Efficient broadcast authentication method for radio frequency identification system and radio frequency identification system

Abstract

The invention discloses an efficient broadcast authentication method for a radio frequency identification system and the radio frequency identification system. The method comprises the following steps: a master station provides registration service for a radio frequency receiver and / or each radio frequency transmitter by using system public parameters, and sends generated registration information; the system public parameters comprise a master station public key KHN; the radio frequency receiver generates an authentication request by using the received registration information; the trusted third party broadcasts an authentication request to each radio frequency transmitter; in response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to the trusted third party; the trusted third party processes the acquired authentication responses sent by the plurality of transmitters to generate an authentication credential; sending an updated authentication response to the radio frequency receiver, and sending an authentication credential to the radio frequency transmitter; in response to the updated authentication response, the radio frequency receiver verifies the timestamp, computes a receiver session key; in response to the authentication credential, the radio frequency transmitter verifies the timestamp and calculates a transmitter session key.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an efficient broadcast authentication method for a radio frequency identification system and a radio frequency identification system. Background Art

[0002] Radio Frequency Identification (RFID) is a widely used wireless communication technology that uses radio signals to identify specific targets and read and write related data without the need for mechanical or optical contact between the RFID system and the specific target. The specific targets of the RFID system are varied, such as various types of RFID cards, such as radio frequency tags attached to a variety of items.

[0003] With the development of computer-related technologies, RF transmitters and receivers are prone to passive attacks in RFID application scenarios, resulting in a large number of information security incidents. Therefore, privacy protection is crucial in RFID application scenarios, and it is necessary to achieve anonymity and untraceability of RF devices.

[0004] Since RF devices are resource-constrained devices with very limited computing and storage resources, it is an urgent problem to efficiently achieve the anonymity and untraceability of RF devices at a low computing cost in RFID systems to improve data security. Summary of the invention

[0005] In view of this, the present application proposes an efficient broadcast authentication method and a radio frequency identification system for a radio frequency identification system, aiming to solve the problem of insufficient data security of the radio frequency identification system in the prior art.

[0006] In a first aspect, the present application provides an efficient broadcast authentication method for a radio frequency identification system, comprising:

[0007] The master station uses the system public parameters to provide registration services to the RF receiver and / or each RF transmitter and sends the generated registration information; the system public parameters include the master station public key K HN ;

[0008] The RF receiver generates an authentication request using the received registration information; the trusted third party broadcasts the authentication request to each RF transmitter;

[0009] In response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to a trusted third party;

[0010] The trusted third party processes the authentication responses sent by the multiple transmitters and generates authentication credentials; sends the updated authentication responses to the radio frequency receiver and sends the authentication credentials to the radio frequency transmitter;

[0011] In response to the updated authentication response, the radio frequency receiver verifies the timestamp and calculates the receiver session key SK1;

[0012] In response to the authentication credentials, the RF transmitter verifies the timestamp and calculates a transmitter session key SK2.

[0013] Furthermore, the master station provides registration services to the radio frequency receiver and / or each radio frequency transmitter using the system public parameters, and sends the generated registration information, including:

[0014] The master station selects the original ID for the RF receiver s and temporary identity information TID s , and calculate the receiver first variable E s =h(ID s ||K HN ), receiver second variable Where h(*) is the hash function, h: {0,1} * →Z q ,|| represents cascade operation, Represents XOR operation Z q is an integer interval;

[0015] The master station sends the generated receiver registration information to the radio frequency receiver, and the receiver registration information includes: a first parameter group {ID s ,TID s ,X s ,ID IN ,E s ,K HN}, where ID IN It is the identity information of a trusted third party;

[0016] The master station sends the generated transmitter registration information to each radio frequency transmitter, and the transmitter registration information includes: the second parameter group {ID IN ,TID s ,X s ,E s ,K HN}.

