一种基于双随机数的RFID发现服务安全通信机制

摘要

REID发现服务没有得到广泛应用,相关标准也没有正式颁布,主要原因之一就是存在诸多安全问题.本文首先分析了存在的典型安全问题,并给出了相应的安全需求,例如RFID私密性保护、RFID编码授权访问、供应链节点不可追踪性、节点认证、消息正确性等.针对这些安全需求,本文提出了一种基于双随机数的RFID发现服务安全通信机制.双随机数主要用来对参与通信的双方进行节点认证和消息认证,并给出了相应的查询生成和处理转发流程及算法.本文提出的安全通信机制已经在PKU RFID3S系统中得到实现.实验结果表明,系统在实现安全需求的基础上,有较好的查询命中率和查询响应时间.%RFID discovery service is not widely used and related standard is not published, one main reason is the existence of some security issues.Typical security issues are analyzed,and related security requirements are given,i.e.RFID privacy protection, authorized RFID code access, untraceability of supply chain node,node authentication,message correctness,etc.According to these security requirements, a double random number based secure communication mechanism of RFID discovery service is proposed.Random number is used for node authentication and message authentication, and related query generating and routing algorithm are given.This mechanism is implemented in PKU RFID3S system.The simulation tests show that the system not only implements security requirements mentioned above,but also has acceptable query hit rate and query responding time.