科研成果详情

随着越来越多的物品被贴上RFID标签,用于证明若干具有一定关系的物品作为一个群组在同一时间、同一地点出现的群证明技术的应用日趋广泛.在RFID群证明技术中,如何在确保标签信息安全与隐私的同时,生成可靠的群证明,并提升协议的执行效率是当前的研究热点.为确保标签信息的安全与隐私,离线群证明协议往往仅由Verifier完成验证,Reader仅负责群证明信息的收集,降低了协议对于非法群证明的响应速度,为提高系统的群证明效率,抵御拒绝服务（deny of proof,DoP）攻击,提出了一种采用双层校验的RFID离线匿名群证明协议AGPDL,使用椭圆曲线加密,通过二次校验的方法,授权Reader在标签匿名的情况下预先进行群证明的有效性验证,然后再由Verifier完成最终的群证明校验,并确认标签身份.通过安全性分析与性能分析可知:AGPDL能够较好地保护标签信息的安全与隐私,抵御冒充攻击与重放攻击,并且防止Reader提交无效群证明带来的系统开销,具有较好的可扩展性. 

As more and more items are tagged with RFID tags. The grouping-proof technology which is used to produce a coexistence evidence with a group of related items is becoming more and more widely used. In the RFID grouping-proof protocol, how to generate reliable grouping-proof without threat to the tag information security and how to improve the protocol efficiency are search hotspots in RFID security area. In the off-line grouping-proof protocol, the proof data generally verified by the verifier to guarantee the privacy and security of tag information, the reader is only used to collect the grouping proof data, which cut down the responding speed to the illegal proof data in protocol. To enhance the grouping-proof efficiency and prevent DoP (deny of proof) attack, a RFID anonymous grouping-proof protocol using dual-layer verification (AGPDL) has been proposed. The AGPDL uses the elliptic curve cryptosystem as an encryption means. In this protocol, dual-layer verification is used. Reader are authorized to verify the validity of group-proof without knowing the identity of tags. After that, the final verification process and tag authentication are finished by the verifier in background server. Through the security and performance analysis, the AGPDL can provide the security and privacy about tag's information, prevent the replay and impersonate attack, Furthermore, it has the ability to prevent the system overhead caused by invalid submission of grouping-proofs from reader with better scalability. © 2018, Science Press. All right reserved.