Abstract: For effectively ensuring users' privacy and data security of the Radio Frequency Identification (RFID) system, a new RFID mutual authentication protocol was proposed in this paper, which was designed by the method of combining elliptic curves and Weil pairing. In this protocol, the mutual authentication and anonymous authentication were realized, and the traffic analysis attack, impersonation attack and replay attack were resisted. Compared with the random Hash lock, Hash chain and New-Gen2, this protocol can resist most of the attacks which have been discovered.

Key words: Elliptic Curve Discrete Logarithm Problem (ECDLP), authentication protocol, key, Radio Frequency Identification (RFID), privacy, Weil pairing

摘要： 为了能有效保证射频识别(RFID)系统中用户的隐私和数据安全,采用椭圆曲线和Weil对相结合的方法来设计RFID系统的认证协议,并提出一种新型RFID双向认证协议。该协议实现了双向认证和匿名认证,并能抵抗流量分析、伪装、重放等攻击。与随机Hash锁、Hash链、New-Gen2等进行比较,该协议能够抵抗大多数已发现的攻击形式,并给出针对这些攻击的安全性分析。

关键词: 椭圆曲线离散对数问题, 认证协议, 密钥, 射频识别, 隐私, Weil对