[0017] Further, the radio frequency receiver generates an authentication request using the received registration information; the trusted third party broadcasts the authentication request to each radio frequency transmitter, including:

[0018] The RF receiver generates a receiver random number a∈Z q , record the authentication request timestamp T1;

[0019] The radio frequency receiver uses the received receiver registration information and the receiver random number to calculate the receiver third variable C1, where: Calculate the receiver's fourth variable H1, H1 = h(ID s ||TID s ||ID IN ||a||T1);

[0020] The RF receiver sets the third parameter group {TID s ,C1,H1,T1} is sent to a trusted third party;

[0021] The trusted third party will set the fourth parameter group {ID IN ,TID s ,C1,H1,T1} embeds the authentication request and broadcasts it to each RF transmitter.

[0022] Further, in response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to a trusted third party, including:

[0023] The radio frequency transmitter records the authentication response timestamp T2, and verifies the authentication request timestamp using the received authentication request;

[0024] The radio frequency transmitter uses the received authentication request and the received transmitter registration information to verify the trusted third party identity information and the fourth variable of the receiver; the radio frequency transmitter generates a transmitter random number b∈Z q , receiver passive identity information calculate;

[0025] Calculate the transmitter second variable using the generated transmitter random number, the calculated receiver first variable and the receiver passive identity information Calculate the transmitter third variable H2;

[0026] The fifth parameter group Embed the authentication response and send it to the trusted third party.

[0027] Further, the trusted third party processes the authentication responses sent by the multiple transmitters to generate authentication credentials; and sends the updated authentication responses to the radio frequency receiver, including:

[0028] The trusted third party calculates the authentication credentials based on the authentication responses sent by multiple transmitters in, is the passive identity information of the receiver recorded in the authentication response sent by each transmitter, ∑ is the accumulation operation, and h(*) is the hash function;

[0029] The trusted third party embeds the sixth parameter group {count, C2, H2, T2} into the updated authentication response and sends it to the RF receiver.

[0030] Further, in response to the updated authentication response, the radio frequency receiver verifies the timestamp and calculates the receiver session key SK1, including:

[0031] The RF receiver records the receiver key negotiation timestamp T4, uses the authentication request timestamp T1 to verify the authentication timestamp; calculates the receiver session key SK1 = h(ID s | | TID s| |count|T1);

[0032] In response to the authentication credential, the RF transmitter verifies the timestamp and calculates the transmitter session key SK2, including:

[0033] The RF transmitter records the transmitter key negotiation timestamp T3, and uses the authentication request timestamp T1 to verify the authentication timestamp; calculates the transmitter session key SK2 = h(ID IN | | TID s| |count|T1).

[0034] Furthermore, it also includes:

[0035] Each RF transmitter in the RFID system uses the transmitter session key to conduct a service dialogue with the RF receiver, or

[0036] The RF receiver within the RFID system uses the receiver session key to conduct a service dialogue with the RF transmitter.

[0037] In a second aspect, the present application provides a radio frequency identification system, comprising:

[0038] Master station, RF receiver, RF transmitter, trusted third party;

[0039] The master station, the radio frequency receiver, the radio frequency transmitter and the trusted third party perform the efficient broadcast authentication method described in the first aspect, calculate the transmitter session key, and calculate the receiver session key;

[0040] Each RF transmitter uses the transmitter session key to conduct a service dialogue with the RF receiver, or

[0041] The RF receiver uses the receiver session key to conduct a service dialogue with the RF transmitter.

[0042] In a third aspect, the present application provides a terminal, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the method described in the first aspect.

[0043] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, characterized in that the program is executed by a processor to implement the method described in the first aspect.

[0044] The efficient broadcast authentication method and radio frequency identification system for radio frequency identification system completes the registration of radio frequency equipment at the main station. After the radio frequency equipment is registered at the main station, the radio frequency receiver and the radio frequency transmitter send authentication information to each other and verify the identity, and use the received authentication information to generate a session key to complete the broadcast authentication between the radio frequency receiver and the radio frequency transmitter under the one-to-many architecture. In this way, the broadcast authentication, device anonymity and device untraceability of radio frequency equipment are efficiently realized at a low computing cost, which is conducive to reducing the security risks of the radio frequency identification system and solving the information privacy problem.

