Method for enhancing ability of protocol to resist desynchronization attacks

Abstract

A method for enhancing an ability of a protocol to resist desynchronization attacks comprises the following steps: a reader sends an authentication request message to a label; the label calculates IDSnew and sends the IDSnew to the reader; the reader searches the IDSnew in a background database; if the IDSnew does not exist, the reader waits for the label to transmit IDSold and re-searches the database, and the phenomenon shows that a new key of one party of the label is not updated; if the IDSnew exists, the reader generates two random numbers n1 and n2, calculates A, B and C, and sends messages to the label; after receiving the messages A, B and C, the label extracts the random numbers n1 and n2, calculates local C', judges whether C is equal to C', calculates a D value, and sends the Dvalue to the reader; otherwise, the authentication fails, wherein D is equal to FORMULA (for the detailed formula, please refer to the abstract), and the keys and pseudonyms are finally updated; and after receiving the message D, the reader verifies whether the message D is equal to a local value D', and if yes, the corresponding keys and pseudonyms in the database are updated. According to the method, the correlation between the random numbers can be enhanced, the collision domain of unit values of the random numbers can be reduced, and thus the ability of the protocol to resist the desynchronization attacks can be enhanced, and the security of the protocol can be effectively improved.

Description

technical field

[0001] The invention relates to the field of computer technology, in particular to a method for enhancing the protocol's ability to resist desynchronization attacks. Background technique

[0002] With the widespread use of radio frequency identification (Radio Frequency Identification, RFID) technology in intelligent transportation, mobile medical care, digital libraries and other fields, the security issues caused by it have attracted much attention. The identifier of an RFID tag is usually unique. If the tag responds the same to the reader every time it visits, it will easily lead to tracking attacks and replay attacks against the tags.

[0003] In order to maintain the freshness of the information in the RFID system authentication process, avoid the occurrence of tracking attacks, and to achieve the security of forward and backward authentication, many designers often use the secret value update mechanism in their designed security protocols. The server, ...

Images