物联网RFID系统隐私保护三方认证协议

设计一种适用于物联网射频识别(radio frequency identification,RFID)系统被动式低成本标签的隐私保护认证协议.采用对称加密算法、Hash函数及随机数相结合的方式,实现标签、阅读器与后台数据库三方认证,并在认证过程中建立会话密钥,防止标签携带者被非法阅读器访问及秘密追踪.GNY逻辑对协议分析证明了协议的安全性及可达到的认证目的.与He等人的AKAP和Chen等人提出的协议相比,该协议在标签计算量、通信次数及实现功能方面具有一定的综合优势.

A privacy preserving three-party authentication protocol for RFID systems in the internet of things

For radio frequency identification(RFID) systems in the Internet of things,a privacy preserving authentication protocol was designed using passive low-cost tags.In this proposed protocol,the authentication between the tag,reader and backend database is implemented through a symmetric cryptosystem,a hash function,and a random number generator.It is also compliant with a shared session key between the reader and the tag.Furthermore,it protects legal tags from illegal access and clandestine tracking.The security of the protocol is proved by GNY logic formal analysis.This protocol has more advantages for computing,communication and functions compared with AKAP and the protocol proposed by Chen.