[0045] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0047] Figure 1 A schematic diagram of the composition and operation of a radio frequency identification system according to an embodiment of the present invention;

[0048] Figure 2 A schematic diagram of a flow chart of an efficient broadcast authentication method for a radio frequency identification system according to an embodiment of the present invention;

[0049] Figure 3 A swim lane diagram of the interactions between parties in an efficient broadcast authentication method for a radio frequency identification system according to an embodiment of the present invention;

[0050] Figure 4 A schematic diagram of the composition of a terminal to which an efficient broadcast authentication method for a radio frequency identification system according to an embodiment of the present application is applied;

[0051] Figure 5 It is a schematic diagram of a program product to which the efficient broadcast authentication method for a radio frequency identification system according to an embodiment of the present invention is applied. DETAILED DESCRIPTION

[0052] Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to be able to fully convey the scope of the present disclosure to those skilled in the art. It should be noted that, in the absence of conflict, the embodiments in this application and the features in the embodiments can be combined with each other.

[0053] In view of the security risks existing in the identity authentication of the existing radio frequency identification system, the present application provides an efficient broadcast authentication technical solution for the radio frequency identification system, including an efficient broadcast authentication method for the radio frequency identification system and a radio frequency identification system based on broadcast authentication.

[0054] Referring to the above description, the computing resources and storage resources of radio frequency devices are limited. For this reason, the efficient broadcast authentication method for radio frequency identification systems in an embodiment of the present invention proposes a new lightweight broadcast authentication method to achieve the anonymity and untraceability of radio frequency devices at a low computing cost, thereby improving data security.

[0055] like Figure 1 As shown in Figure 1, in RFID application scenarios, it is often necessary to broadcast authentication between a single RF receiver and multiple RF transmitters. During the broadcast authentication process, ensuring the anonymity of the RF device can prevent the adversary from discovering the true identity of the RF device. Ensuring the untraceability of the RF device can ensure that the adversary cannot distinguish whether any two service sessions come from the same RF device.

[0056] like Figure 1 and Figure 3 As shown, in the efficient broadcast authentication method for the radio frequency identification system, the radio frequency device registration is completed at the main station 300. After the radio frequency device (such as a single radio frequency receiver 100 and multiple radio frequency transmitters 200) is registered at the main station, the radio frequency receiver and the radio frequency transmitter send authentication information to each other and verify the identity, and use the received authentication information to generate a session key to complete the broadcast authentication under the one-to-many architecture (such as between a single radio frequency receiver 100 and multiple radio frequency transmitters 200). In this way, the broadcast authentication, device anonymity and device untraceability of the radio frequency device are efficiently realized at a low computing cost, which is conducive to reducing the security risks of the radio frequency identification system and solving the information privacy problem.

[0057] like Figure 1As shown, the radio frequency identification system based on broadcast authentication in the embodiment of the present application includes: a main station 300, a radio frequency receiver 100, n radio frequency transmitters 200 and a trusted third party 400, wherein service sessions are independently conducted between the radio frequency receiver 100 and the n radio frequency transmitters 200, that is, the n radio frequency transmitters 200 independently conduct service sessions with the radio frequency receiver 100 in a many-to-one manner, or the radio frequency receiver 100 provides services to the n radio frequency transmitters 200 in a one-to-many manner.

[0058] Naturally, before the service session is conducted, the RF receiver 100 and each RF transmitter have completed broadcast authentication through the broadcast authentication method described below, including: sending authentication information to each other and verifying identities, and generating a session key using the received authentication information.

[0059] Furthermore, a more complex radio frequency identification system may include: a master station 300, an i-th radio frequency receiver 100 and n i The ith subsystem is formed by the ith RF transmitter 200, the trusted third party 400, wherein i is greater than or equal to 1 and less than or equal to N, and N is a positive integer; wherein, in the ith subsystem, the service session is between the ith RF receiver 100 of the ith group and the nth RF receiver of the ith group. i The communication is carried out between the RF transmitters 200; the main station 300 and the trusted third party 400 are shared by all the N subsystems and will not be described in detail.

[0060] like Figure 2 and Figure 3 As shown, the efficient broadcast authentication method for the radio frequency identification system according to the embodiment of the present application includes the following steps S1 to S5.

