Research On Low-cost Cloud-based RFID Ownership Transfer Protocol

Radio Frequency Identification(RFID)is a non-contact method to use radio frequency signals to identify items.Ultra-lightweight tags,which are cheap,are very suitable for large-scale applications,and have attracted more and more attention.By purchasing cloud database services,users can build RFID system,which can not only reduce the cost of database maintenance,but also make the system more flexible to become the future development direction.However,in RFID system,the wireless link communication between reader and tag is very vulnerable to attack.At the same time,cloud service providers may steal and disclose user privacy,so user data must be encrypted and stored.In addition,with the development of Internet of Things applications,the ownership of RFID tags will inevitably transfer with the transaction of goods.Both sides of the transaction need to ensure the security of the transfer process,but also to ensure that the original owner can no longer read the tag data and the new owner cannot obtain the transaction privacy of the original owner.To solve these problems,in this thesis a deep research on cloud-based ultra-lightweight RFID tag authentication and ownership transfer protocol is conducted,and achieves the following results.Firstly,a 32-bit pseudo-random number generator PRNG is designed based on filter key stream generator for the limited resources of ultra-lightweight RFID tags.Compared with the traditional scheme in which the random number generator is mostly linear,this kind of scheme can greatly improve security.The non-linear Boolean functions used are based on M-M class construction,satisfying the strict avalanche characteristic SAC and good global avalanche index GAC.They have strict and almost optimal nonlinearity,and can maximize the security strength of PRNG.The linear feedback shift register is constructed by a 32-bit primitive polynomial with relatively few taps.Then,a cloud-based ultra-lightweight RFID authentication protocol is designed.In this protocol,three ultra-lightweight computing components are used to meet the resource requirements of ultra-lightweight tags.Meanwhile,a retrieval and integrity detection scheme for encrypted stored data in the cloud is proposed to deal with the untrustworthiness of cloud database service providers.The security of the protocol is proved based on BAN logic.The hardware logic simulation of the used and operational components shows that the protocol meets the requirements of low cost and lightweight.Finally,on the basis of authentication protocol,a cloud-based ultra-lightweight RFID ownership transfer protocol is designed.After ownership transfer,the old reader can no longer read label data and the new reader can‘t obtain transaction privacy of the old reader.The security of the protocol is proved based on BAN logic.