A DESIGN OF PRIVACY PROTECTION AND SELF-CERTIFICATION PROTOCOL FOR RFID

RFID的隱私保護和自我認證協議設計

林紹胤(Hardy Lin) ； 蘇品長(Pin-Chang Su) ； 張克章(Henry Ker-Chang Chang) ； 劉安達(An-Ta Liu)

《致理學報》 38期 (2018/11) Pp. 1-30

摘要

The RFID application in E-commerce has become increasingly mature according to the development of E-commerce is rapid growing. However, the development of E-commerce depends on the security of transactions, and the RFID tags contain the characteristics of real-time tracking and remote batch processing that can improve integral efficiency of E-business; the RFID tags can also determine the authenticity of merchandise via unique identification, however its security during the transaction remains a concern to the public. Many mechanisms of RFID authentication based on cryptography theory proposed in recent years still cannot solve the transmission problem of high performance despite of some improvement achieved. Hence, this research presents a self-certification mechanism of RFID with privacy right protection by using XOR (exclusive OR) operation and hash function that achieves anti-tracking from various attacks, and it not only promotes the safety protection but also improve the operation efficiency. There are two advantages: (1) the proposed mechanism can avoid the database tracking and increase in security; (2) the high communicational ability can operate with a weak computational device with small memory size for a passive tag.

關鍵字

RFID ； E-commerce ； Privacy Right ； Self-certification

並列摘要

隨著電子商務的發展，電子商務中的RFID應用越來越成熟。但是，電子商務的發展取決於交易的安全性，RFID標籤含實際追踪和遠程批次處理的特點，可以提高電子商務的整體效率；RFID標籤還可以通過獨特的識別來確定商品的真實性，但是在交易過程中的安全性仍然是大家所關注的問題。儘管有一些改進，近年來提出的基於加密理論的RFID認證的許多機制仍然無法解決高性能的傳輸問題。因此，本研究通過採用互斥或閘（異或）運算和雜湊函式提出具有隱私權保護的RFID自身認證機制，實現各種攻擊的反跟踪，不僅提升安全性，而且提高運營效率。本演算法具有兩個優點：（1）提出的機制可以避免數據庫追踪和安全性增加；（2）高通信能力可以用簡單的計算設備操作，具有小的記憶體空間用於被動標籤。

並列關鍵字

RFID ； 電子商務 ； 隱私權 ； 自我認證