CAJ | 학술논문

针对射频识别(RFID)系统在计算与存储资源有限情况下的特殊需求，提出一种基于公钥密码体制NTRU的轻权认证协议。在该协议中，标签和读写器均完成一次随机数生成操作，且仅在服务器端存储一个密钥对，各个RFID标签采用公钥进行消息加密并发送给读写器和服务器，服务器通过存储在本地的私钥进行解密，在标签端仅存储服务器的公钥，以确保认证过程中信息的保密传输和隐私性，实现标签与读写器间的相互认证。通过分析证实，该协议能够抵抗窃听、位置追踪、重放、反向跟踪等攻击，而且标签仅需提供轻权加密和随机数生成操作，该认证协议非常适合应用于低成本的RFID系统。
침대사빈식별(RFID)계통재계산여존저자원유한정황하적특수수구，제출일충기우공약밀마체제NTRU적경권인증협의。재해협의중，표첨화독사기균완성일차수궤수생성조작，차부재복무기단존저일개밀약대，각개RFID표첨채용공약진행소식가밀병발송급독사기화복무기，복무기통과존저재본지적사약진행해밀，재표첨단부존저복무기적공약，이학보인증과정중신식적보밀전수화은사성，실현표첨여독사기간적상호인증。통과분석증실，해협의능구저항절은、위치추종、중방、반향근종등공격，이차표첨부수제공경권가밀화수궤수생성조작，해인증협의비상괄합응용우저성본적RFID계통。
According to the special situations that an Radio Frequency Identification(RFID) system only has very limited computing and memory resources, this paper proposes a lightweight mutual authentication protocol based on Number Theory Research Unit(NTRU). In this protocol, readers and tags perform random number generating operations. The server stores a key pair, while tags only store a public key. Tags encrypt messages uses the public key, and then sends them to readers or the server. The server decrypts messages using private key. The protocol ensures the security and privacy of the RFID system and completes the mutual authentication between readers and tags. Analysis result shows that the proposed protocol can prevent replay attack, tracing, eavesdropping and backward traceability effectively. The protocol only needs the lightweight encryption and pseudorandom operations for tags. It is very suitable to the low-cost RFID system.