[0061] Figure 3 In the following, a radio frequency receiver and a radio frequency transmitter are used as examples for explanation. Figure 2 , specifically describes the steps of achieving identity authentication by one RF receiver and n RF transmitters in an RFID system independently exchanging authentication information through a trusted third party.

[0062] S1: The master station provides registration services to the RF receiver and / or each RF transmitter using the system public parameters; the system public parameters include: the master station public key K HN , where K HN ∈Z q , Z q is an integer interval; safety parameter λ.

[0063] Specifically, the master station provides a registration service for the radio frequency receiver, including: the master station generates registration information for the radio frequency receiver, wherein the generated registration information is stored locally in the master station and the radio frequency receiver.

[0064] Specifically, the master station provides registration services to the radio frequency receiver, including: the master station selects the original identity information ID for the radio frequency receiver s and temporary identity information TID s , and calculate the receiver first variable E s =h(ID s ||K HN ) and the receiver second variable Where h(*) is a hash function, such as h: {0,1} * →Z q ,|| represents cascade operation, represents an XOR operation, such as a bitwise logical operation;

[0065] After registration, the RF receiver saves the first parameter group {ID s ,TID s ,X s ,ID IN ,E s ,K HN}, where ID IN It is the IN identity information of the trusted third party.

[0066] Specifically, the master station provides registration services for each radio frequency transmitter, including: the master station sends registration information generated for the radio frequency receiver to each radio frequency transmitter;

[0067] After registration, the RF transmitter saves the second parameter group {ID IN ,TID s ,X s ,E s ,K HN}.

[0068] Thus, before identity authentication, the original identity information ID of the RF receiver s The temporary identity information TID of the RF receiver is invisible to each RF transmitter. s , master station public key K HN and trusted third-party IN identity information ID IN The data is visible to all RF transmitters, thus improving data security.

[0069] In the above, a radio frequency receiver and multiple radio frequency transmitters form a radio frequency identification system or subsystem by registering with the main station. At this time, the radio frequency receiver and the radio frequency transmitter are registered with the main station, but identity authentication has not yet been performed between the radio frequency receiver and each radio frequency transmitter.

[0070] Furthermore, after the RF receiver and the RF transmitter are registered with the master station respectively, in the following steps S2 to S5, the RF receiver and the RF transmitter perform identity authentication by broadcasting, including sending authentication information to each other and verifying identities, and negotiating a session key using the received authentication information.

[0071] S2: The RF receiver generates an authentication request; the trusted third party IN broadcasts the authentication request to each RF transmitter;

[0072] Specifically, the radio frequency receiver generates an authentication request; the trusted third party IN broadcasts the authentication request to each radio frequency transmitter, including:

[0073] The RF receiver generates a receiver random number a∈Z q , record the authentication request timestamp T1;

[0074] The RF receiver calculates the receiver third variable C1, where,

[0075] The radio frequency receiver calculates the fourth variable H1 of the receiver, H1=h(ID s ||TID s ||ID IN ||a||T1);

[0076] The RF receiver sets the third parameter group {TID s ,C1,H1,T1} is sent to the trusted third party IN;

[0077] The trusted third party IN sets the fourth parameter group {ID IN ,TID s ,C1,H1,T1} is broadcasted to each RF transmitter, such as all RF transmitters in the RFID system. In this way, the authentication request generated by the RF receiver records the third parameter group {TID s , C1, H1, T1}; the authentication request broadcast by the trusted third party IN records the fourth parameter group {ID IN ,TID s ,C1,H1,T1}.

[0078] In this way, only the third variable of the receiver, the fourth variable of the receiver, the authentication request timestamp, and the temporary identity information TID of the RF receiver are s and trusted third-party IN identity information ID IN The data is visible to all RF transmitters, thus improving data security.

[0079] S3: In response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to the trusted third party IN;

[0080] Specifically, in response to the authentication request, the radio frequency transmitter generates an authentication response, including:

[0081] RF transmitter verification authentication request timestamp;

[0082] Verify the trusted third-party IN identity information;

[0083] Verify the receiver fourth variable;

[0084] Generate an authentication response.

