臺灣博碩士論文加值系統

世界貿易全球化的時代來臨，這個全球化的趨勢使得供應鏈中的物流特別受到重視，因此供應鏈管理的效率已變成重要的議題；而無線射頻識別系統(Radio Frequency Identification, RFID)，所具備優越的供應鏈監控管理機制，正好有助於改善供應鏈管理效率的問題，因此已有許多學者開始在商品的所有權移轉協定(Ownership Transfer)上有所著墨，而我們將植基於先前學者工作，探討各式的所有權移轉模式。
隨著智慧型手機逐漸興盛，也取代了傳統行動手機的市場，主要原因為使用者可以更簡單、便利地操作，其中最誘人的是智慧型手機搭載近距離無線通訊技術(Near Field Communication, NFC)，它是由RFID演變而來。本篇論文首先提出三套不同交易情境的所有權移轉協定，以及一套有限制性的存取協定，再將這些協定實作於具NFC技術的智慧型手機，最後有效運作於供應鏈上的各個角色之間，以及達到嵌有電子標籤的商品不會被攻擊者竄改或遭受其他安全威脅。

In this era of world trade globalization, logistics of supply chain becomes more and more important; thus, the efficiency of supply chain management becomes an important issue. The excellent supply chain monitoring mechanism of Radio Frequency Identification (RFID) could employ to improve the problem of supply chain management efficiency, many scholars studied ownership transfer protocol in supply chain. Based on previous studies, all kinds of ownership transfer models would be discussed in this thesis.
Smartphones become more and more popular and almost replace the traditional cell phone market, the major reason is that smartphones are user-friendly. The most attracting point of smartphone is that Near Field Communication (NFC) technology is embedded on it, where NFC is evolved from RFID. This thesis first proposed three ownership transfer protocols of different transaction scenarios and an access control protocol. Then, these protocols were practically implemented to the smartphones with NFC technology. Last but not least, these protocols were implemented among each role of supply chain effectively so as to avoid products with electronic tags being altered by attackers or suffering from other security threats.

中文摘要 I
ABSTRACT II
目錄 III
表目錄 V
圖目錄 V
第一章 緒論 1
1-1 研究背景與動機 1
1-2 研究目的 2
1-3 論文架構 2
第二章 文獻探討 3
2-1 RFID系統應用所有權移轉於供應鏈的安全議題 3
2-1-1 RFID系統基本架構與運作原理 3
2-1-2 RFID系統應用所有權移轉於供應鏈 5
2-2 新舊擁有者直接進行所有權移轉模式 9
2-3 透過可信任第三方進行所有權移轉模式 12
第三章 實作環境背景介紹 14
3-1 NFC技術 14
3-1-1 NFC技術的標準 14
3-1-2 NFC技術的應用範圍 16
3-2 適用於NFC的ISO 14443電子標籤 17
第四章 NFC系統實作之基礎 24
4-1 JAVA開發環境下如何進行簽章 24
4-1-1 產生RSA公私鑰 24
4-1-2 製作RSA簽章 26
4-1-3 驗證RSA簽章 27
4-2 使用NFC讀寫裝置存取ISO 14443A電子標籤 29
4-2-1 開啟NFC監聽功能 29
4-2-2 讀取ISO 14443A電子標籤的UID 30
4-2-3 讀寫ISO 14443A電子標籤的資料區塊 31
4-3 使用NFC讀寫裝置點對點存取 33
第五章 所有權移轉系統之設計 35
5-1 背景介紹 35
5-2 符號描述與空間規劃 35
5-3 使用NFC技術的電子標籤所有權移轉協定-適用於B2B商品交易 38
5-4 使用NFC技術的電子標籤所有權移轉協定-適用於B2C商品交易 42
5-5 使用NFC技術的電子標籤所有權移轉協定-適用於C2C商品交易 45
5-6 使用NFC技術的電子標籤存取控制協定-適用於有限制性的存取者 48
5-7 安全性分析 50
5-7-1 匿名性 50
5-7-2 保護前向安全 51
5-7-3 防止重送攻擊 51
5-7-4 標籤刪除 51
5-7-5 所有權移轉 51
5-7-6 不可否認 52
5-7-7 實用性 53
第六章 所有權移轉系統之實作 54
6-1 B2B所有權移轉系統之實作 55
6-2 B2C所有權移轉系統之實作 58
6-3 C2C所有權移轉系統之實作 61
6-4 程式介紹 66
6-4-1 PublicPrivateKey.java 66
6-4-2 Sign.java 67
6-4-3 ConnectTag.java 67
6-4-4 ManuSignGeneActivity.java 68
6-4-5 RetaSignGeneActivity.java 69
6-4-6 OwnerOTCKActivity.java 70
6-4-7 OwnerOTActivity.java 70
6-4-8 DB.java 71
第七章 結論與未來工作 72
7-1 結論 72
7-2 未來工作 72
參考文獻 73

