CN101470794A - Authentication method, equipment and system for wireless radio frequency recognition system - Google Patents

Abstract

The embodiment of the present invention discloses an authentication method in a radio frequency identification RFID system, comprising the following steps: receiving first authentication information and second authentication information, and searching locally for a label with the first authentication information; The parameters of the label of the first authentication information are generated to generate third authentication information; it is judged whether the second authentication message is the same as the third authentication message, and if they are the same, the label with the first authentication information is authenticated success. The embodiment of the invention also discloses a device and a system for RFID system authentication. By using the embodiment of the present invention, the times of calculating and comparing tags in the tag authentication process are reduced, and the reading efficiency is improved.

Description

Authentication method, device and system in radio frequency identification system

technical field

The invention relates to the field of communication technology, in particular to an authentication method, device and system in a radio frequency identification system.

Background technique

RFID (Radio Frequency Identification) technology is a non-contact automatic identification technology that has matured since the 1980s. It uses radio frequency signals to automatically identify target objects and obtain relevant data without manual intervention. Since RFID technology has the characteristics of multi-target identification and non-contact identification, it has been widely used in manufacturing, commerce, military, daily life and other fields, and has shown huge development potential and application space. It is considered to be the most developed in the 21st century. One of the promising technologies.

RFID system generally consists of three parts: tags, readers and background database, its structure is shown in Figure 1. Among them, the background database can be a database system running on any hardware platform, and the user can choose according to actual needs. Usually, the background database has powerful computing and storage capabilities, and it stores all the label information. The reader is actually a wireless transmitting and receiving device with an antenna, and its processing capacity and storage space are relatively large. Tags are tiny circuits with an antenna, and tags usually don't have a microprocessor and consist of thousands of logic gates.

Although RFID technology has broad application prospects, the lack of effective security mechanisms in RFID communication systems has become an important factor restricting its large-scale deployment and application.

A relatively complete RFID system solution should have the following characteristics: confidentiality, information is only accessed by authorized users; integrity, resistance to tampering or replacement of information during communication; authenticity, reader and tag identity authentication and non-repudiation; Release attack resistance, resistance to replay of communication messages; privacy, protection of consumers' private information or commercial interests of related economic entities.

As a wireless communication technology, the security solution of RFID has its own characteristics in addition to the security requirements of the above-mentioned general wireless communication technology. include:

Practicality: Because the reader and the background database usually have relatively strong computing power, the communication security problem between them can be solved by using a relatively mature computer network security mechanism. However, the tag requires low cost, and the computing power and storage space are relatively limited, which limits the use of existing mature security mechanisms. Therefore, the RFID security solution also has a special requirement, that is, the practicability of the solution, that is, the solution must be suitable for the characteristics of RFID's limited computing overhead, storage capacity and communication capacity. In order to facilitate the design and management of RFID systems, it is usually assumed that the communication channel between the tag and the reader is insecure, while the communication channel between the reader and the back-end database is secure.

Privacy: Because the RFID tag is a non-contact automatic identification technology, the tag may be read by the reader without the user's knowledge, and there is a hidden danger of the user's privacy being illegally read. Therefore, the privacy protection of RFID systems, namely: protecting the privacy of consumers or the commercial interests of related economic entities, may have stronger importance than other communication systems.

According to the characteristics of the RFID system, how to design a better security mechanism, provide security and privacy protection, prevent various malicious attacks, and create an A relatively safe working environment is related to whether the RFID system can be truly practical.

At present, a series of researches on RFID security technology have been carried out at home and abroad. Fig. 2 is a randomized Hash-Lock protocol scheme in the prior art, where ID _k is the tag ID; Get all ID _S is the reader's request to the database to obtain all tag IDs.

The execution process of the randomized Hash-Lock protocol is as follows:

Step s201, the reader sends a Command command to the tag;

Step s202, the tag generates a random number R, and calculates H(ID _k ∥R). The tag sends (R, H(ID _k ∥R)) to the reader;

Step s203, the reader submits a request to the database to obtain all tag identifications;

Step s204, the database sends all tag identifications (ID ₁ , ID ₂ , ..., ID _s ) in its own database to the reader;

Step s205, the reader checks whether there is a certain ID _j , so that H(ID _j ∥R)=(ID _k ∥R) is established; if yes, the authentication is passed, and ID _j is sent to the tag; the tag verifies that ID _j and Whether the ID _k is the same, if they are the same, the authentication is passed. Otherwise, it will be banned.

In the process of realizing the present invention, the inventor finds that the prior art has at least the following disadvantages:

During the authentication process of each tag, the reader needs to calculate and compare all the tags in the database, resulting in low reading efficiency.