[0085] Specifically, the RF transmitter verifies the authentication request timestamp, including:

[0086] Record the authentication response timestamp T2;

[0087] Verify whether the inequality |T2-T1|≤ΔT holds;

[0088] If the inequality does not hold, the radio frequency transmitter rejects the authentication request recorded with the authentication request timestamp T1;

[0089] If the inequality holds, proceed to verify the trusted third-party IN identity information ID IN .

[0090] In the above, when the absolute value of the time difference between the authentication request timestamp and the authentication response timestamp meets the preset delay threshold, it is determined that the timestamp information meets the requirements, the verification is passed, and the authentication request from the receiver is accepted; when the absolute value of the time difference between the two does not meet the preset delay threshold, it is determined that the timestamp information does not meet the requirements, the verification fails, and the authentication request from the receiver is rejected.

[0091] Specifically, verifying the trusted third-party IN identity information includes:

[0092] Compare the trusted third-party IN identity information recorded in the received broadcast authentication request with the trusted third-party IN identity information obtained when registering with the master station;

[0093] If the comparison is inconsistent, the radio frequency transmitter rejects the authentication request containing the IN identity information of the trusted third party;

[0094] If the comparison is consistent, go to the fourth variable of the verification receiver.

[0095] Specifically, verifying the fourth variable of the receiver includes:

[0096] Calculate the receiver's original identity information using the second parameter group obtained when registering with the master station

[0097] Based on the calculated original identity information of the receiver, the transmitter calculates the first variable E of the receiver s =h(ID s ||K HN );

[0098] The transmitter calculates the receiver random number based on the calculated receiver first variable and the fourth parameter group recorded in the received broadcast authentication request.

[0099] Calculate the fourth variable H1=h(ID s ||TID s ||ID IN ||a||T1);

[0100] Comparing the calculated receiver fourth variable with the receiver fourth variable recorded in the received broadcast authentication request;

[0101] If the comparison is inconsistent, the radio frequency transmitter stops responding to the received broadcast authentication request;

[0102] If the comparison is consistent, proceed to generate an authentication response.

[0103] Specifically, generating an authentication response includes:

[0104] Generate transmitter random number b∈Z q ;

[0105] Generate receiver passive identity information

[0106] Using the calculated receiver original identity information and receiver passive identity information, calculate the transmitter's first variable

[0107] Calculate the transmitter second variable using the calculated receiver random number, the generated transmitter random number, the calculated receiver first variable and the receiver passive identity information Calculate the transmitter third variable The fifth parameter group Sent to the trusted third party IN as an authentication response.

[0108] In this way, the authentication response generated by the radio frequency transmitter records the fifth parameter group

[0109] Similarly, each radio frequency transmitter (eg, n in total) in the radio frequency identification system responds to the broadcast authentication request independently and sends each generated fifth parameter group to the trusted third party.

[0110] like Figure 3 As shown, due to the passive identity information of the receiver It will not be transmitted through an insecure channel (transmitted through a secure channel provided by a trusted third party), so the adversary cannot find information associated with authentication from the exchanged information, thereby achieving anonymity.

[0111] S4: The trusted third party IN processes the authentication responses sent by the multiple transmitters to generate an authentication credential; sends the updated authentication response to the radio frequency receiver; and sends the authentication credential to the radio frequency transmitter.

[0112] Specifically, the trusted third party IN processes the authentication responses sent by multiple transmitters and generates authentication credentials, including:

[0113] Calculate the authentication credentials based on the authentication responses sent by multiple transmitters in, is the passive identity information of the receiver recorded in the authentication response sent by each transmitter; ∑ is the accumulation operation, and h(*) is the hash function.

[0114] Specifically, the trusted third party IN sends an updated authentication response to the radio frequency receiver, including:

[0115] The sixth parameter group {count, C2, H2, T2} is sent to the radio frequency receiver as an updated authentication response.

[0116] In this way, the updated authentication response records the sixth parameter group

[0117] S5: In response to the updated authentication response, the radio frequency receiver verifies the timestamp and calculates the receiver session key SK1;

[0118] In response to the authentication credentials, the RF transmitter verifies the timestamp and calculates a transmitter session key SK2.

