Research On Security And Privacy For Radio Frequency Identification

Radio frequency identification (RFID) is a kind of non-contact data acquisition and automatic identification technology, which is used to remotely and quickly collect data of objects and automatically identify them. Now RFID technology is gradually used in various fields of industry production and daily life, but there still exist hidden troubles in applications, which can't be ignored—the lack of security mechanism, where widespread application of RFID tag may violate user privacy. The core problem derives from the basic function of RFID tag, each tag ED can be scanned remotely by anyone, tag automatically responds to any reader and transmits its data without identification. This feature can be used to track a specific user or object remotely. Currently security of RFID has become an important factor which prevents RFID from being adopted in large scale.At first, this thesis briefly introduces the development and current status of RFID domestically and abroad, then gives an overview of constitution, classification, principles, advantages and typical applications of RFID, illustrates security and privacy problems existing in RFID system in detail, and finally evaluates and analyzes existing security and privacy protection scheme for Radio Frequency system and specifies its shortages. Based on comprehensive understanding to privacy problem faced by RFID and existing privacy protection technology, a new scheme to protect the privacy of RFID is proposed, in which a database identifier field in RFID tag was introduced based on Hash-chain method. Compared with the original hash-chain method, during the RFID tag is identified by a reader, the tag will be quickly authenticated by the new scheme whether it belongs to the database system that the reader associated or not. A further treatment is not required if the RFID tag doesn't belong to database system. The new scheme avoids DoS attack and MITM attack. In case of widespread application of RFID tag, calculation load can be reduced while RFID security is guaranteed by the new scheme.Finally, mutual authenticate between reader and tag, automatic update of tag and update of back-end database pro grammatically in VC++ environment are simulated according to schemeintroduced in this thesis.