Contents of the invention

Embodiments of the present invention provide an authentication method, device and system in a radio frequency identification (RFID) system, so as to improve the reading efficiency in the authentication process of the existing RFID system.

In order to achieve the above object, an embodiment of the present invention provides an authentication method in a radio frequency identification (RFID) system, comprising the following steps:

receiving the first authentication information and the second authentication information, and searching locally for a label with the first authentication information;

generating third authentication information according to the parameters of the tag with the first authentication information;

Judging whether the second authentication message is the same as the third authentication message, and if they are the same, the authentication of the tag with the first authentication information is successful.

Embodiments of the present invention also provide an authentication method in a radio frequency identification RFID system, comprising the following steps:

Generating first authentication information and second authentication information respectively according to the parameters of the tag;

sending the first authentication information and the second authentication information to the reader;

The reader is configured to search for a tag with the first authentication information according to the first authentication information, generate third authentication information according to relevant parameters of the tag with the first authentication information, and generate third authentication information according to the second authentication message Perform legality authentication on the label with the first authentication information whether it is the same as the third authentication message.

Embodiments of the present invention also provide a reader for authentication in an RFID system, including:

a receiving unit, configured to receive first authentication information and second authentication information;

a search unit, configured to locally search for a tag with the first authentication information received by the receiving unit;

a generating unit, configured to generate third authentication information according to the parameters of the tag with the first authentication information found by the search unit;

An authentication unit, configured to determine that the authentication of the tag with the first authentication information is successful when the third authentication information generated by the generation unit is the same as the second authentication information.

Embodiments of the present invention also provide a label, comprising:

An authentication information generating unit, configured to generate first authentication information and second authentication information respectively according to relevant parameters;

An authentication information sending unit, configured to send the first authentication information and the second authentication information generated by the authentication information generating unit to a reader; tag, generate third authentication information according to the relevant parameters of the tag with the first authentication information, and generate third authentication information for the tag with the first authentication information according to whether the second authentication message is the same as the third authentication message Labels are legally certified.

Embodiments of the present invention also provide an authentication system for authentication in an RFID system, including:

a tag, configured to generate first authentication information and second authentication information, and send the first authentication information and the second authentication information to the reader;

The reader is configured to receive the first authentication information and the second authentication information, and search locally for a label with the first authentication information; generate third authentication information according to the parameters of the label with the first authentication information; determine the Whether the second authentication message is the same as the third authentication message, and if they are the same, the authentication of the tag with the first authentication information is successful.

Compared with the prior art, the embodiments of the present invention have the following advantages:

The reader pre-stores an authentication information of the tag, and during the authentication process, the tag feeds back the authentication information and other authentication information; before calculation, the reader narrows down the scope of the tag by comparing the authentication information, and then performs other authentication information Calculate and compare, and finally complete the certification process. Using this method will reduce the number of calculations and comparisons of tags in the process of tag authentication, and improve reading efficiency.

Description of drawings

FIG. 1 is a schematic diagram of the composition and structure of an RFID system in the prior art;

Fig. 2 is a schematic diagram of the randomized Hash-Lock protocol process in the prior art;

Fig. 3 is the flowchart of authentication method in the RFID system in the embodiment of the present invention;

Fig. 4 is the signaling flowchart of the authentication method in the RFID system in the embodiment of the present invention;

Fig. 5 is a schematic structural diagram of an authentication system in an RFID system in an embodiment of the present invention;

Fig. 6 is a schematic structural diagram of a reader in an embodiment of the present invention;

Fig. 7 is a schematic structural diagram of a tag in an embodiment of the present invention.

Detailed ways

Below in conjunction with accompanying drawing and embodiment, the specific embodiment of the present invention is described in further detail:

Embodiments of the present invention provide an authentication method in an RFID system, as shown in Figure 3, comprising the following steps:

Step s301: Divide the authentication information that needs to be authenticated between the tag and the reader into multiple groups, including at least the first authentication information and the second authentication information; and store the first authentication information and related parameters of each tag on the reader side. The purpose of the first authentication information and the second authentication information is that the reader narrows down the range of tags that need to be authenticated according to the first authentication information, and authenticates the legitimacy of the tags according to the second authentication information.

Step s302. During the authentication process, the tag generates first authentication information and second authentication information and sends them to the reader.

Step s303, the reader receives the authentication information sent by the tag, and searches for the first authentication information sent by the tag.

Step s304 , judging whether there is a tag with the first authentication information, if yes, proceed to step s305 , if not, consider the authentication failed and end.

Step s305, generating third authentication information by using the relevant parameters of the tag with the first authentication information. When the reader generates the third authentication information, it uses the same algorithm and/or parameters as when the tag generates the second authentication information.