[0119] Specifically, in response to the updated authentication response, the radio frequency receiver verifies the timestamp, including:

[0120] Based on the current timestamp T4, the RF receiver verifies whether the inequality |T4-T2|≤ΔT holds. For details, refer to the steps of verifying whether the inequality |T2-T1|≤ΔT holds, which will not be described in detail.

[0121] Specifically, the calculating the receiver session key SK1 in response to the updated authentication response includes:

[0122] RF Receiver Calculations Verify the equation whether it is established;

[0123] If not, the RF receiver terminates the session key negotiation; otherwise, the RF receiver calculates the receiver session key SK = h(ID s ||TID s ||count|T1), where the authentication credential count is used to replace the temporary identity information TID s , which can ensure the untraceability of radio frequency devices. In this way, key negotiation is completed.

[0124] Specifically, in response to the authentication credentials, the radio frequency transmitter verifies the timestamp and calculates the transmitter session key SK2, including:

[0125] Based on the current timestamp T3, the RF transmitter verifies whether the inequality |T3-T2|≤ΔT holds, and calculates the transmitter session key SK=h(ID s ||TID s ||count|T1), where the authentication credential count is used to replace the temporary identity information TID s , which can ensure the non-traceability of radio frequency devices.

[0126] In this way, after successful authentication, each RF transmitter in the RFID system uses the transmitter session key SK2 to conduct a service dialogue with the RF receiver, or

[0127] The RF receiver in the RFID system uses the receiver session key SK1 to conduct a service dialogue with the RF transmitter.

[0128] In this way, secure communication between each RF transmitter and RF receiver in the RFID system is achieved based on broadcast authentication. In this way, in the above steps S2 to S5, the RF receiver and the RF transmitter interact through a trusted third party to complete identity authentication and key negotiation in an efficient broadcast manner.

[0129] like Figure 3 As shown, in one embodiment, the efficient broadcast authentication method for the radio frequency identification system includes two parts: an initialization and registration phase, and an authentication phase.

[0130] Specifically, the initialization and registration phase includes the following steps S10 to S30, and the authentication phase includes the following steps S40 to S110.

[0131] S10: Given a security parameter λ, the master station selects two hash functions, hash function h: {0,1} * →Z q and the hash function h * : {0,1} * →Z q , the master station public key is K HN , K HN ∈Z q .

[0132] S20: The master station selects the identity information ID for the RF receiver s and temporary identity information TID s , and calculate the first data E before verification for the RF receiver s =h(ID s ||K HN ) and the second data before verification Among them, || represents the cascade operation, Represents the exclusive-or operation.

[0133] S30: After completing the registration, the RF receiver saves the first parameter group {ID s ,TID s ,X s ,ID IN ,E s ,K HN}; The RF transmitter saves the second parameter group {ID IN ,TID s ,X s ,E s ,K HN}, where ID IN It is the IN identity information of the trusted third party.

[0134] S40: The RF receiver generates a receiver random number a∈Z q , record the authentication request timestamp as T1. The RF receiver calculates the third data The fourth data H1=h(ID s ||TID s ||ID IN ||a||T1) and the third parameter group {TID s ,C1,H1,T1} to the trusted third party IN. The trusted third party IN sends the fourth parameter group {ID IN ,TID s ,C1,H1,T1} is broadcast to all RF transmitters.

[0135] S50: Based on the transmitter's current timestamp T2, the RF transmitter verifies whether the inequality |T2-T1|≤ΔT holds. If not, the RF transmitter rejects the authentication request. If so, the RF transmitter verifies the trusted third-party IN identity information ID IN (Recorded in the fourth parameter group {ID IN ,TID s ,C1,H1,T1}); if the parameter is valid, the verified identity information is calculated After verification, the first data E s =h(ID s ||K HN ), after verification, the receiver random number The RF transmitter stores a second parameter group {ID IN ,TID s ,X s ,E s ,K HN} and the fourth parameter group {ID IN ,TID s ,C1,H1,T1}) and verify the equation H1=h(ID s ||TID s ||ID IN ||a||T1) is true, if not, the RF transmitter terminates the verification request; if it is true, otherwise the RF transmitter generates a transmitter random number b∈Z q and an authentication response timestamp T2.

