication date |
---|---|
CN102375960A (zh) | 2012-03-14 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2012019397A1 (zh) | 一种射频识别标签识别的方法及系统 | |
EP3698535B1 (en) | Privacy preserving tag | |
JP6169802B2 (ja) | Uhf帯電子タグ識別番号が隠されたセキュリティ認証方法 | |
US8947211B2 (en) | Communication data protection method based on symmetric key encryption in RFID system, and apparatus for enabling the method | |
CN101194274B (zh) | 用于增强的rfid传输安全性的方法和装置 | |
CN102882683B (zh) | 一种可同步的rfid安全认证方法 | |
US20110041046A1 (en) | Apparatus and method for protecting rfid data | |
US20090153290A1 (en) | Secure interface for access control systems | |
CN103279775B (zh) | 能够保证秘密性和数据完整性的rfid系统及其实现方法 | |
KR100723868B1 (ko) | Epc c1g2 rfid 시스템에서 태그와 판독장치간의 상호 인증 방법 | |
CN103902402A (zh) | 射频标签安全芯片设备及其数据处理方法 | |
CN102479334A (zh) | 一种射频识别标签识别的方法 | |
KR100817222B1 (ko) | 전자 상품 코드를 암호화/복호화하는 방법 및 이를 이용한rfid 시스템 | |
KR20100031354A (ko) | Otp를 이용한 태그 보안 처리 방법 | |
CN104700125A (zh) | 超高频射频识别系统的aes加密和验证 | |
Lin et al. | Nonidentifiable RFID privacy protection with ownership transfer | |
US10511946B2 (en) | Dynamic secure messaging | |
CN103077414A (zh) | 高可信度无源uhf的rfid电子标签读写器及读写控制方法 | |
CN111448815A (zh) | 安全rfid标签识别 | |
CN109889492A (zh) | 一种安全性较高的金融ic卡和二代身份证二合一识别通信方法 | |
CN101887503B (zh) | 种子流通监管系统及其认证方法 | |
KR20090037219A (ko) | 단계별로 보안 수준 조절이 가능한 고주파 식별 시스템 및상기 시스템을 이용한 정보 보안 방법 | |
JP2009010596A (ja) | Rfidシステムおよび通信暗号化方法 | |
KR101215155B1 (ko) | Rfid 시스템에서 리더와 태그 사이의 통신 보안 방법 및 시스템 | |
KR101053636B1 (ko) | 다중 암호방식을 이용한 태그와 rfid리더간 인증 방법 및 시스템 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 10855818 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 10855818 Country of ref document: EP Kind code of ref document: A1 |