Step s306 , compare the generated third authentication information of each tag with the received second authentication information, if there is the same authentication information, continue to step s307 , otherwise consider the authentication failed and end.

Step s307, judging that all the authentication information received from the tag has passed the authentication, and the authentication is successful.

The specific implementation manner of the embodiment of the present invention is described below in conjunction with a specific application scenario. Wherein, an example is taken in which the tag and the reader use multiple sets of authentication information for authentication, and the multiple sets of authentication information include at least first authentication information and other authentication information. The first authentication information is simple authentication information compared with other authentication information, and the simple authentication information of the tag is stored on the reader side; during the authentication process, the tag feeds back the simple authentication information and other authentication information. Before calculation, the reader narrows down the range of tags by comparing simple authentication information, and then calculates and compares other authentication information, and finally completes the authentication process. The signaling flowchart of this application scenario is shown in FIG. 3 .

Among them, Info-1 and Info-2 are tag information; Key is the key shared between the reader and the tag; OtherElement is other information in the authentication process; f1 and f2 are data processing functions. The tag and the reader need to share the key in advance, and store the tag information and authentication information f1 (Info-1, Key) in the reader. The authentication process is shown in Figure 4, including the following steps:

Step s401, the reader initiates a Command command;

Step s402, the tag calculates the first authentication information A and the second authentication information B, for example, in addition: A=f1(Info-1, Key), B=f2(Info-1, Info-2, Key, OtherElement), and Feedback A and B to the reader; of course, other methods can also be used to calculate the first authentication information A and the second authentication information B.

Step s403, the reader authenticates the tag according to (A, B).

The reader obtains the information of all tags from the database, and finds out all tags whose stored f1 (Info-1, Key) information is the same as the first authentication information A; then, for these tags, use the AND tag calculation and the second authentication In the same way as information B, calculate the third authentication information B'=f2(Info-1, Info-2, Key, OtherElement), and compare whether the B' of the label is the same as the passed B, if there is, the label passes the authentication .

By using the above method provided by the embodiment of the present invention, the reader pre-stores an authentication information of the tag, and during the authentication process, the tag feeds back the authentication information and other authentication information; before the calculation, the reader compares the authentication information Narrow the scope of the label, and then calculate and compare other certification information, and finally complete the certification process. Using this method will reduce the number of calculations and comparisons of tags in the process of tag authentication, and improve reading efficiency.

The embodiment of the present invention also provides an authentication system and equipment in an RFID system, the structure of which is shown in FIG. 5 , including: a reader 10 and at least one tag 20 . Among them, the reader 10 is used to pre-store the first authentication information of the tag 20, and during the authentication process, the tag 20 feeds back the first authentication information and the second authentication information; before calculation, the reader 10 compares the first authentication information Narrow down the scope of the label, and then calculate and compare the second authentication information, and finally complete the authentication process.

Specifically, the structure of the reader 10 is shown in Figure 6, further comprising:

The receiving unit 11 is configured to receive the first authentication information and the second authentication information sent by the tag.

The search unit 12 is configured to search locally for a label with the first authentication information received by the receiving unit 11 .

The generation unit 13 is configured to generate third authentication information according to the relevant parameters of the label with the received first authentication information found by the search unit 12; the generation unit 13 may be specifically a first generation subunit for The third authentication information is generated by using the same algorithm and/or parameters as when the tag generates the second authentication information.

The authentication unit 14 is configured to judge that the authentication of the label with the first authentication information is successful when the third authentication information generated by the generating unit 13 is the same as the received second authentication information.

The storage unit 15 is configured to store the first authentication information of each tag and related parameters and provide them to the search unit 12 and the generation unit 13 .

The structure of label 20 is shown in Figure 7, further includes:

The authentication information generating unit 21 is configured to respectively generate first authentication information and second authentication information according to related parameters; different algorithms and/or parameters are used when generating different authentication information.

The authentication information sending unit 22 is configured to send the first authentication information and the second authentication information generated by the authentication information generating unit 21 to the reader. The reader is configured to search for a tag with the first authentication information according to the first authentication information, generate third authentication information according to relevant parameters of the tag with the first authentication information, and generate third authentication information according to the second authentication message Perform legality authentication on the label with the first authentication information whether it is the same as the third authentication message.

By using the above-mentioned system and equipment provided by the embodiment of the present invention, a piece of authentication information of the tag is pre-stored on the reader side. During the authentication process, the tag feeds back the authentication information and other authentication information; The comparison narrows down the label range, and then calculates and compares other certification information, and finally completes the certification process. Using this method will reduce the number of calculations and comparisons of tags in the process of tag authentication, and improve reading efficiency.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is a better implementation Way. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to make a The station device executes the methods described in various embodiments of the present invention.

