Hash function based RFID (Radio Frequency Identification Devices) authentication method

Abstract

The invention discloses a Hash function based RFID (Radio Frequency Identification Devices) authentication method capable of preventing security breaches, i.e. position leakage, plaintext transmission ID (Identification) information, one-way authentication, Hash value conflict, and the like. The authentication method comprises the following steps: a reader-writer sends an authentication request and a random number R generated by a back-end database to an electronic tag; the electronic tag calculates a data pair, i.e. (H(ID||R) and G(ID||R)), and sends to the back-end database; the back-end database calculates H(IDi||R) and G(IDi||R) for all electronic tag IDi stored by the back-end database; if H(IDk||R)=H(ID||R) and G(IDk||R)=G(ID||R), the back-end database calculates G(H(IDk)||R) and sends to the electronic tag and also destroys the random number R stored by the back-end database; and the electronic tag calculates G(H(ID)||R) by utilizing self ID and compares with a receiving value, if the G(H(ID)||R) is equal to the receiving value, authentication is determined to pass.

Description

technical field [0001] The invention relates to the technical field of identity authentication, in particular to an RFID authentication method based on a Hash function. Background technique [0002] Radio Frequency Identification (RFID, Radio Frequency Identification) is a non-contact automatic identification technology. Its basic principle is to use radio frequency signals and space coupling transmission characteristics to realize automatic identification of recognized objects. The RFID system generally consists of three parts, namely electronic tags, readers and back-end databases. Among them, the electronic tag stores various information of related objects, and the reader can read the information in the electronic tag in a non-contact manner within a certain range, and can write the processed information into the electronic tag. [0003] As an emerging technology, RFID has been widely used in warehouse management, parking lot management, anti-theft system, animal managem...

AI Technical Summary

Problems solved by technology

For example, ①Hash-lock protocol fixedly transmits the key value hash calculation result during the authentication process, that is, H(key), which may easily cause the position of the electronic tag to be leaked

②In the last step of authentication, the electronic tag sends its ID to the reader in plain text, which is easy to be stolen by attackers, resulting in information leakage

The random Hash-lock protocol also has a security risk of transmitting IDs in clear text

③The Hash-Chain protocol is a one-way authentication protocol, which only authenticates the legitimacy of the electronic tag, without authenticating the legitimacy of the reader, so there is a certain security risk

④ At present, many commonly used authentication protocols are based on the Hash function, and the Hash function maps a large-scale input field to a small-scale output field. This feature is easy to cause Hash value conflicts, that is, two different If the key value corresponds to the same Hash value, this will naturally bring confusion and security risks to the authentication

[0007] It can be seen that the existing authentication process based on the Hash function has security vulnerabilities such as location leakage, plaintext transmission of ID information, one-way authentication, and Hash value conflicts.

Images