臺灣博碩士論文加值系統

本研究分成二個部份，第一個部份為利用主動式無線射頻辨識的標籤與讀取器建立一個室內定位系統；第二個部份為主動式無線射頻辨識系統的加密認證系統。
第一個部份使用主動式無線射頻標籤的特性，建立一個二維平面的定位機制。使用矩型分佈的參考標籤做為收集目標標籤信標訊號的訊號接收強度指標。系統透過讀取器收集參考標籤接收到的訊號強度資訊後，利用定位演算法對目標標籤的位置進行估算。利用訊號接收強度指標做為距離量測的工具時，因電波在空間中傳遞時會受到地理環境的影響，使得系統在進行位置量的精確度有一定影響。在定位效能測試時，使用不同的參考標籤的分佈密度，以求測試出不同參考標籤間隔時對於定位效能的影響。由實驗測試的結果顯示，本研究使用的定位方式，在參考標籤間隔10公尺的矩型分布的狀況下，90%的區域定位誤差在3.34公尺以下。
第二部份使用馴變換公開金鑰做為加密機制，馴變換簽章具備高速生成金鑰的特性，以及適合微處理器實做的特性，再配合改良式授權機制，以及隨機挑戰碼，實現一個主動式標籤的無線射頻辨識系統。該系統具備不被追縱的特性與讀取器使用無線多跳界接後端伺服器，這樣的通訊方式可以增加系統佈置的彈性與便利性。

This study includes two parts: one is to implement and experiment an indoor positioning system based on an active Radio Frequency Identification (RFID) system, and the other is an authentication protocol with light weight cryptography implemented in an active RFID system.
The first part of this study is mainly to implement an active RFID system for an indoor positioning service. The indoor positioning system uses four reference tags for the reference addresses and a tracked object equipped with an active tag. Reference tags transmit the received signal strength indicator (RSSI) and the unique electronic product code (EPC) back to the reader through wireless transmission. Then the back-end system employs the information which is received from the reference tags to determine the location of the tracked object by computing the geometric relation between the reference tags and the tracked object. Due to the radio signal being vulnerable to the interferences from the terrain and obstacles while propagating, readers are likely to receive signals with bad quality. This drawback can decrease the positioning accuracy. Therefore, this study sorts out several issues that could affect the positioning accuracy and probes into the influence degree of distance errors via the experiment. The results show that the distance error within 3.34 m is as high as 90% of total estimated positions in a 10 m × 10 m region where four coordinate references are arranged.
Beside location function, RFID systems need to face users concerns for privacy issues. Improving the security and privacy of RFID system is only the way to solve this issue. Encrypted information passed between tags and readers can avoid the attacker getting the information of tags, but it still cannot avoid adversary tracking tags by radio fingerprint. To prevent tracking attack, mutual authentication must be employed in the process of communication between tags and readers.
The second part of this study integrates an authentication mechanism with public key encryption, embedded computation, and wireless communication technologies into an active RFID system. In the active RFID system, a secure RFID tag intermittently transmits cipher text to a RFID reader which then transmits in multi-hop relaying to a back-end platform to perform data comparison for authentication. Tame Transformation Signatures (TTS) is used in the system to protect the plain text from adversaries. The TTS algorithm is from the family of asymmetric public key systems, and it has the advantages of high security, high-speed key generation, signature, and suitability to embedded systems and is thus suitable to be used in our authentication system. Therefore, TTS has superiority such as better security, fast key generation, complex algorithm, and low signature delay. TTS algorithm can perform authentication more effectively in the active RFID system. There are three major contributions in the second part of this study. The first is a fully designed and implemented an active RFID system, which includes active tags and readers. In the RFID system, tags can stand by and keep working in long term after getting started. The second is a successfully implemented active RFID system with TTS cryptography and authentication mechanisms to protect the content in tags to ensure the security in multi-hop transmission. The last is adopting multi-hop relays to extend distance between Readers.

