The Study of NFC Identity Authentication and Digital Content Protection Mechanisms in Cloud Environments

[[abstract]]近場通訊 (Near Field Communication) 技術已被廣泛的應用在人們的日常生活。藉由使用 NFC 功能之行動裝置讀取 NFC 標籤安全權杖，便可以透過行動網路使用雲端服務。因 NFC 通訊的過程之近場實體限制擁有較高的保密性與安全性，當完成 NFC 通訊之後，如何確保用戶端與雲端伺服器之間資料傳遞的安全便成為另一個重要議題。由於雲端環境下，用戶端所存取之數位內容大多存放伺服器內，因此須防範有心人士在通訊的過程中竄改資訊，甚至假冒使用者身份獲取保護的數位內容。另外，雲端運算的環境下也需考量用戶端行動裝置的儲存空間與運算效能上的問題。本文中我們應用 NFC Tag，提出一個適用於雲端環境下數位內容存取的安全機制。文中我們以 NFC 標籤做為存放安全權杖及其它相關參數的媒體，並將標籤設置於安全保護的環境下，以防止標籤遭到有心人士的毀損或竄改標籤的內部資訊。藉由 NFC side-channel 的方式可以保障安全權杖必須經過實體接近才能存取之安全性。此外我們使用挑戰及回應的機制，並以安全權杖計算訊息驗證碼達到相互驗證之功能，以及產生會議金鑰以保護之後傳輸的數位內容。[[abstract]]NFC (Near Field Communication) technology has been widely used in people's daily lives By using the NFC-enabled mobile device to read the security token from NFC tags we can use cloud services over the mobile network Due to the short distance physical communication constraint the NFC has higher confidentiality and higher security Thus after completing the NFC communication how to ensure data security between the user and the cloud server is another important issue In the cloud environment the digital content accessed by the user is mostly stored in the server Thus it needs to prevent malicious persons from modifying information and faking the user's identity to obtain the digital content In addition in the cloud computing environment it is required to consider the storage space and computing performance problems for the mobile device In this thesis a secure and efficient NFC identity authentication and digital content protection scheme is proposed We use an NFC tag to store the security token and other related parameters and put the tags in a protected environment in order to prevent it from being damaged or tampered by malicious persons Through the NFC side-channel a user needs to near the NFC tag to access the security token In addition we use the challenge-response protocol and the message authentication code to achieve mutual authentication and generate the session key to protect the transmitted digital conten