| Radio Frequency Identification (RFID) is one of the core technologies which can open the new era of ubiquitous computing history. With the prevalence of RFID technology, RFID middleware become the pivot of RFID application system. However, one major stumbling block of using RFID technology in ubiquitous environment is the lack of security enforcement. On the other hand, mobile RFID technology has been more popular in various applications. However, the security issue also can not be ignored by everyone. One of the hot topics is how to design a solution according with the requirements oriented to mobile application.This paper takes the mobile RFID security technology as the research background. First of all, we analyse the security threat oriented to mobile application and summarize countermeasures to each threat. A RFID threat assessing framework oriented to mobile application is proposed and gives design and developing instructions to client. Then, in order to satisfy the requirements in mobile applicatio2n, we design a RFID security protocol based on dynamic identification and key management. This protocol which belongs to the ultra lightweight RFID security protocols is very suitable for mobile RFID applications. After listing the drawbacks of current access control models applied in mobile RFID application, a location-aware dynamic role based access control model is designed to effectively protect RFID system. Because of its compatibility and scalability, this model can be easily applied to current security system.At the end of this paper, we summarize the above requirement analysis and research result. A security enhanced mobile RFID middleware is proposed and implemented. We describe each component and discuss detailed implementation, especially for the security service components. Finally, we take the future market as the application scenario and apply our security solution. At last the feasibility and practicality of our solution is well proved. |
PDF Full Text Request