针对射频识别(RFID)标签所有权不能完全转移及系统安全性问题,提出一种RFID标签所有权完全转移安全协议.该协议通过引入原所有者与新所有者间交易关系及身份比对保证标签所有权转移给合法身份的新所有者,利用密钥二次同步更新保证RFID标签所有权完全转移.为了确保标签和阅读器认证不被恶意干扰,采用双向认证保证RFID系统通信安全.形式化证明及分析结果表明,该协议满足标签所有权完全转移要求,可抵御多种攻击,实际应用价值高.
As RFID ( Radio Frequency IDentification) system tag ownership cannot transfer completely and displays security problems, we propose a novel complete ownership transfer security protocol. Transaction relationship and identity comparison between the current and new owners is introduced to ensure that tag ownership is transferred to the legal new owners, and a key secondary synchronization update is used to ensure a complete ownership transfer of the RFID tag. In order to avoid malicious interference between the reader and the tag during the authenticate process, the new protocol adopts mutual authentication to protect RFID communication security. Formal proof and analysis results show that the proposed protocol not only can satisfy the requirements of complete ownership transfer, but also can defeat possible malicious attacks, which makes it more applicable.