藍芽結合NFC於門禁通行控管之安全評量

SECURITY EVALUATION AND ACCESS CONTROL FOR ENTRANCE ON BLUETOOTH WITH NFC

洪政義(Hung Cheng Yi)

指導教授 ： 蔡佳勝

大同大學/電機資訊學院/資訊工程學系所/碩士(2010年)

摘要

實體鑰匙是每人生活中不可或缺的一環。是一套認證系統並且也已運用在連續改善方案上，其中包括，通行卡和指紋門禁讀卡機。不過，現有的實體通行控管系統並不容易操控。由於通行卡失效和分配問題複雜，所以非常耗時且極不方便。此外，也可能在不經意的情況下，遺失通行卡。對於企業組織來說需要通過許多不同特定人員才能進入的大樓，每一棟皆有自己的門鎖和鑰匙，所以，在恰當的時機，將鑰匙交接於適合的保管者，實為不易，且交接過程亦為繁雜，況且一個人身上攜帶一大把鑰匙除了不恰當外，還會有遭竊和遺失的可能。
本研究提出一套手機專用的通行控管系統並設計一款可以取代通行特定大樓實體鑰匙之解決方案。與藍芽手機相容之數位鑰匙解決方案，可以提供手動和自動的解鎖功能。在通行控管具備了簡便的獨立上鎖裝置後，該款設計讓使用者易於分配鑰匙。
這個系統支援了嚴密過濾的通行授權，遠端密鑰分送以及通行權和撤銷權的分派管理。此外，此系統在低供電條件下，以遠端方式進行定位鎖定通行管理。透過藍芽呈現了全自動搜尋和連線建構的解決方案。再者，呈現了一個簡單且安全的鑑別和通行控制協定，這樣作可讓每隻手機以單一的身份憑證與數位金鑰，解開多種不同的鎖。透過模擬評估和程式之應用，提出藍芽啟動NFC的構想和模擬的建構外，以便作為日後的參考依據。

關鍵字

藍芽 ； NFC ； 門禁管控

並列摘要

Physical keys are a basic part of everybody's daily life. It is a proved system and has been subjected to continuous improvements, including access cards and door readers of fingerprint. However, existing physical access control systems are not that easy to control. The distribution and the invalidation of access cards are complicated, time consuming and not very convenient. Loosing an access card can occur without quickly noticed. For organizations where access to many different private buildings, each with its own lock and key, the circulation of keys to the right person at the right time is a complex and costly process. Furthermore, carrying a large number of keys is not practical and the possibility of keys getting stolen or lost increases.
Our goal is to propose a mobile phone based access control system and design a solution that can replace physical keys for accessing private buildings. We propose a solution using digital keys on Bluetooth-enabled mobile phones providing manual and automatic unlocking. The design allows easy distribution of keys to users, with access control imposed by easily installable autonomous lock devices.
This system supports fine-filtered access rights, remote distribution, and decentralized administration of access rights and revocation. Additionally, the system manages access to remotely located locks with low power supply and temporary communication abilities. We present a solution for fully automatic discovery and connection establishment using Bluetooth. Moreover we present a simple and secure authentication and access control protocol, allowing each mobile phone to unlock multiple different locks using a single identity certificate and public unencrypted digital keys. We build a prototype application, measure the exact energy consumption and time usage of the application. In addition to all obvious advantages of this system, it is at least as secure as all existing physical access control solutions。

並列關鍵字

Bluetooth ； NFC

參考文獻

[2] Harold F. Tipton, Micki Krause. Information Security Management Handbook. 2004 by CRC Press

[3] Michael Miller. Discovering Bluetooth. 2001 SYBEX Inc.

[5] Smart Card Alliance. Contactless technology for secure physical access:

[6] Ross Anderson. Security Engineering. Wiley Computer Publishing, 2001.

[10] Peter Guttmann. Encryption and security tutorial, 2003. URL