[1]K. Osaka, T. Takagi, K. Yamazaki, and O. Takahashi, “An Efficient and Secure RFID Security Method with Ownership Transfer”, Computational Intelligence and Security, 2006 International Conference on vol. 2, 3-6 Nov, pp. 1090-1095, 2006.
[2]H. Lei and T. Cao, “RFID Protocol Enabling Ownership Transfer to Protect against Traceability and DoS Attacks”, The First International Symposium on Data, Privacy, and E-Commerce (ISDPE 2007), pp. 508-510, Nov. 2007.
[3]E. J. Yoon and K. Y. Yoo, “Two Security Problems of RFID Security Method with Ownership Transfer”, NPC, 2008 IFIP International Conference on Network and Parallel Computing, pp.68 - 73, 2008.
[4]H. B. Chen, W. B. Lee, Y. H. Zhao, and Y. L. Chen, “Enhancement of the RFID Security Method with Ownership Transfer”, Proceedings of the 3rd International Conference on Ubiquitous Information Management and Communication, January 15-16, 2009.
[5]B. Y. Song and C. J. Mitchell, “Scalable RFID security protocols supporting tag ownership transfer”, Computer Communications, vol. 34, pp.556-566, 2011.
[6]K.H.S. Sabaragamu Koralalage, S. Mohammed Reza, J. Miura, Y. Goto, and J. Cheng, “POP Method: An Approach to Enhance the Security and privacy of RFID Systems Used in Product Lifecycle with an Anonymous Ownership Transferring Mechanism”, Proceedings of the 2007 ACM symposium on Applied computing(SAC ''07), pp.270-275, 2007.
[7]P. Peris-Lopez, J. C. Hernandez-Castro, J. M. E. Tapiador, T. Y. Li, and Y. J. Li, “Vulnerability analysis of RFID protocols for tag ownership transfer”, Computer Networks, vol. 54, pp. 1502-1508, 2010.
[8]G. Kapoor,W. Zhou, and S. Piramuthu, “Multi-tag and multi-owner RFID ownership transfer in supply chains”, Decision Support Systems, vol. 52 Issue: 1, pp.258-270, Dec. 2011.

[9]D. Molnar, A. Soppera and D. Wagner, A Scalable, “Delegatable Pseudonym Protocol Enabling Ownership Transfer of RFID Tags”, Workshop in Selected Areas in Cryptography, Aug. 2005.
[10]S. Fouladgar and H. Afifi, “A Simple Delegation Scheme for RFID Systems (SiDeS)”, in Proceedings of IEEE International Conference on RFID, pp. 1–6, Mar. 2007.
[11]S. Fouladgar, H. Afifi, “A simple privacy protecting scheme enabling delegation and ownership transfer for RFID tags”, Journal of Communications vol. 2, No. 6, pp.6-13, Nov. 2007.
[12]S. Fouladgar, and H. Afifi, “An Efficient Delegation and Transfer of Ownership Protocol for RFID Tags”, in Proceedings of the first International EURASIP Workshop on RFID Technology, pp. 59–62, Sept. 2007.
[13]M. H. Yang, “Across-authority lightweight ownership transfer protocol”, Electronic Commerce Research and Applications, vol. 10 Issue 4, July 2011.
[14]G. Kapoor and S. Piramuthu, “Single RFID Tag Ownership Transfer Protocols”, IEEE Transactions on Systems, Man, and Cybernetics, Issue 99, pp.1-10, 2011.
[15]M. H. Yang and H. Y. Hu, “Protocol for ownership transfer across authorities with the ability to assign transfer target”, Security and Communication Networks, Vol.0 , No.0, 2011.
[16]N. Jayanth, Sidney, “Compressor Warranty Method”, US Patent, No. 0238388 A1,Oct. 2006.
[17]Flavio D. Garcia, Gerhard Koning Gans, Ruben Muijrers, Peter Rossum, Roel Verdult, Ronny Wichers Schreur, Bart Jacobs, “Dismantling MIFARE Classic”, In: Jajodia, S., Lopez, J.(Eds.) ESORICS 2008. LNCS, vol. 5283, pp. 97–114, 2008.
[18]Y. H Lien, C. T. Hsi, X. Leng, J. H. Chiu, H. K. C. Chang,“An RFID Based Multi-batch Supply Chain Systems”, Wireless Pers Commun, pp. 1-21, 2010.
[19]N.W. Lo and K.H. Yeh, “Mutual RFID Authentication Scheme for Resource-constrained Tags”, Journal of Information Science and Engineering, Vol. 26, No. 5, pp. 1875-1889, 2010.

[20]Y. J. Zuo, “Changing Hands Together: A Secure Group Ownership Transfer Protocol for RFID Tags”, Hawaii International Conference on System Sciences, pp. 1-10, Jan. 2010.
[21]International Organization for Standardization, “Proximity cards. ISO/IEC 14443”, 2003.
[22]ISO/IEC18092, Information Technology - Telecommunications and information exchange between systems - Near Field Communication - Interface and Protocol (NFCIP-1), International Organization for Standardization Std., 2004.
[23]ECMA-340, Near Field Communication Interface and Protocol (NFCIP- 1), European Computer Manufacturer Association Std., 2004.
[24]ECMA-352, Near Field Communication Interface and Protocol (NFCIP- 2), European Computer Manufacturer Association Std., 2010.
[25]M.Roland, J.Langer. “Digital Signature Records for the NFC Data xchange Format”, in Proceedings of Second International Workshop on Near Field Communication , pp. 71-76, 2010.
[26]NFC Forum, http://www.nfc-forum.org/home/。(查詢時間：2012/06/18)
[27]Near Field Communications World (2011, January). “Stanford researchers develop first Android NFC P2P apps”, http://www.nfcworld.com/2011/01/31/35785/stanford-researchersdevelop-first-android-nfc-p2p-apps/。(查詢時間：2012/06/18)
[28]NXP Semiconductors, http://www.tw.nxp.com/documents/data_sheet/MF1S50YYX.pdf。(查詢時間：2012/06/18)
[29]精實新聞, “Wal-Mart 2010年8月將為衣物加上RFID標籤”, http://www.moneydj.com/kmdj/news/newsviewer.aspx?a=59a94cf0-2dfe-4a92-8694-0d0b44627f0a。(查詢時間：2012/06/18)
[30] 徐春進, 史敦仁, “捷運系統票證加密與通訊安全”, 捷運技術半年刊, No.38, p214-223, 2008.