CHINESE ABSTRACT i
ABSTRACT ii
ACKNOWLEDGEMENTS iv
TABLE OF CONTENTS v
LIST OF TABLES vii
LIST OF FIGURES viii
Chapter 1 INTORDUCTION 1
1.1 A Brief Introduction of Radio Frequency Identification 1
1.1.1 History of RFID 2
1.1.2 RFID Applications 3
1.2 Motivation 7
1.3 Objective of Research and Method of Approach 7
1.4 Organization 9
Chapter 2 PREVIOUS WORKS 10
2.1 Indoor Positioning Mechanism 10
2.1.1 Time of Arrival (TOA) 10
2.1.2 Time Difference of Arrival (TDOA) 11
2.1.3 RSSI Based 12
2.1.4 Angulation 13
2.2 Systems and Solutions 13
2.3 Security and Privacy Issue 16
2.4 Protection strategy 17
2.4.1 Symmetric key cryptography 17
2.4.2 Public Key Cryptography 18
2.4.3 Authentication Protocol 22
2.5 Systems and Solutions 23
Chapter 3 POSITIONING SYSTEM 25
3.1 Positioning system implemented with RFID 25
3.2 Design of active tags and readers 27
3.3 The Positioning Algorithm 28
3.4 Experiment and Performance Evaluation 31
3.5 The Orientation of Antenna 32
3.6 Evaluation for Indoor and Outdoor Environmental Space 33
3.7 Discussion of the Ref-tag Distribution Density 36
3.7.1 The Movement of Track-tag 36
Chapter 4 AUTHENTICATION SYSTEM IN RFID 42
4.1. Authentication System Architecture 43
4.2. Public Key Certificate Tame Transformation Signatures Algorithm 46
4.2.1. Design of TTS in Authentication System 46
4.3. Design of RFID System, Readers And Tags 47
4.3.1. Design of RFID Tags 47
4.3.2. Design of RFID Readers 48
4.3.3. Design of Wireless Transmission Network 49
4.3.4. Design of Key Center and Back-End Platform 50
4.4. System Implementation and Performance Evaluation 51
4.4.1. Implementation of Authentication System 52
4.4.2. Security-Level Evaluation of Key Production, Signature, and Authentication Subsystems 52
4.4.3. Implementation of RFID Tags 55
4.4.4. Evaluation of Power Consumption for RFID Tags 57
4.4.5. Implementation of RFID Readers 57
4.4.6. Analysis of Successful Read Rates 58
4.4.7. Evaluation of Power Consumption for RFID Readers 60
4.4.8. Security of Proposed System 60
Chapter 5 CONCLUSIONS AND FUTURE WORK 62
REFERENCES 64

[1]J. Landt, “The history of RFID,” IEEE Potentials, vol. 24, no. 4, Oct./Nov. 2005, pp. 8-11.
[2]R. Weinstein, “RFID: A technical overview and its application to the enterprise,” IT Professional, vol. 7, no 3, May/Jun. 2005, pp. 27–33.
[3]R. Want, “An introduction to RFID technology,” IEEE Pervasive Computing, vol. 5, no. 1, Jan./Mar. 2006, pp. 25-33.
[4]M. R. Rieback, B. Crispo, and A. S. Tanenbaum, “The evolution of RFID security,” IEEE Pervasive Computing, vol. 5, no. 1, Jan./Mar. 2006, pp.62-69.
[5]M. Karkkainen, “Increasing efficiency in the supply chain for short shelf life goods using RFID tagging,” International Journal of Retail & Distribution Management, vol. 31, no. 10, 2003, pp. 529-536.
[6]Hong Kong Customs Moves Forward With E-Lock Plans. (May 4, 2012). Available on the World Wide Web at: 〈http://www.rfidjournal.com/article/view/9490〉
[7]B. Patkai and D. McFarlane, “RFID-based sensor integration in aerospace,” AUTO-ID LABS Research Report: AEROID-CAM-009, University of Cambridge, U.K., Nov. 2006.
[8]W. Yao, C. H. Chu, and Z. Li, “The adoption and implementation of RFID technologies in healthcare: A literature review,” Journal of Medical Systems, vol. 36, no. 6, Dec. 2012, pp. 3507-3525.
[9]RFID Vision in the DOD Supply Chain. (May/Jun. 2005). Available on the World Wide Web at: 〈http://www.almc.army.mil/alog/issues/MayJun05/rfid.html〉
[10]A. S. Voulodimos, C. Z. Patrikakis, A. B. Sideridis, V. A. Ntafis, and E. M. Xylouri, “A complete farm management system based on animal identification using RFID technology,” Computers and Electronics in Agriculture, vol. 70, no. 2, Mar. 2010, pp. 380-388.
