The Security Analysis Of Epcglobal Standard And Construction Of Verification System

RFID is a new technology to realize non-contact transmission between the reader and the tag, using radio frequency.It has long reading distance,high reading speed,and suitable for bad environment.Therefore its application ranges widely and plays an important role in industrial production and military.Because RFID technology is so important in the practical application,the study of its security cannot be ignored.At home and abroad for RFID security research is aimed at the front part to communicate with the hardware, for example, the security certification ability is weak; the wireless communication between reader and tag is open and easily eavesdropped by a third party;the password of the label is so simple and easy to be cracked,etc. At the same time many suggestions on security are put forward.This paper mainly analyzes and researches the safety of the EPCglobal standard proposed by EPCglobal organization.It mainly analyzes the security of the protocol between tag and reader,especially the security of the EPC Class1Gen2air interface protocol. It also pays special attention to the upper part of the EPCglobal framework such as the RFID middleware and ONS service parts. It also discusses the effects of traditional network security problems on ONS service.In order to verify the content of safety analysis, this article built an verification system based on EPCglobal frame.It uses open source framework and implements to realize data recognition layer, data access layer and exchange layer of EPCglobal framewoek. Because original system doesn’t have event filtering module, URI query module and ONS parsing module, this paper put forward the design method about these modules. A series of safety testing proves that this Verification system works well and verifies the analysis relults.Finally this paper some advice on security defense.