Research And Implementation Of RFID Protocol Security Analysis Technology For ISO 14443A Standard

RFID(Radio Frequency Identification)technology is a non-contact automatic identification and information collection technology using radio frequency.Because of its simplicity,efficiency and other advantages,it has been widely used in many industrial fields,such as industrial transportation,business management,and industrial automation.However,although RFID technology brings convenience to people's life,but it also has many security risks.Due to the imperfect security protection mechanism of RFID systems,attackers can use various means to attack RFID systems,such as illegal reading,clone attack,and malicious tampering and so on,which has formed a huge obstacle to the further development of RFID technology.In this thesis,the existing RFID system security problems and protection technologies are analyzed and studied.Aiming at the shortcomings,the following three aspects are mainly researched:First of all,in order to solve the problem that the existing RFID protocol analysis technologies have great dependence on specific protocol feature information,a new RFID protocol analysis technology based on frequent sequence extraction is proposed.This technology starts from the communication process of RFID system complying with ISO 14443 A standard,and combines with the characteristics of ISO 14443 A protocol datagram,based on the technology of frequent sequence extraction,through the operation of frequent sequence screening,splicing and distinguishing,gradually research and mine more specific protocol characteristic information related to the protocol,such as keyword,tag uid,protocol mode and so on,which is convenient for further research on RFID protocol security.Experiments results show that the proposed technology based on frequent sequence extraction can effectively extract the protocol related feature information from the original RFID protocol datagram.Secondly,aiming at the problem that the current RFID protocol security analysis technology cannot fully describe the protocol context,a new RFID protocol security analysis technology based on protocol state analysis is proposed.This technology is oriented to ISO 14443 A protocol standard.It starts from the analysis of protocol state,describes the transformation relationship between protocol states,establishes the analysis model of protocol state machine based on the idea of finite state machine,and analyzes the security of protocol transformation state in the communication process of RFID system,finds out the security risks in the communication process,so as to enhance the security of RFID system.Experiments show that this RFID protocol security analysis technology based on protocol state analysis can effectively analyze the security of current communication RFID system.Finally,based on the proposed RFID protocol analysis technologies,a prototype system is designed,which effectively combines these two RFID protocol analysis technologies.The system can analyze the protocol characteristics and protocol security of a RFID system in communication,extract more protocol related information,and find out whether there are security risks in the communication process of the RFID system,so as to improve the security of the RFID system.