针对现有的RFID（ Radio Frequency Identification）认证协议存在的安全隐私保护弱点以及成本过高问题，提出一个基于PUF（ Physical Unclonable Functions）的轻量级RFID安全认证协议。利用PUF与LFSR（ Linear Feedback Shift Register）实现阅读器和标签之间强的安全认证。另外，协议中增加了阅读器二次验证安全机制，为了保证阅读器与标签共享密钥同步，添加了不良攻击标识M等手段，解决了已有认证协议存在的多种安全漏洞。安全性分析表明该认证协议不仅成本低，而且能够有效地抵抗物理攻击、DoS攻击、同步破坏攻击等多种攻击，满足了认证协议的正确性、安全性、隐私性。%In order to solve the weakness in security and privacy and the problem of high-cost which the existing RFID authentication protocol has, we propose a PUF-based lightweight RFID secure authentication protocol.We use PUF and LFSR to realise strong security authentication between reader and tag.In addition, in protocol there increases the dual-authentication security mechanism for reader, and in order to ensure the key synchronisation sharing between the reader and the tag, the malicious attacks flag M is also added, which solve a series of security vulnerabilities in existing RFID authentication protocols.Security analysis shows that this protocol is low-cost, and can also resist physical attack, DoS attack, desynchronisation attack and other attacks efficiently.Moreover, it meets the correctness, security and privacy of the authentication protocol.
展开▼
