可证明安全轻量级无服务型RFID安全搜索协议.docVIP

可证明安全轻量级无服务型RFID安全搜索协议 　　收稿日期　　基金项目：国家重大基础研究发展计划（973计划）资助项目（2012CB724400）；国际科技合作专项资助项目（2013DFG72850） 　　作者简介：王鑫（1986-），男，山西忻州人，北京邮电大学博士研究生 　　通讯联系人，Email：buptwxin@ 　　摘要：针对RFID标签搜索过程中产生的安全与隐私问题，设计了一个轻量级无服务型RFID安全搜索协议.通过严格时间戳的方式对移动读写器的时间权限进行管理，提出松散时间戳和HASH函数相结合的方式对无线信道进行安全防护，其利用HASH函数的单向性保证了协议消息的完整性和保密性，利用碰撞原理实现了可调节的隐私强度及搜索效率.在UC框架下证明了协议满足通用可组合安全性，使得协议可运行在并发环境当中，在标准安全模型下证明了协议满足抵抗重放、去同步、跟踪及匿名性等攻击方式，提出的搜索协议具有强安全性和强隐私性. 　　关键词：无线射频识别（RFID）；搜索协议；通用可组合；标准安全模型 　　中图分类号：TN918.5 文献标识码：A 　　Provable Security Lightweight 　　Serviceless RFID Security Search Protocol 　　WANG Xin1， JIA Qingxuan1， GAO Xin 1， ZHAO Bing2， CUI Baojiang3 　　（1. School of Automation， Beijing Univ of Posts and Telecommunications， Beijing100876， China； 　　2. State Grid Metering Center， Beijing 100192， China； 　　3. School of Computer Science， Beijing Univ of Posts and Telecommunications， Beijing100876， China） 　　Abstract：To solve the problems of security and privacy caused by RFID tags search process， a lightweight serviceless RFID security search protocol was designed. Firstly， through strict timestamp， the time permissions of the mobile reader were managed. Secondly， the method of combining loose timestamp and HASH function for the safety protection of the wireless channel was put forward， the oneway character of HASH function was used to ensure the integrity and confidentiality of interactive messages. Finally， the collision thought was made use of to realize the adjustable intensity of privacy and search efficiency. Under the UC framework， it was proved that the protocol could meet universally composable security， enabling the protocol to run in the concurrent environment. Under the standard security model， it was proved that the protocol could effectively resist replay attack， desynchronization attack， track attack， anonymity attack and so on. It follows that the proposed protocol has strong security and privacy. 　　Key words：Radio Frequency Identification； search protocol； universally composable； stan