[0136] S60: The RF transmitter selects new identity information for the RF receiver Calculate and verify the second data Fifth Data Sixth Data And use the fifth parameter group Substitution parameter {TID s ,X s}. Due to identity information It will not be transmitted through insecure channels, so the adversary cannot find information associated with authentication from the exchanged information, thus achieving anonymity.

[0137] S70: The RF transmitter sets the sixth parameter group Send to a trusted third party.

[0138] S80: Trusted third party calculates broadcast checksum The seventh parameter group {count, C2, H2, T2} is sent to the RF receiver, and the broadcast check value count is sent to each RF transmitter.

[0139] S90: Based on the transmitter's current timestamp T3, the RF transmitter verifies whether the inequality |T3-T2|≤ΔT holds; the RF transmitter calculates the session key SK=h(ID IN ||TID s ||count|T1), replace parameter TID with parameter count s .

[0140] S100: Based on the authentication request timestamp T4, the RF receiver verifies whether the inequality |T4-T2|≤ΔT holds. The RF receiver calculates Verify the equation Is it true?

[0141] If not, the RF receiver terminates the session; otherwise, the RF receiver calculates the session key SK = h(ID s ||TID s ||count|T1), replace parameter TID with parameter count s , complete the certification.

[0142] S110: After the authentication is successful, the RF receiver and the RF transmitter each retain the session key SK for later use, that is, the service session is securely implemented.

[0143] The present application also provides a terminal to execute the method. Figure 4 It shows a schematic diagram of a terminal provided by some embodiments of the present application. Figure 4 As shown, the terminal 8 includes: a processor 800, a memory 801, a bus 802 and a communication interface 803, and the processor 800, the communication interface 803 and the memory 801 are connected via the bus 802; the memory 801 stores a computer program that can be run on the processor 800, and the processor 800 executes the method provided by any embodiment described in the present application when running the computer program.

[0144] The memory 801 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk storage. The communication connection between the device network element and at least one other network element is realized through at least one communication interface 803 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0145] The bus 802 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 801 is used to store programs, and the processor 800 executes the program after receiving an execution instruction. The method disclosed in any implementation of the embodiment of the present application may be applied to the processor 800, or implemented by the processor 800.

[0146] The processor 800 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the method can be completed by the hardware integrated logic circuit or software instructions in the processor 800. The processor 800 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a readily available programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor to be executed, or the hardware and software modules in the decoding processor are combined and executed. The software module may be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 801, and the processor 800 reads the information in the memory 801 and completes the steps of the method in combination with its hardware.

[0147] The terminal provided in the embodiment of the present application and the method in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the method adopted, operated or implemented by them.

[0148] The embodiments of the present application also provide a computer-readable storage medium corresponding to the method provided by the embodiments, and the computer-readable storage medium is a CD on which a computer program (i.e., program product 900) is stored. When the computer program is run by a processor, it will execute the method provided by any of the embodiments.

[0149] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.

[0150] The computer-readable storage medium provided by the embodiments of the present application is based on the same inventive concept as the method of the embodiments of the present application, and has the same beneficial effects as the method adopted, run or implemented by the application program stored therein.

[0151] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these adjustments and modifications of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these changes and modifications.

Claims

1. An efficient broadcast authentication method for a radio frequency identification system, characterized in that: include: The master station provides registration services to the RF receiver and / or each RF transmitter using the system public parameters, and sends the generated registration information; The system public parameters include the master station public key K HN ; The radio frequency receiver generates an authentication request using the received registration information; The trusted third party broadcasts the authentication request to each RF transmitter; In response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to a trusted third party; The trusted third party processes the authentication responses sent by the multiple transmitters and generates authentication credentials; Sending an updated authentication response to the radio frequency receiver and sending the authentication credentials to the radio frequency transmitter; In response to the updated authentication response, the radio frequency receiver verifies the timestamp and calculates a receiver session key; In response to the authentication credentials, the radio frequency transmitter verifies the timestamp and calculates a transmitter session key.

