無需TTP的RFID所有權移轉

Secure RFID Ownership Transfer without TTPs

葉慈章(Tzu-Chang Yeh) ； 戴嘉良(Jia-Liang Dai)

《明新學報》 40卷1期 (2014/02) Pp. 109-121

摘要

嵌有無線射頻辨識（Radio Frequency Identification，RFID）標籤的商品在其生命週期中可能經過多次的所有權移轉；為保護擁有者的隱私，必需讓新擁有者無法追蹤標籤過去的交易記錄，舊擁有者也無法繼續存取或追蹤標籤。部分既有的所有權移轉協定需要TTP作為可信任的第三方，實際運作上困難度較高，因此本論文以不需要TTP參與的所有權移轉協定作為主要研究對象。本論文將探討RFID所有權移轉可能遭遇的問題，分析既有的RFID所有權移轉協定，並提出無需TTP的改善協定，使RFID能更安全的使用於各種環境中。

關鍵字

安全 ； 隱私 ； 所有權移轉

並列摘要

Objects embedded with tags could be transferred to new owner many times during their life cycle. After ownership transfer, the old owner cannot access the tags anymore and the new owner cannot trace the transactions conducted by the old owner. Some existing protocols proposed in papers need the involvement of Trusted Third Parties (TTPs), which is quite difficult for practical operation. Therefore, this study will focus on RFID ownership transfer without TTPs.This paper will give demonstrations on what have caused these weaknesses during RFID ownership transfer, analyze existing RFID ownership transfer protocols, and finally proposes an improved protocol to avoid the weaknesses mentioned above. That allows consumers to enjoy the technological convenience brought by RFID.

並列關鍵字

RFID ； Security ； Privacy ； Ownership transfer

參考文獻

Cai, S.,Li, Y.,Li, T.,Deng, R. H.(2009).Attacks and improvements to an RIFD mutual authentication protocol and its extensions.Proceedings of the Second ACM Conference on Wireless Network Security.(Proceedings of the Second ACM Conference on Wireless Network Security).

Chen, Y. Y.,Tsai, M. L.,Jan, J. K.(2011).The design of RFID access control protocol using the strategy of indefinite-index and challenge-response.Computer Communications.34(3),250-256.

Chen, C. L.,Lai, Y. L.,Chen, C. C.,Deng, Y. Y.,Hwang, Y. C.(2011).RFID Ownership Transfer Authorization Systems Conforming EPCglobal Class-1 Generation-2 Standards.International Journal of Network Security.12(1),41-48.

Chien, H. Y.,Chen, C. H.(2007).Mutual authentication protocol for RFID conforming to EPC Class 1 Generation 2 standards.Computer Standards & Interfaces.29(2),254-259.

Deursen, T. V.,Mauw, S.,Radomirović, S.,Vullers, P.(2009).Secure ownership and ownership transfer in RFID systems.Proceedings of the 14th European Conference on Research in Computer Security.(Proceedings of the 14th European Conference on Research in Computer Security).