Research And Design Of Lightweight Security Authentication Protocol For RFID System

Radio Frequency Identification(RFID)technology is one of the information sensing technologies in the Internet of Things(Io T),which uses wireless radio frequency signals to achieve non-contact automatic identification.This technology is widely used in many scenarios,such as commercial area,transportation area and medical area,due to its advantages of good pollution resistance and strong penetration.However,due to the non-contact communication method of RFID,the RFID system suffers from various security threats.Thus,security authentication protocols are usually used to ensure the security of the system.At the same time,for low-cost passive tags,the existing security protocols are difficult to adapt to the resource-constrained situation.Therefore,this thesis proposes a new lightweight RFID security authentication protocol and a new group authentication protocol in view of the difficulty of ensuring security,the limitation of tag resources,the reduction of authentication efficiency.The main research contents are as follows:1.In the field of single-tag RFID authentication,this thesis proposes a new lightweight RFID security authentication protocol based on SKINNY(short for LRSAS).The protocol addresses the problem that low-cost tags cannot accommodate complex encryption algorithms while it is difficult to ensure the security of ultra-lightweight bit operations.First,this thesis expands the round function of the lightweight block cipher SKINNY so that its S-box can encrypt data with 96-bit encoded tags.The proposed protocol consists of initialization phase,label recognition phase,mutual authentication phase and update phase.Then,this thesis uses the GNY logic to prove that the protocol can achieve two-way authentication between the tag and the reader.Security analysis shows that this protocol can resist common RFID security threats such as replay attack,desynchronization attack,and tracking attack.Finally,performance analysis and simulation experiments show that this protocol has better performance under the premise of ensuring security.2.In terms of the group authentication of RFID tags,this thesis proposes a new lightweight RFID group authentication based on Bloom Filter(short for LGABF)to address not only the low efficiency caused by authenticating many tags one by one but also the problem that group tags cannot be allocated with group IDs efficiently and dynamically.First,this protocol introduces a state marking mechanism and Bloom Filter to efficiently allocate group IDs to tags,which can solve the problem of repeated transmission of information caused by polling mechanisms and unicast transmission group IDs,and corrects the problem of mislabeling during tag state transfer caused by Bloom false negative.Then,the reader collects all the responses of tags to generate a group certificate for verification,which ensures the scalability of the group authentication protocol.The thesis applies the attacker model to prove that this protocol can guarantee the security of the authentication.Finally,the formula for the optimal solution derivation of the grouping time cost on Bloom Filter parameters are given.The analysis of the performance comparison experiments shows that this protocol has lower performance overhead and higher operating efficiency while satisfying scalability and security.3.This thesis combines the above two lightweight security authentication protocols to design and implement an RFID security authentication prototype system.First,the system design scheme is constructed to meet the requirements: 1)the single-tag certification mode in the production,processing and sales links of goods;2)the group-tag certification mode in the storage and transportation links of goods.Then,this thesis presents the core codes of the two security authentication protocols.Finally,the system test shows that the system can provide security authentication for any single tag or tag group.