RFID認證協定及其醫療記錄應用之研究

A study on RFID authentication protocol and its application on the medical records

王維璘(Wei-Lin Wang)

指導教授 ： 黃明祥 ； 陳永進

亞洲大學/資訊學院/資訊工程學系碩士班/碩士(2006年)

摘要

無線射頻辨識(RFID, Radio Frequency Identification)系統是目前科技界熱門的主題之一，這是因為RFID能夠應用的範圍非常的廣，不論是供應鏈、圖書館、停車場、電子收費、醫療管理、門禁管理、居家看護等等，RFID的應用可以為我們的生活帶來非常大的便利性，但是當RFID充份融入我們的生活之後其安全性及隱私的問題就開始受到重視。有學者提到在一般的電子標籤(Tag)只要接收到讀取器(Reader)的訊號就會立刻回傳ID(TagID)，因此就有學者提出一些Tag認證方式，目的在保護Tag不受到重送攻擊及竊聽威脅。
在未受保護的RFID系統中是使用非常直接的通訊方式來取得TagID，也就是Reader提出一次要求Tag送出TagID的訊息，Tag就回送一次TagID如此一直重覆，這樣子的設計是一個普通的RFID系統所使用的方法，線路設計是最單純的、每秒所能夠讀取Tag數量將會是最多的、而且Tag的成本最低。
相對的一個受到保護的RFID系統，為了達到保護通訊安全必定會多了許多的加密計算過程以及交握次數，因此一個受保護的RFID系統必需盡可能的提高每秒讀取Tag的數量、並盡可能的降低Tag成本以及兼顧安全性等要求。
在本論文中將提出一個高效率、低成本並兼顧安全性的RFID通訊方式。

關鍵字：無線射頻辨識系統、認證協定、資訊安全、隱私安全

關鍵字

無線射頻辨識系統 ； 隱私安全 ； 認證協定 ； 資訊安全

並列摘要

RFID (Radio Frequency Identification) is one of the most promising NFC (Near Field Communication) communication technologies for ubiquitous network societies in recent year as RFID tag not only features identification、renewable and reusable but also high security that has been increasing its applications in the markets, including supply chain、retail、transportation、security、electronic toll system、library management system and healthcare. Our daily life would therefore be more convenient due to such applications mentioned early on. However, security and privacy will be an issue while RFID has become part of our daily life. Researchers have put out a warning about it as RFID tag would instantly callback ID once RFID tag received a signal from any RFID Reader. They have therefore proposed some authentication protocols to protect RFID tags from being eavesdropped and replaying attacked. The most straight way of reading RFID tag ID for a general unprotected RFID system is to ask tags recall ID immediately. This kind of tags design would be simpler, the number of tags read per second would be larger and its costs would be lower. On the other hand, RFID tags with the protection of authentication protocol design would be more complex, smaller number tags read per second and higher costs as a result. In this thesis, we propose a new way of authentication protocol in comparison with the others related to the efficiency and security.

Keyword : RFID, authentication, protocol, security, private

並列關鍵字

RFID ； security ； private ； authentication ； protocol

參考文獻

[6] S. A. Weis, E. S. Sarma, R. L. Rivest, and D.W. Engels, “Security and Privacy Aspects of Low-Cost RadioFrequency Identification Systems”, Security in PervasiveComputing, 2003.

[7] M. Feldhofer, “An authentication protocol in a security layer for RFID smart tags”, Proceedings of IEEE MELECON, Vo. 2, P. 759 – 762, 2004

[9] Gwo-Ching Chang,” A Feasible Security Mechanism for Low Cost RFID Tags” , Mobile Business, 2005. ICMB 2005. International Conference on11-13 July 2005 Page(s):675 – 677.

[13] Damith C. Ranasinghe, Daniel W. Engels, Peter H. Cole, “Security and Privacy: Modest Proposals for Low- Cost RFID Systems”

[14] Ari. Juels, “Privacy and Authentication in Low-Cost RFID Tags”, submission 2003.