The Study of Efficient and Privacy Protection Authentication For Low-cost RFID Tags

[[abstract]]由於網際網路的快速發展與電腦廣泛的使用在人們的日常生活之中 因此以網路為基礎的服務被發展出來。而網際網路是一個公開的環境 因此使用者在網路上所從事的各種活動是需要受到保護。使用者與服務提供者要如何在這個不安全的網路環境中相互驗證對分的身分是一個非常重要議題。因此 在不安全的網際網路中相互驗證和秘密金鑰的分配成為一個相當重要的安全服務。 大部分的相互驗證和金鑰協議方案都是使用靜態識別碼方法 然而這種方法是很危險的 因為靜態識別碼很容易洩漏用戶的隱私與個人敏感的資訊 並且也能根據被傳送的識別碼來追蹤特定的用戶進行攻擊行為。而在一個不安全的網路環境中保護用戶的隱私是一個非常重要的議題。現今 有許多相互驗證方案已經被提出來預防各種可能的攻擊 其中有許多是針對低運算功能設備的研究 如無線射頻辨識(RFID) 標籤。由於低運算功能的設備不能負擔較高成本的運算量 因此在發展驗證協定上必須要使用低運算成本的運算來建構此協定。 本論文中 我們回顧數個相關的相互驗證的研究 並且指出這些研究的缺點。之後 我們會先提出一個應用在無線射頻辨識(RFID) 標籤的相互驗證方案 降低標籤的運算量並且改善其安全性。另外 我們也提出了將無線射頻辨識(RFID) 使用在一個多伺服器(Multi-server) 的環境。透過我們所提出的方案 讓合法的使用者可以更加安全且快速的在低運算裝置上面使用各項服務 而且服務提供者也能夠驗證使用者的身分。[[abstract]]Due to the wide use of the Internet and computer for the people in the daily life there are more and more services based on the Internet developed by the service providers Since the Internet is a public environment the user and service provider must do mutual authentication in the insecure environment Therefore authentication and secret key distribution become the most important security services in the Internet environments Most of the mutual authentication and secret key agreement schemes are based on the static ID method The static ID method may leak a person’s privacy information and sensitive data to the adversary The adversary may obtain the transmitted messages to trace the particular user for doing some attacks Therefore protecting person’s privacy information in insecure networks is a very important issue Nowadays many mutual authentication schemes have been proposed for preventing different attacks Among them there are many proposed schemes for low-cost devices such as RFID tags Since the low computation devices cannot provide higher computation capacity these devices only can use low cost computation to do authentication In this thesis we study efficient low-cost RFID authentication mechanisms Although some efficient RFID schemes have been proposed we find that the efficiency can be improved We propose a more efficient mutual authentication scheme for RFID tags In addition we propose an efficient RFID scheme for the multi-server environment Through our propose schemes legible users can get various kinds of services in various kinds of environments efficiently In addition our proposed schemes can protect users’ privac