甘勇　李天豹　贺蕾　许允倩

摘要：针对RFID标签在认证授权及所有权转换过程中存在的安全隐私问题，结合类编程思想和重载原理，提出一种基于动态重载的RFID标签所有权转换协议.其要点为：在PUF部件的基础上改进伪随机序列生成器的迭代机制，以芯片产生的自编译扩展因子增强输出的随机性；为通信双方构建轻量级候选函数集，利用面向对象编程中的“重载”原理实现所有权转换过程中算法的动态执行.协议安全性及计算开销分析对比结果表明，新协议在认证授权的基础上提供标签所有权的安全转移，与同类协议相比具有较高的安全性和较低的计算开销.

Abstract：Aiming at security and privacy issues existing in the process of authentication and authorization of RFID tags ownership transfer，combining with the principles of Class＼|Programming and overload，a RFID tag ownership transfer protocol based on dynamic overload was presented.It improved iterative mechanism of pseudo＼|random sequence generator on the basis of an PUF component，utilized self＼|compiling extension factor generated by chips to enhance randomness of output，constructed lightweight set of candidate functions for both communication sides so as to achieve dynamic execution of algorithms in ownership transfer process which via the overload principle in Object＼|Oriented programming.The security and computing cost of protocol analysis results showed that the new protocol provided tag with secure ownership transfer on the basis of authentication efficiency and authorization， and it had higher security and lower computation cost compared with similar protocols.

0引言

RFID（radio frequency identification）是一种非接触式的目标自动识别技术，有着广泛的应用前景.RFID标签具有成本低、体积小、可重复使用等诸多优点，可在供应链环境中有效控制管理成本.跟踪产品来源、质量、售后等环节出现的问题，会涉及标签所有权的转移，而标签设计的特点和局限性带来的潜在问题也使标签所有者的信息安全受到威胁，同时随着RFID的产业化，系统的安全性及隐私性要求也越来越高.

现阶段RFID系统的安全与隐私问题主要体现在以下两个方面：标签与读写器的数据交互基于无线信道，攻击者可能会对通信过程进行各种被动攻击或主动攻击；标签对读写器发起的访问请求作被动响应，而响应信息可能会泄露所有者个人隐私信息，同时会暴露所有者物理位置，从而使标签……