[11]X. Lian, X. Zhang, Y. Weng, Z. Duan, and A. Z. Duan, “Warehouse logistics control and management system based on RFID,” in Proceedings of 2007 IEEE International Conference on Automation and Logistics, Jinan, China, Aug. 18-21, 2007, pp. 2907–2912.
[12]NYC’s Metropolitan Museum of Art Adopts RFID. (Jul. 26, 2011). Available on the World Wide Web at: 〈http://www.rfidjournal.com/article/view/8630/1〉
[13]London History Museum Adopts Technology of Future. (Aug. 16, 2011). Available on the World Wide Web at: 〈http://www.rfidjournal.com/article/view/8705/1〉
[14]J. Hightower and G. Borriello, “A survey and taxonomy of location systems for ubiquitous computing,” Technical Report: UW-CSE 01-08-03, Department of Computer Science and Engineering, University of Washington, Seattle, WA, USA, Aug. 2001.
[15]H. Liu, H. Darabi, P. Banerjee, and J. Liu, “Survey of wireless indoor positioning techniques and systems,” IEEE Transactions on Systems, Man, and Cyberentics—Part C: Applications and Reviews, vol. 37, no. 6, Nov. 2007, pp. 1067-1080.
[16]Q. Zhou, Theoretical and Mathematical Foundations of Computer Science, (Communications in Computer and Information Science, vol. 164), (Revised Selected Paper: A Survey on Indoor Positioning Technologies, pp. 198-206), Berlin, Heidelberg, Germany: Springer- Verlag Berlin Heidelberg, 2011.
[17]I. Amundson and X. D. Koutsoukos, “A survey on localization for mobile wireless Sensor Networks,” in Proceedings of the Second International Workshop on Mobile Entity Localization and Tracking in GPS-less Environments, Orlando, Florida, USA, Sep. 30-Oct. 3, 2009, pp. 235-254.
[18]J. A. Tauber, “Indoor location systems for pervasive computing,” MIT Area Exam Report, Massachusetts Institute of Technology, Cambridge, MA, USA, Aug. 2002.
[19]Hsi-Wen Wang, Shao-Shan Chiang, Jeng-HuaWu, and Ren-Guey Lee, “Design and evaluation of active RFID positioning system for home healthcare service,” Biomedical Engineering: Applications, Basis and Communications, vol. 19, No. 2, April 2007, pp. 105–115.
[20]G. Yanying, A. Lo, and L. Niemegeers, “A survey of indoor positioning systems for wireless personal networks,” IEEE Communications Surveys & Tutorials, vol. 11, no. 1, 2009, pp. 13-32.
[21]N. B. Priyantha, A. Chakraborty, and H. Balakrishnan, “The cricket location-support system,” in Proceedings of the Sixth Annual International Conference on Mobile Computing and Networking, Boston, MA, USA, Aug. 6-11, 2000, pp. 32-43.
[22]R. Want, A. Hopper, V. Falcao, and J. Gibbons, “The active badge location system,” ACM Transactions on Information Systems, vol. 10, no. 1, Jan. 1992, pp. 91-102.
[23]P. Bahl and V. N. Padmanabhan, “RADAR: An in-building RF-based user location and tracking system,” in Proceedings of the Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies, vol. 2, Tel-Aviv, Israel, Mar. 26-30, 2000, pp. 775-784.
[24]P. Bahl, V.N. Padmanabhan, and A. Balachandran, “Enhancements to the RADAR user location and tracking system,” Microsoft Research Technical Report: MSR-TR-2000-12, Microsoft Corp., Redmond, WA, USA, Feb. 2000.
[25]P. Bahl, V. N. Padmanabhan, and A. Balachandran, “A software system for locating mobile users: Design, evaluation, lessons,” Microsoft Research Technical Report, Microsoft Corp., Redmond, WA, USA, Apr. 2000.
[26]L. M. Ni, Y. Liu, Y. C. Lau, and A. P. Patil, “LANDMARC: Indoor location sensing using active RFID,” Wireless Network, vol. 10, no. 6, Nov. 2004, pp. 701-710.
[27]R. K. Pateriya, “The evolution of RFID security and privacy: a research survey,” in Proceedings of 2011 International Conference on Communication Systems and Network Technologies, Katra, Jammu, India, Jun. 3-5, 2011, pp. 115-119.
