Research On Lightweight RFID Authentication Based On Blockchain And Ownership Transfer Protocol

RFID(Radio Frequency IDentification)is a non-contact automatic identification technology.As the key technology for building the "Internet of Things",it has been widely concerned by people,and has been successfully used in various fields such as logistics management,mobile payment,access control systems,medical equipment management and so on.However,the storage resources and computing power of tags in RFID systems are limited;tags and readers are in an open wireless environment and are extremely vulnerable to various types of attacks,such as eavesdropping,privacy disclosure,fraud,tracking,etc.Therefore,the design of low cost,safe and efficient RFID authentication protocol is an important security assurance of RFID system.The existing RFID system generally adopts a centralized architecture,which is extremely vulnerable to attack.The central server manager is not always trusted,and the maintenance cost is relatively high.At the same time,there will be a large number of goods that need to be connected to the network through RFID technology in the future,which is a huge challenge to the existing RFID system.In recent years,blockchain has emerged as a distributed and decentralized new technology.Compared with traditional centralized databases,it has higher stability,reliability,security and lower management costs.Building an RFID system based on blockchain has broad application prospects,but how to implement tag authentication still needs research.In addition,in the actual application of RFID,the ownership of the tag will continue to transfer with the circulation of the attached items.The tag faces the risk of security and privacy leakage during the transfer of ownership.However,the existing RFID ownership transfer protocol has some problems such as heavy calculation burden,high cost and low security.In order to solve these problems,we study the RFID authentication protocol based on blockchain and the ownership transfer protocol of RFID tags in this thesis.The main achievements are listed as follows:First,a new decentralized RFID system architecture is proposed which based on the blockchain technology and combined with the traditional RFID technology.The tag and reader still communicate through a wireless channel,while the background server is built on the blockchain network,and the key data information of the tag identity is encrypted and stored on the blockchain in the form of a blockchain transaction,ensuring that the data cannot be tampered with and traceability,also avoids the problem of untrustworthy cloud service providers in RFID systems based on cloud databases.Secondly,a lightweight RFID authentication protocol based on blockchain is proposed.The design of the protocol is based on a lightweight hash function,which not only guarantees the low cost requirements of tags,but also realizes the mutual authentication of tags and readers.The blockchain server uses different orders to query and update the RFID data,which has high efficiency.The protocol meets the characteristics of untraceability,mutual authentication,forward security,anti-replay attacks,anti-synchronization attacks and so on.Analysis based on BAN logic and AVISPA tools shows that the protocol is secure.Compared with similar protocols,this protocol has better advantages in terms of security,tag storage and computational capacity,etc.Thirdly,a lightweight RFID tag ownership transfer protocol is proposed.The design of the protocol is based on a lightweight hash function,and introduces a flag bit to determine the current ownership of the tag,which realizes the low-cost,safe and efficient transfer of tag ownership from the original reader to the new reader.Security analysis shows that the protocol satisfies the original owner's irrelevance,untraceability,mutual authentication,forward / backward security,anti-replay attacks,and anti-synchronization attacks.Analysis based on BAN logic and AVISPA tools shows that the protocol is secure.Compared with similar protocols,this protocol has better advantages in terms of security,tag storage and computational capacity,etc.