The above disclosures are only a few specific embodiments of the present invention, however, the present invention is not limited thereto, and any changes conceivable by those skilled in the art shall fall within the protection scope of the present invention.

Claims (13)

1, the authentication method in a kind of wireless radio frequency discrimination RFID system is characterized in that, may further comprise the steps:

Receive first authentication information and second authentication information, search label in this locality with described first authentication information;

According to the parameter of label, generate the 3rd authentication information with described first authentication information;

Judge whether described second authentication message is identical with described the 3rd authentication message, if identical, then to described smart-tag authentication success with described first authentication information.

2, the authentication method in the rfid system according to claim 1 is characterized in that, also comprises before described reception first authentication information and second authentication information:

Many groups be will be divided into the authentication information that label authenticates, and first authentication information and the correlation parameter of each label stored.

3, the authentication method in the rfid system according to claim 1 is characterized in that, described basis has the parameter of label of first authentication information of described reception, generates the 3rd authentication information and is specially:

Described second authentication message uses identical algorithm and parameter to generate with described the 3rd authentication information.

4, as the authentication method in the rfid system as described in each in the claim 1 to 3, it is characterized in that described parameter comprises: cipher key shared and other authenticate employed parameter between the information of described label, described label and described reader.

5, the authentication method in a kind of wireless radio frequency discrimination RFID system is characterized in that, may further comprise the steps:

According to the parameter of label, generate first authentication information and second authentication information respectively;

Described first authentication information and second authentication information are sent to reader;

Described reader is used for searching the label with described first authentication information according to described first authentication information, correlation parameter according to label with described first authentication information, generate the 3rd authentication information, described label with described first authentication information is carried out the legitimacy authentication according to described second authentication message and described the 3rd authentication message be whether identical.

As the authentication method in the rfid system as described in the claim 5, it is characterized in that 6, described label has used different algorithms and/or parameter when generating different authentication informations.

7, a kind of reader is used for the authentication of rfid system, it is characterized in that, comprising:

Receiving element is used to receive first authentication information and second authentication information;

Search the unit, be used for searching the label of first authentication information with described receiving element reception in this locality;

Generation unit is used for the parameter of searching the label with described first authentication information that the unit finds according to described, generates the 3rd authentication information;

Authentication ' unit, be used for the 3rd authentication information that generates when described generation unit with from described second authentication information when identical, judge successfully described smart-tag authentication with described first authentication information.

8, as reader as described in the claim 7, it is characterized in that, also comprise:

Storage unit is used to store first authentication information of each label and the parameter of each label, and offers described unit and the generation unit searched.

As reader as described in the claim 7, it is characterized in that 9, described generation unit is specially first and generates subelement, be used to use algorithm and parameter identical when generating second authentication information, generate the 3rd authentication information.

10, a kind of label is characterized in that, comprising:

The authentication information generation unit is used for generating first authentication information and second authentication information respectively according to correlation parameter;

The authentication information transmitting element is used for first authentication information and second authentication information that described authentication information generation unit generates are sent to reader; Described reader is used for searching the label with described first authentication information according to described first authentication information, correlation parameter according to label with described first authentication information, generate the 3rd authentication information, described label with described first authentication information is carried out the legitimacy authentication according to described second authentication message and described the 3rd authentication message be whether identical.

11, a kind of Verification System is used for the authentication of rfid system, it is characterized in that, comprising:

Label is used to generate first authentication information and second authentication information, and sends described first authentication information and described second authentication information to described reader;

Reader is used to receive first authentication information and second authentication information, searches the label with described first authentication information in this locality; According to the parameter of label, generate the 3rd authentication information with described first authentication information; Judge whether described second authentication message is identical with described the 3rd authentication message, if identical, then to described smart-tag authentication success with described first authentication information.

12, as Verification System as described in the claim 11, it is characterized in that described label further comprises:

The authentication information generation unit is used for generating first authentication information and second authentication information respectively according to correlation parameter;

The authentication information transmitting element is used for first authentication information and second authentication information that described authentication information generation unit generates are sent to reader.

13, as Verification System as described in the claim 11, it is characterized in that described reader further comprises:

Receiving element is used to receive first authentication information and second authentication information that label sends;

Search the unit, be used for searching the label of first authentication information with described receiving element reception in this locality;

Generation unit is used for the correlation parameter of searching the label with described first authentication information that the unit finds according to described, generates the 3rd authentication information;

Authentication ' unit is used for the 3rd authentication information that generates when described generation unit and, judges to described smart-tag authentication successfully when identical from described second authentication information.

Images