[28]J. Camenisch, S. Fischer-Hubner, and K. Rannenberg, Privacy and Identity Management for Life, (IFIP Advances in Information and Communication Technology, vol. 352), (Revised Selected Paper: 50 ways to break RFID privacy, pp. 192-205), Berlin, Heidelberg, Germany: Springer- Verlag Berlin Heidelberg, 2011.
[29]D. Giusto,A. Iera, G. Morabito, and L. Atzori, The Internet of Things, (Privacy challenges in RFID systems, pp. 397-407), NY, USA: Springer Science+Business Media, LLC, 2010.
[30]J. Garcia-Alfaro, G. Navarro-Arribas, and N. Cuppens-Boulahia, Data Privacy Management and Autonomous Spontaneus Security, (Lecture Notes in Computer Science, vol. 7122), (Privacy challenges in RFID, pp. 1-8), Berlin, Heidelberg, Germany: Springer-Verlag Berlin Heidelberg, 2012.
[31]S. Karthikeyan and M. Nesterenko, “RFID security without extensive cryptography,” in Proceedings of the Third ACM Workshop on Security of Ad Hoc and Sensor Networks, Alexandria, VA, USA, Nov. 7, 2005, pp. 63-67.
[32]A. Juels, “RFID security and privacy: A research survey,” IEEE Journal on Selected Areas in Communication, vol. 24, no. 2, Feb. 2006, pp. 381-394.
[33]C. Bettini, S. Jajodia, P. Samarati, and X. S. Wang, Privacy in Location-Based Applications: Research Issues and Emerging Trends, (Lecture Notes in Computer Science, vol. 5599), (Location Privacy in RFID Applications, pp. 127-150), Berlin, Heidelberg, Germany: Springer-Verlag Berlin Heidelberg, 2009.
[34]T. Dimitriou, “A lightweight RFID protocol to protect against traceability and cloning attacks,” in Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks, Athens, Greece, Sep. 5-9, 2005, pp. 59-66.
[35]Hsi-Wen Wang, Ren-Guey Lee, Chun-Chieh Hsiao, and Guan-Yu Hsieh, “Active RFID system with cryptography and authentication mechanisms,” Journal of Information Science and Engineering, vol. 26, no.4, July 2010, pp. 1323-1344.
[36]Hsi-Wen Wang, Chien-Chih Lai, Chun-Chieh Hsiao, Guan-Yu Hsieh, and Ren-Guey Lee, “Design and implementation of secure active RFID system with cryptography and authentication mechanisms,” in Proceedings of the 4th International Conference on Intelligent Information Hiding and Multimedia Signal Processing (IIH-MSP 2008), Harbin, China, Aug. 15–17, 2008, pp. 1273–1276.
[37]Y. K. Lee, L. Batina, D. Singelee, and I. Verbauwhede, “Low-cost untraceable authentication protocols for RFID,” in Proceedings of the Third ACM Conference on Wireless Network Security, Hoboken, NJ, USA, Mar. 22-24, 2010, pp. 55-64.
[38]Y. K. Lee, L. Batina, and I. Verbauwhede, “EC-RAC (ECDLP Based Randomized Access Control): Provably secure RFID authentication protocol,” in Proceedings of 2008 IEEE International Conference on RFID, Las Vegas, NA, USA, Apr. 16-17, 2008, pp. 97-104.
[39]Y. K. Lee, L. Batina, and I. Verbauwhede, “Untraceable RFID authentication protocols: Revision of EC-RAC,” in Proceedings of 2009 IEEE International Conference on RFID, Orlando, FL, USA, Apr. 27-28, 2009, pp. 178-185.
[40]A. Satoh and K. Takano, “A scalable dual-field elliptic curve cryptographic processor,” IEEE Transactions on Computers, vol. 52, no. 4, Apr. 2003, pp. 449-460.
[41]H. J. Fell and W. Diffie, “Analysis of a public key approach based on polynomial substitution,” in Proceedings of Advances in Cryptology (CRYPTO’85), Santa Barbara, CA, USA, Aug. 18-22, 1985, pp. 340-349.
[42]J. M. Chen and B. Y. Yang, “A more secure and efficacious TTS scheme,” in Proceedings of the Sixth International Conference on Information Security and Cryptology, Seoul, Korea, Nov. 27-28, 2003, pp. 320-338.
