一种改进的RFID系统安全协议

RFID是一种新型的非接触式自动识别技术，已经在门禁、运输系统、目标跟踪等领域得到广泛应用。但在实际应用过程中，RFID系统还存在诸多安全隐患。因此，设计和完善相关安全机制及安全认证协议对保护RFID系统来说仍然至关重要。文中通过对RFID系统结构的分析，总结了安全隐患存在的原因。介绍了RFID安全策略，主要是几种常见物理安全机制和基于密码技术的安全协议，并对其优缺点进行了简要分析。讲述了一种混合加密安全模型，进而提出了一种通过密钥更新和工作负荷转移改进混合加密安全模型的方法，增强了混合加密模型的安全性和实用性。通过对改进后协议的分析可知，该协议能够抵抗重传、跟踪等常见安全问题。

A modified security protocol of RFID system

RFID is a new kind of non-contact automatic identification technology. It has been widely used in access control, transportation system, target tracking, etc. But in the actual application environment, there are still many security risks in the RFID system. So, design and improving relevant security mechanisms and authentication protocols become imperative to the RFID system. This article analyses the formation of the RFID system, summarizes the reasons why security problems exist. Then it introduce the security strategy, mainly some familiar physical security mechanisms and authentication protocols based on the password techniques. It analyses their advantages and disadvantages simply, emphasizes a hybrid-encryption security module. And then it proposes a modified method by the secret key update and workload transfer. This method enhances the hybrid-encryption＇ s security and utility, and it can resist location tracking , replay attack and other means of attack.