安全且快速的RFID雙向認證協定

Abstract

RFID是一種非接觸式的自動識別技術，具有快速且無方向性要求的辨識能力，應用層面相當廣泛，被視為未來社會中的基礎建設之一。但是，因為RFID標籤先天上硬體資源的限制，使得RFID仍然存在著許多安全問題，例如: 隱私問題、竊聽、標籤複製、標籤追蹤等。因此，許多的研究相繼提出各種方法，試圖解決RFID的安全問題，而RFID認證協定即為其中一種。 RFID認證協定的作法是讓讀取器和標籤在進行存取之前，雙方皆必須檢驗對方的身分，只有當雙方的身分皆為合法時，讀取器和標籤之間才能夠做進一步的存取動作，藉此方法來確保RFID應用的安全。目前的RFID認證協定常見的問題有安全性不足、標籤運算負擔過重和後端伺服器查詢標籤時間過長等，使得RFID認證協定無法有效的解決RFID的安全問題。 因此，本論文將提出兩個RFID認證協定，針對上述常見的RFID認證協定問題做出改善，確保RFID的安全。經由分析與比較的結果，證實本論文所提出的兩個RFID認證協定，不僅具有足夠的安全性，可以抵抗多種RFID攻擊，在效能方面，不但降低標籤的運算負擔，且大幅的減少後端伺服器查詢標籤所需的時間。

Radio Frequency Identification (RFID) is a non-contact sensor network technology to automate identification. RFID systems had been applied to many fields and have been considered as a key infrastructure for the ubiquitous society in the future. However, because RFID tag on the inherent limitations of hardware resources, RFID has various security threats like privacy problem, eavesdropping, tag cloning, tag tracing, etc. To address these problems, lots of solutions had been proposed. RFID authentication protocol is one kind of these solutions. The point of RFID authentication protocol is to enforce the security policy between legal RFID tags can the legal RFID readers. RFID authentication protocols provide a mutual authentication mechanism to protect RFID system. But most of them have some drawbacks. These problems include the security not strong enough to resist various RFID attacks, the computation overhead of RFID tag is too high, and the back-end server spends too much time for searching RFID tag data, and etc. In this thesis, we proposed two RFID authentication protocols to overcome these drawbacks. In our analysis, the results have demonstrated that our RFID authentication protocols can resist most common RFID attacks and are more effective than most RFID authentication protocols.