[43]B. Y. Yang, J. M. Chen, and Y. H. Chen, “TTS: High-speed signatures from low-end smartcards,” in Proceedings of 2004 Workshop on Cryptographic Hardware and Embedded Systems, Boston, MA, USA, Aug. 11-13, 2004, pp. 371-385.
[44]B. Y. Yang and J. M. Chen, “TTS: Rank attacks in Tame-like multivariate PKCs,” Cryptology ePrint Archive, 2004.
Available on the World Wide Web at: 〈http://eprint.iacr.org/2004/061.pdf〉
[45]J. Buchmann and J. Ding, Post-Quantum Cryptography, (Lecture Notes in Computer Science, vol. 5299), (Practical-Sized Instances of Multivariate PKCs: Rainbow, TTS, and lIC- Derivatives, pp. 95-108), Berlin, Heidelberg, Germany: Springer-Verlag Berlin Heidelberg, 2008.
[46]K. Ouafi and R. C. W. Phan, “Privacy of recent RFID authentication protocols,” in Proceedings of the Fourth International Conference on Information Security Practice and Experience, Sydney, Australia, Apr. 21-23, 2008, pp. 263-277.
[47]S. Piramuthu, “Lightweight cryptographic authentication in passive RFID-tagged systems,” IEEE Transactions on Systems, Man, and Cyberentics—Part C: Applications and Reviews, vol. 38, no. 3, May 2008, pp. 360-376.
[48]T. Sobh, K. Elleithy, A. Mahmood, and M. A. Karim, Novel Algorithms and Techniques in Telecommunications, Automation and Industrial Electronics, (Light Weight Cryptography and Applications, pp. 484-488), NY, USA: Springer Science+Business Media, B.V., 2008.
[49]Y. Seo, A Study on Scalable and Untraceable Authentication Protocol of RFID Tags, Daejeon, Korea: M.S. Thesis, Information and Communications University, 2007.
[50]B. Y. Yang, C. M. Cheng, B. R. Chen, and J. M. Chen, “Implementing minimized multivariate PKC on low-resource embedded systems,” in Proceedings of the Third International Conference on Security in Pervasive Computing, York, UK, Apr. 18-21, 2006, pp. 73-88.
[51]K. Nohl and D. Evans, “Quantifying information leakage in tree-based hash protocols,” in Proceeding of the Eighth International Conference on Information and Communications Security, Raleigh, NC, USA, Dec. 4-7, 2006, pp. 228-237.
[52]M. Feldhofer and C. Rechberger, “A case against currently used hash functions in RFID protocols,” in Proceedings of the 2006 International Conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET, Montpellier, France, Oct. 29-Nov. 3, 2006, pp. 372-381.
[53]G. Avoine and P. Oechslin, “A scalable and provably secure hash-based RFID protocol,” in Proceedings of the Third IEEE International Conference on Pervasive Computing and Communications Workshops, Hawaii, USA, Mar. 8-12, 2005, pp. 110-114.
[54]M. Ohkubo, K. Suzuki, and S. Kinoshita, “Efficient hash-chain based RFID privacy protection scheme,” in Proceedings of the Sixth International Conference on Ubiquitous Computing, Nottingham, England, Sep. 7-10, 2004.
[55]J. Ayoade, “Security implications in RFID and authentication processing framework,” Computers & Security, vol. 25, no. 3, May 2006, pp. 207-212.
[56]M. Feldhofer, S. Dominikus, and J. Wolkerstorfer, “Strong authentication for RFID systems using the AES algorithm,” in Proceedings of 2004 Workshop on Cryptographic Hardware and Embedded Systems, Boston, MA, USA, Aug. 11-13, 2004, pp. 257-370.
[57]K. Wong, P. Hui, and A. Chan, “Cryptography and authentication on RFID passive tags for apparel products,” Journal Computers in Industry, vol. 57, no. 4, May 2006, pp. 342-349.
[58]M. Burmester, T. van Le, and B. de Medeiros, “Provably secure ubiquitous systems: Universally composable RFID authentication protocols,” in Proceedings of the Second International Conference on Security and Privacy in Communication Networks, Baltimore, MD, USA, Aug. 28-Sep. 1, 2006, pp. 1-9.