关键词: 射频识别, 安全模型, 强隐私性, 可证明安全

Abstract: Molnar protocol is a scheme for mutual authentication between tags and readers in Radio Frequency Identification (RFID) system, which emphasizes protecting privacy for the tag; however, its security has not been proved formally. By using the eHa model, a formal proof was given, in which the output of the Molnar protocol maintain unpredictable, denoted as un-privacy. Moreover, the accurate security boundary of the Molnar protocol was computed. The privacy of protocol was reduced tightly on the assumption that the output of pseudorandom functions was indistinguishable from the output of random functions in polynomial time by utilizing the game-based technique. This technique is a powerful tool for analyzing and solving the privacy problem of RFID system, and provides an effective and universal solution.

Key words: Radio Frequency Identification （RFID）, security model, strong privacy, provable security