一种改进的基于HMAC的RFID双向认证协议

现有的RFID技术和相关系统在信息安全方面的技术措施严重不足,而密码学技术可以有效保证信息的机密性、完整性、认证性和不可否认性。文章对已有的RFID认证协议进行改进,改进后的认证协议实现了标签和读卡器、读卡器和后台服务器之间的双向认证,同时将认证协议中的敏感信息进行变换以实现保密性。该协议实现了对窃听、篡改、信息阻塞、中间人攻击、拒绝服务攻击等攻击方式的有效防范,具有较强的应用价值。

A New HMAC-based Bidirectional RFID Authentication Protocol

There are some severe shortcomings in technical measures of information security for the existing RFID technology and its related systems, however the cryptology technology can effectively ensure confidentiality, integrity, authentication and none repudiation of information. This paper proposes a new HMAC-based bidirectional RFID protocol, which improves the existing RFID authentication protocol to achieve bidirectional authentication between tags and card readers, and between card readers and back-end servers, and to ensure the confidentiality of sensitive information transmitted in the authentication process. The proposed protocol achieves the goals of protecting several attacks such as interception, tampering, the man-in-the-middle attack and the denial of service attack, and has a strong application value.