ISSN 1000-1239 CN 11-1777/TP

计算机研究与发展 ›› 2018, Vol. 55 ›› Issue (7): 1432-1439.doi: 10.7544/issn1000-1239.2018.20180075

所属专题: 2018物联网安全专题

• 信息安全 • 上一篇    下一篇

物联网中超轻量级RFID电子票据安全认证方案

王悦1,樊凯2   

  1. 1(西安文理学院信息工程学院 西安 710065); 2(西安电子科技大学网络与信息安全学院 西安 710071) (ywang@xawl.edu.cn)
  • 出版日期: 2018-07-01
  • 基金资助: 
    国家自然科学基金项目(61772403,U1401251);西安市科技计划项目(CXY1352WL30)

Ultra-Lightweight RFID Electronic Ticket Authentication Scheme in IoT

Wang Yue1, Fan Kai2   

  1. 1(College of Information Engineering, Xi’an University, Xi’an 710065); 2(School of Cyber Engineering, Xidian University, Xi’an 710071)
  • Online: 2018-07-01

摘要: 随着物联网应用技术的日益普及,作为其中重要技术之一的无线射频识别(radio frequency identification, RFID)技术在各个领域的应用场景越来越丰富.电子票据将RFID技术应用于传统票证,使得传统票证具备可存储、可识别、可验证等特性,在很大程度上给人们的日常出行带来了巨大的便捷和高效.尽管如此,RFID系统在电子票证上的应用仍然面临着许多安全风险,比如隐私泄露.针对RFID技术在电子票据应用中存在的安全问题,提出了一种超轻量级的安全高效的认证方案.和一些采用复杂加密运算的方案相比,该方案采用简单的逻辑运算和时间戳同步升级机制,可有效抵抗失同步攻击和重放攻击,并可有效防止信息泄露.同时,该方案在数据库中采用时间戳匹配标签信息的方法,极大地提高了数据搜索效率.经过对安全性和高效性方面的分析以及对性能的仿真比较,可知所提方案相比现有方案在安全性和效率上均有较大提升.

关键词: 无线射频识别, 安全认证, 超轻量级, 电子票据, 物联网

Abstract: With the increasing popularity of IoT application technologies, one of the key technologies, called the radio frequency identification (RFID) technology, has been applied to more and more application scenarios in various fields. The electronic tickets apply RFID technology to traditional tickets, which makes the traditional tickets have the characteristics of being storable and identifiable as well as verifiable, bringing a great deal of convenience and efficiency to people’s daily life. Although, RFID systems in the application of electronic tickets still face many potential security risks, such as privacy leakage. To solve the security problems in the application of electronic tickets, an ultra-lightweight RFID security authentication scheme is presented in this paper. Compared with some schemes that use complex cryptographic algorithms, this scheme adopts simple logic operation and timestamp synchronization upgrade mechanism, which can effectively resist asynchronous attack and replay attack, and besides it can effectively prevent information leakage. At the same time, the method that the time stamp matches the label information in the database in this scheme greatly improves the efficiency of information searching in database. Through the analysis of security and efficiency, and the performance comparison and simulation, the proposed scheme has higher security and efficiency than some existing schemes.

Key words: radio frequency identification (RFID), security authentication, ultra-lightweight, electronic ticket, IoT

中图分类号: