Group RFID Tags Ownership Transfer Protocol Based On Cloud Storage Technology

With the rapid development of the Internet of things, RFID technology will play an increasing important role in the management of the commodity supply chain. In traditional RFID systems, application data is stored in the back-end database, and readers are directly connected with the back-end database in most instances. This method is not flexible and users need to pay the price for maintaining the back-end database. Therefore, cloud service is considered to provide back-end database service to reduce the cost, and the readers can move freely. But in this cloud-based RFID system new security and privacy problems also appear. In addition, the open links between the tags and the mobile readers and those between the mobile readers and cloud database are vulnerable to eavesdropp ing, playback, tracking attack. So the rational RFID authentication mechanisms and ownership transfer mechanisms are required to ensure the owner 's privacy of the RFID tags. At the same time the low-cost requirement should be considered when designing the protocols,because the computing and storage capacity of RFID tag are very limited. Currently, the cloud based RFID security protocol are seldom researched. Especially, the commodity trading in the supply chain environment is often based group,therefore the researches on cloud based RFID system group authentication protocols and group ownership transfer protocol are very important. The main results we obtained in this thesis are as follows.Firstly, according to the characteristics of low-cost passive RFID tags, a group authentication protocol called CAPG and a group ownership transfer protocol called COTPG for cloud-based RFID systems are proposed. The two proposed protocols are designed based on hash function and satisfy the low-cost requirement. Here the group authentication protocol CAPG provides the mutual authentication between tags and mobile readers and between mobile readers and cloud database server. The CAPG protocol can ensure the data privacy and location privacy. The group ownership transfer protocol COTPG can realize the group ownership transfer function. Then the formalized security proof of the proposed protocols using BAN logic is given.Secondly, according to the proposed protocols the main hardware consumption comes from hash function, so SHA-3 hash function is adopted and its hardware structure is designed and analyzed. Analysis shows that when the block length of SHA-3 is 400 bits, only 2544 logic gates are required in the tag, which satisfies the low-cost requirement.