中文摘要：

针对射频识别（RFID）系统在计算与存储资源有限情况下的特殊需求，提出一种基于公钥密码体制NTRU的轻权认证协议。在该协议中，标签和读写器均完成一次随机数生成操作，且仅在服务器端存储一个密钥对，各个RFID标签采用公钥进行消息加密并发送给读写器和服务器，服务器通过存储在本地的私钥进行解密，在标签端仅存储服务器的公钥，以确保认证过程中信息的保密传输和隐私性，实现标签与读写器间的相互认证。通过分析证实，该协议能够抵抗窃听、位置追踪、重放、反向跟踪等攻击，而且标签仅需提供轻权加密和随机数生成操作，该认证协议非常适合应用于低成本的RFID系统。

英文摘要：

According to the special situations that an Radio Frequency Identification（RFID） system only has very limited computing and memory resources, this paper proposes a lightweight mutual authentication protocol based on Number Theory Research Unit（NTRU）. In this protocol, readers and tags perform random number generating operations. The server stores a key pair, while tags only store a public key. Tags encrypt messages uses the public key, and then sends them to readers or the server. The server decrypts messages using private key. The protocol ensures the security and privacy of the RFID system and completes the mutual authentication between readers and tags. Analysis result shows that the proposed protocol can prevent replay attack, tracing, eavesdropping and backward traceability effectively. The protocol only needs the lightweight encryption and pseudorandom operations for tags. It is very suitable to the low-cost RFID system.