一种基于二次剩余的改进的RFID认证协议

摘要

针对现有基于二次剩余的无线射频识别(RFID)认证协议在安全和成本方面的漏洞与不足,设计了一种基于二次剩余的改进的RFID双向认证协议.改进的协议在基础二次剩余算法框架下,混入随机数加密,使消息在数据库认证识别时更为高效快速;引入超轻量级位替换运算和异或运算加密通信信息,降低系统计算成本;加入数据库端随机数查重校验机制,避免协议遭受去同步化和拒绝服务等攻击行为;最后,给出协议的GNY逻辑证明,表明改进协议的可行性.通过分析协议安全性和性能,表明改进协议具有较高安全性和较低成本.%In view of the existing radio frequency identification(RFID) authentication protocol based on quadratic residue in the security and cost aspects of the loopholes and deficiencies,an improved RFID bidirectional authentication protocol based on the quadratic residue was designed.The improved protocol was mixed with random number encryption under the framework of the quadratic residue,which makes the message certification and identification more efficient and fast in database authentication and identification;the ultra-lightweight bit replacement operations and XOR encryption communication information was introduced,which reduces the cost of system computing;in database,the random number checking mechanism was added to avoid attacks such as agreement to be synchronized and denial of service attacks;finally,the GNY logical proof of the protocol was given,which shows the feasibility of the improved protocol.The protocol security and performance analysis indicate that the improved protocol has higher security and lower cost.