中文摘要：

近场无线通信（NFC）是一种已经被广泛应用的短距无线通信技术。其中最常见的是将NFC技术应用于移动支付和门禁访问控制等应用。从技术上讲,这些应用利用NFC模拟卡模式将NFC设备模拟成银行卡或门禁卡,然后等待外部阅读器验证。在这类应用场景下,选取合适的安全认证方案是非常重要的。首先,介绍了现有的NFC认证系统和安全方案并分析了系统安全需求和潜在的安全风险。然后,采用Hash、AES和口令Key动态更新机制,提出了一种适用于NFC移动设备的双向认证安全方案,并设计了自同步机制。最后,利用GNY逻辑以形式化证明的形式证明了方案的安全性,分析表明该方案能解决伪造、重放攻击、窃听、篡改、异步攻击等安全问题。

英文摘要：

Near field communication（NFC） is a kind of short-range wireless communication technology which has been applied around the world. The applications of mobile payments and access control are the most common applications of NFC technology. Technically, the NFC device can be used as a bank card or an entrance card with the help of the card emulation mode of NFC, which will be validated by external reader. It is very essential to select a appropriate and safe certification scheme in this scenario. First of all, the existing NFC authentication system and security scheme was introduced and the system security requirements and potential security risks were analyzed. Then, by using Hash, AES and password Key dynamic updating mechanism, a mutual authentication security scheme for mobile NFC devices was proposed, and the synchronization mechanism was designd. Finally, GNY logic was used to prove the security correctness of our proposed scheme. The security analysis shows that our scheme can avoid a number of attacks, such as forgery, replay attack, eavesdropping, tampering attack, asynchronous attack and so on.