Kardas等人提出的轻量级无线射频识别(RFID)认证协议(2011年LightSec会议论文集)若遭遇侧信道分析、物理刺探等攻击会导致密钥泄漏,从而使整个协议认证失败.为此,通过将四步认证改为三步认证、引入密钥恢复机制以及改进密钥的使用方式,使协议效率提高,并且便于在多标签环境中扩展.理论分析结果表明,新协议可以防止读写器与标签之间产生异步,抵抗伪造攻击、重放攻击、消息阻塞攻击、中间人攻击,与原方案相比,认证效率更高.%Kulseng et al's lightweight Radio Frequency Identification(RFID) authentication protocol has secret loophole that it may cause key leakage if the protocol is attacked by side channel analysis, which leads authentication failure. This paper modifies four-step authentication to three-step authentication, introduces key recovery mechanism and improves usage of key, so that the protocol has higher efficiency, and it is convenient to expend in multi-tag environment. Theory analysis result shows that the new protocol can prevent various attacks, and it is more efficient compared with the original protocol.
展开▼
