CAJ | 학술논문

RFID技术已广泛地应用在诸如访问控制、支付系统、票务系统以及供应链管理等领域，但同时安全和隐私问题变得越来越严重。安全认证协议的设计与完善对于保护信息安全和用户隐私变得更加重要。2011年H.Ning等人提出分布式可扩展密钥阵列认证协议（KAAP），该协议采用分布式密钥阵列架构、访问列表机制和动态随机数机制来抵御系统外部攻击和内部假冒攻击。针对KAAP建立两种有效的攻击模型，在此基础上分析得出该认证协议不能有效地抵御来自外部的重放攻击和拒绝服务攻击。KAAP安全性存在漏洞，不能达到设计的预期目标。
RFID기술이엄범지응용재제여방문공제、지부계통、표무계통이급공응련관리등영역，단동시안전화은사문제변득월래월엄중。안전인증협의적설계여완선대우보호신식안전화용호은사변득경가중요。2011년H.Ning등인제출분포식가확전밀약진렬인증협의（KAAP），해협의채용분포식밀약진렬가구、방문렬표궤제화동태수궤수궤제래저어계통외부공격화내부가모공격。침대KAAP건립량충유효적공격모형，재차기출상분석득출해인증협의불능유효지저어래자외부적중방공격화거절복무공격。KAAP안전성존재루동，불능체도설계적예기목표。
As the Radio Frequency IDentification(RFID)technology is widely applied in admission control, payment, ticketing and supply chain management, the security and privacy issues become more and more serious. So it is imperative to design authentication protocols to resist possible attacks and threats. 2011, H. Ning etc. proposed a scalable and distributed key array authentication protocol(KAAP), which uses the distributed key architecture, access list mechanism and dynamic random number mechanism to resist both external attacks and internal forgery attacks. In this paper, we proposed two effective attacks are proposed to against the KAAP, and attacks analysis shows KAAP fails to resist external attacks including replay attack and Denial of Service attack effectively. Therefore, KAAP has security vulnerability and can not achieve the expected goals.