RFID标签在其生命周期内往往要经历多个所有者。为保护标签所有权转换过程中信息的安全性,提出了一种带有转换开关的所有权转换协议。在该协议中,标签和所有者共享两个密钥,分别用于进行认证通信和所有权转换。通过设置转换开关,达到允许所有权转换和抵御去同步化攻击的目的。采用GNY逻辑对协议进行了分析,分析结果表明,该协议能提供双向认证,抵御重放攻击、中间人攻击和去同步化攻击,并能保护标签信息的前向安全和后向安全。
A RFID tag typically experiences multiple owners in its lifetime. This paper proposes an ownership transfer protocol with transfer switch to protect the information security in the ownership transfer procedure. In the protocol,tags and owners share two keys which are respectively used for mutual authentication and ownership transfer,and ownership transfer switches are set to allow ownership transfer and resist desynchronization attacks. The protocol is analyzed in GNY logic,and the result indicates that it provides mutual authentication and resists replay attacks,man-in-middle attacks and desynchronization attacks,and it also protects forward security and backward security of the tag information.