基於錯誤訂正碼之無線射頻標籤輕量化認證協定之研究

現今無線射頻辨識科技被廣泛應用於各式產品，但這項技術也引發了安全性與隱私性的疑慮。有許多使用者擔心無線射頻產品會洩漏他們的所在位置資訊或個人隱私資訊。事實上，受限於製造成本及硬體能力，大多數無線射頻產品並未提供安全保護。在2009年，Chien和Laih提出了一個基於錯誤訂正碼之認證協定，以期使無線射頻系統具有不可追蹤之特性，達到保護使用者隱私的目的。但我們發現這個協定仍然會受到惡意使用者的追蹤，並在論文中提出兩種實用的攻擊方法。我們另外提出一種基於錯誤訂正碼之認證協定，其輕量化的設計使它能實作於低成本之無線射頻產品。此協定利用錯誤訂正碼的特性，降低無線射頻讀取裝置之計算負擔。因此，我們的認證協定適用於現實生活中的無線射頻應用系統。後續分析顯示，此認證協定可以對抗常見的無線射頻系統安全性危害。

關鍵字

無線射頻；輕量化認證協定；錯誤訂正碼

並列摘要

RFID technology has become popular in many applications, but it also raised security and privacy concerns. Many people worry about the disadvantages which brought by RFID technology, such as leaking their location privacy and conﬁdentiality of private information. However, most of the RFID products lack security related functionality due to the hardware limitation of the low-cost RFID tags. In 2009, Chien and Laih proposed an RFID authentication protocol based on error correction codes (ECC) to secure the RFID systems with untraceability, which is one of the most critical privacy issues in RFID. But we found that this protocol is still vulnerable to tracing attacks, and two variant attacks are presented to break Chien’s protocol. In this thesis, we propose an ECC-based mutual uthentication protocol for RFID. Our protocol requires only lightweight operations that can be mounted on the low-cost tags. With an ECC-based ﬁltering mechanism applied, the computational load on the RFID reader can be reduced. Therefore, our protocol is appropriate for the real-world applications. Further analysis shows that the protocol is secure against the common security threats of RFID systems.

並列關鍵字

RFID ； lightweight authentication protocol ； error correcting codes

參考文獻

smart cards and identication. John Wiley & Sons Inc, 2003.

IDTechEx report, 2009.

[3] D. Ranasinghe, D. Engels, and P. Cole. Low-cost RFID systems: Confronting

seer, 2004.

[4] S. Sarma, S. Weis, and D. Engels. RFID systems and security and privacy

國際替代計量

基於錯誤訂正碼之無線射頻標籤輕量化認證協定之研究

主題瀏覽