基于 HMAC 的轻量级 RFID 认证协议

摘要

Radio Frequency Identification (RFID),as a non -contact automatic identification technology,has wide application prospect in many fields such as logistics of IOT,transportation,retail, etc.As the RFID system is vulnerable by various malicious attacks and RFID tag has low calculation and small storage,a HMAC -based RFID lightweight authentication protocol is proposed in this paper.The new protocol has advantages of using the Hash function and XOR operation to efficiently utilize calculation ability and storage space of reader and reducing the demand to the calculation and storage of tag.The security and performance analysis show that the new protocol can defend some malicious attacks,such as spoofing attack,replay attack,tracking,etc.The formalized security analysis,based on BAN logic, shows that the improved protocol is secure and is suitable for low -cost RFID system.%针对无线射频识别（Radio Frequency Identification，RFID）系统容易受到各种恶意攻击，且 RFID 标签的计算能力有限和存储空间小等问题，提出一个基于 HMAC 的轻量级 RFID 认证协议。新协议的主要优点是仅使用哈希函数和异或操作，有效利用读写器的计算能力和存储空间，并达到降低标签的计算能力和存储空间的需求。安全性和性能分析表明，新的协议可以抵抗一些恶意攻击，如假冒攻击、重传攻击，跟踪等；基于 BAN 逻辑给出了形式化的安全性分析，说明新协议在 BAN 逻辑分析下是安全的，更适用于低成本 RFID 系统。