2. The method according to claim 1, characterized in that The master station provides registration services to the radio frequency receiver and / or each radio frequency transmitter using system public parameters, and sends the generated registration information, including: The master station selects the original ID for the RF receiver s and temporary identity information TID s , and calculate the receiver first variable E s =h(ID s ||K HN ), receiver second variable Where h(*) is the hash function, h: {0,1} * →Z q ,|| represents cascade operation, Represents XOR operation Z q is an integer interval; The master station sends the generated receiver registration information to the radio frequency receiver, and the receiver registration information includes: a first parameter group {ID s ,TID s ,X s ,ID IN ,E s ,K HN }, where ID IN It is the identity information of a trusted third party; The master station sends the generated transmitter registration information to each radio frequency transmitter, and the transmitter registration information includes: the second parameter group {ID IN ,TID s ,X s ,E s ,K HN }.

3. The method according to claim 2, characterized in that The radio frequency receiver generates an authentication request using the received registration information; The trusted third party broadcasts an authentication request to each RF transmitter, including: The RF receiver generates a receiver random number a∈Z q , record the authentication request timestamp T1; The radio frequency receiver uses the received receiver registration information and the receiver random number to calculate the receiver third variable C1, where: Calculate the receiver's fourth variable H1, H1 = h(ID s ||TID s ||ID IN ||a||T1); The RF receiver sets the third parameter group {TID s ,C1,H1,T1} is sent to a trusted third party; The trusted third party will set the fourth parameter group {ID IN ,TID s ,C1,H1,T1} embeds the authentication request and broadcasts it to each RF transmitter.

4. The method according to claim 3, characterized in that In response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to the trusted third party, including: The radio frequency transmitter records the authentication response timestamp T2, and verifies the authentication request timestamp using the received authentication request; The radio frequency transmitter uses the received authentication request and the received transmitter registration information to verify the trusted third party identity information and the fourth variable of the receiver; the radio frequency transmitter generates a transmitter random number b∈Z q , receiver passive identity information calculate; Calculate the transmitter second variable using the generated transmitter random number, the calculated receiver first variable and the receiver passive identity information Calculate the transmitter third variable H2; The fifth parameter group Embed the authentication response and send it to the trusted third party.

5. The method according to claim 4, characterized in that The trusted third party processes the authentication responses sent by the multiple transmitters to generate authentication credentials; Send an updated authentication response to the RF receiver, including: The trusted third party calculates the authentication credentials based on the authentication responses sent by multiple transmitters in, is the passive identity information of the receiver recorded in the authentication response sent by each transmitter, ∑ is the accumulation operation, and h(*) is the hash function; The trusted third party embeds the sixth parameter group {count, C2, H2, T2} into the updated authentication response and sends it to the RF receiver.

6. The method according to claim 5, characterized in that In response to the updated authentication response, the radio frequency receiver verifies the timestamp and calculates the receiver session key, including: The RF receiver records the receiver key negotiation timestamp T4, uses the authentication request timestamp T1 to verify the authentication timestamp; calculates the receiver session key SK1 = h(ID s ||TIDs||count|T1); In response to the authentication credentials, the radio frequency transmitter verifies the timestamp and calculates a transmitter session key, including: The RF transmitter records the transmitter key negotiation timestamp T3, uses the authentication request timestamp T1 to verify the authentication timestamp; calculates the transmitter session key SK2 = h(ID IN ||TID s ||count|T1).

7. The method according to claim 6, characterized in that Also includes: Each RF transmitter in the RFID system uses the transmitter session key to conduct a service dialogue with the RF receiver, or The RF receiver within the RFID system uses the receiver session key to conduct a service dialogue with the RF transmitter.

8. A radio frequency identification system, characterized in that: include: Master station, RF receiver, RF transmitter, trusted third party; The master station, the radio frequency receiver, the radio frequency transmitter and the trusted third party perform the efficient broadcast authentication method as claimed in claim 1, calculate a transmitter session key, and calculate a receiver session key; Each RF transmitter uses the transmitter session key to conduct a service dialogue with the RF receiver, or The RF receiver uses the receiver session key to conduct a service dialogue with the RF transmitter.

9. A terminal, comprising: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: The program is executed by a processor to implement the method according to any one of claims 1 to 7.

Images