Mobile RFID system bidirectional authentication method and system

Abstract

The invention discloses a mobile RFID system bidirectional authentication method, which comprises the steps of: step<1>, authentication on a card reader by means of a server; step<2>, authentication on the server by means of the card reader; step<3> authentication on a tag by means of the server; step<4>, authentication on the card reader and the server by means of the tag; and step<5>, authentication on the tag by means of the card reader. The mobile RFID system bidirectional authentication method introduces an updating mechanism of sharing a secret key by the server and the tag, introduces a timestamp, utilizes the unidirectional property of a Hash function and safety of AES encryption and decryption, realizes bidirectional security authentication among the server, the card reader and the tag, and satisfies the wireless and long-range communication between the card reader and the back-end server; and the tag adopts the simple Hash function and exclusive or calculation, and the cost of the tag side is reduced. The invention further discloses a system adopting the mobile RFID system bidirectional authentication method.

Description

technical field [0001] The invention belongs to the technical field of radio frequency identification, and in particular relates to a mobile RFID system two-way authentication method and system thereof. Background technique [0002] Radio Frequency Identification (Radio Frequency IdenTficaTon, RFID) technology is a non-contact automatic identification technology. A complete RFID system is composed of three parts: card reader, electronic tag and server. The basic working principle of RFID technology is: after the tag enters the magnetic field, it receives the radio frequency signal sent by the card reader, and sends out the product information stored in the chip (passive tag or passive tag) by virtue of the energy obtained by the induced current, or is sent by the tag Actively send a signal of a certain frequency (active tag or active tag), the card reader reads and decodes the information, and sends it to the server for relevant data processing. Compared with traditional i...

AI Technical Summary

Problems solved by technology

The purpose of the present invention is to solve the unsafe problem of the card reader and the server in the wireless transmission, as well as the deficiencies in the current security protocol applied to the RFID automatic identification system. The present invention only uses a simple Hash function, different Or operation, reduce the cost of the tag side, and consider the introduction of time stamps to improve randomness and timeliness Anti-masquerading, anti-replay attacks and anti-position tracking to improve the security strength of the RFID security protocol, according to the server, RFID card reader and The storage capacity and computing power of the RFID tag itself are different. The computing power and storage capacity of the server and the RFID card reader are relatively strong, while the storage space and computing power of the RFID tag are very limited, and low cost requirements must be achieved.

Images