针对目前RFID系统难以抵抗各种网络攻击,如伪造标签攻击,无抵抗嗅探能力等,并且很多无源RFID标签,存储容量和计算能力较差,这些标签都无法使用高级的加密算法,如非对称加密算法。本文分析了很多现存的主流RFID标签的认证加密协议,推出一种全新的可以抵御服务攻击的RFID双向认证协议。该认证协议是基于密钥动态更新和流密码加密方式设计的,它的健壮性、安全性、效率会更好。通过实验比较各个认证协议的安全性。实验表明,在同等条件下,比较几种协议被攻击的次数,提出的双向认证协议安全性更好。
Some existing RFID authentication protocols have some problem of being difficult to resist a variety of network attacks (e. g. , forgery tag attacks, sniffing attacks). Moreover, most of passive RFID tags have poor storage capacity and computing power, which none of these tags can use advanced encryption algorithm (e. g. , asymmetric encryption algorithm). Therefore, we present a new mutual authentication protocol for passive RFID tags that can withstand service attacks. Based on key dynamic update and stream cipher encryption scheme, the proposed protocol has better robustness, security, efficiency compared to other mainstream protocols. In order to compare the safety of various authentication protocols, we carried out the attack simulation, which compared and analyzed the number of attacks of various agreements under the same conditions. The results show that the proposed authentication protocol has better security effect and higher efficiency.