臺灣博碩士論文加值系統

科技的進步，帶來無比的便利，但也因此產生了不可避免的問題。近年來由於人權意識的高漲，隱私權的保護受到各界熱烈的討論。因此本文將針對隱私權的保護，分別在兩個不同的系統上作研究與探討，其一是有關於電子商務代理人系統中客戶的個人隱私的保護，其二是有關於RFID系統上使用者位置隱私的研究。
近年來由於資訊技術的快速發展，行動代理人技術已逐漸成熟。行動代理人運用在電子商務上更是未來的趨勢。然而行動代理人的安全議題一直受到各界的討論。在電子商務行動代理人機制上，客戶的個人隱私更是討論的重點，因此本文特別加強對客戶的隱私權保護，並提出一個更完善，且更有效率的機制，讓電子商務代理人系統的運作可以快速的運用在網際網路上。
而RFID 被稱為「下個世代的 barcode」，具備了不需要視覺接觸就能夠遠距離辨識身份的能力，將這項技術運用在各種應用上能帶來前所未有的便利。不過非視覺接觸的特性之下卻隱藏著RFID標籤上的資料隨著空氣中的電磁波在無形中被發送出來，透過收集這些資料，產品使用者的所在位置便會暴露無疑。因此本論文中，我們提出一個更安全，且更有效率的機制來保障使用者的位置隱私。

Mobile agent technology is going to play an important role in the future electronic commerce due to the characteristics of mobility and autonomy of the agents. Therefore, security issues should be solved before we use this new technology. However, privacy protection of customers is seldom considered. In this paper, we focus on the privacy protection of customers. Moreover, we improve our scheme more feasible to the modern world.
However, RFID system is also gaining popularity and attracting interest from both the enterprises and academic institutes. But now, we face several security problems and challenges in RFID systems. In human centric applications, location privacy problem is the most important issue that should be solved. In this paper, we propose a RFID authentication scheme that achieves the goal of location privacy. Moreover, our scheme can be implemented with low-cost and high efficiency.

Chapter 1 Introduction 1
1.1 Electronic Commerce and Customer Privacy 1
1.2 Privacy and Security in RFID System 2
1.3 The Thesis Architecture 2
Chapter 2 Overview of Mobile Agent 4
2.1 Introduction 4
2.2 Components of a Mobile Agent System 5
2.3 Advantages for Using Mobile Agents 6
2.4 Mobile Agent Applications 8
2.5 Security Requirements for Agent-based Electronic Transaction 10
Chapter 3 Proposed Agent-based Protocol 12
3.1 Frame of Our Protocol 12
3.2 Detail Process of Our Protocol 15
3.2.1 Registration Phase 15
3.2.2 Agent issuing Phase 16
3.2.3 Agent executing Phase 17
3.2.4 Result reporting Phase 18
3.3 Analysis of Our Protocol 19
3.3.1 Anonymity 19
3.3.2 Unforgeability 20
3.3.3 Non-repudiation 21
3.3.4 Feasibility 21
3.4 Conclusion 22
Chapter 4 Overview of RFID System 23
4.1 RFID System Components 23
4.2 RFID Applications 24
Chapter 5 Security Issues of RFID system 27
5.1 Secure Schemes 27
5.1.1 Hash Chain type 28
6.1.2 Random Hash Lock type 28
6.1.3 Random ID Update type 29
5.2 Security Issues 31
Chapter 6 Proposed RFID Protocol 32
6.1 Frame of Our Protocol 32
6.2 Detail Process of Our Protocol 33
6.2.1 Reading Phase 34
6.2.2 Updating Phase 35
6.3 Analysis of Our Protocol 36
6.3.1 Location Privacy 36
6.3.2 Replay Attack 37
6.3.3 Forward Secrecy 37
6.3.4 Feasibility 38
6.4 Conclusion 39
Chapter 7 Conclusion 41
Reference 42

1.D. Henrici and P. Müller “Hash-based Enhancement of Location Privacy for Radio-Frequency Identification Devices using Varying Identifiers.” Proceedings 2nd of the IEEE Annul Conference on Pervasive Computing and Communications Workshops (PERCOMW’04), 2004.
2.M.N. Huda, S. Yamada and E. Kamioka “Privacy protection in mobile agent based service domain” Information Technology and Applications, 2005. ICITA 2005. Third International Conference on Volume 2, 4-7 July 2005, pp. 482-487.
3.S. Inoue and H. Yasuura, “Toward the Digitally Named World with Security and Convenience Using RFID Tags”, Research Reports on Information Science and Electrical Engineering of Kyushu University. Vol. 7, No. 2, September 2002.
4.W. Jansen and T Karygiannis “NIST Special Publication 800-19 - Mobile Agent Security” Technical Report MD 20899, National Institute of Standards and technology Computer Security Division Gaithersburg, 1999.
5.H.W. Kim, S.Y. Lim, H.J. Lee “Symmetric Encryption in RFID Authentication Protocol for Strong Location Privacy and Forward-Security” Hybrid Information Technology, 2006. ICHIT''06. Vol. 2. International Conference on Volume 2, pp. 718-723, 2006.
6.D.B. Lange and M. Oshima “Seven good reasons for mobile agents” March 1999 Communications of the ACM, Volume 42 Issue 3 1999.
7.Y.Z. Li, Y.B. Cho, N.K. Um and S.H. Lee “Security and Privacy on Authentication Protocol for Low-cost RFID” Computational Intelligence and Security, 2006 International Conference on Volume 2, 3-6 Nov. 2006 , pp. 1101-1104.
8.A. Masters, K. Michael “Humancentric Applications of RFID Implants: The Usability Contexts of Control, Convenience and Care” Mobile Commerce and Services, 2005. WMCS ''05, pp.32-41, 2005.
9.J. Ma, A. Nakamura and R. Huang ”A Random ID Update Scheme to Protect Location Privacy in RFID-based Student Administration Systems” Database and Expert Systems Applications, Aug. 2005, pp. 22-26.
10.P.J. Marques, L.M. Silva and J.G. Silva “Security mechanisms for using mobile agents in electronic commerce” Reliable Distributed Systems, 1999. Proceedings of the 18th IEEE Symposium on 19-22 Oct 1999, pp. 378-383.
11.K. Osaka, T. Takagi, K. Yamazaki, O. Takahashi “An Efficient and Secure RFID Security Method with Ownership Transfer” Computational Intelligence and Security, 2006 International Conference on Volume 2, 3-6 Nov, pp. 1090-1095, 2006.
12.N. Park, H. Kim, K. Chung and S. Sohn “Design of an Extended Architecture for Secure Low-Cost 900MHz UHF Mobile RFID Systems” Consumer Electronics, 2006. ISCE ''06. 2006 IEEE Tenth International Symposium , pp. 1-6, 2006.
13.N. Park, H. Lee, H. Kim and D. Won ”A Security and Privacy Enhanced Protection Scheme for Secure 900MHz UHF RFID Reader on Mobile Phone” Consumer Electronics, 2006. ISCE ''06. 2006 IEEE Tenth International Symposium , pp. 1-5, 2006.
14.J. Saito, J.C. Ryou and K. Sakurai, ”Enhancing Privacy of Universal Re-encryption Scheme for RFID Tags”, L. T. Yang et al. (Eds.): EUC 2004, LNCS 3207, pp. 879-890, 2004.
15.S.A. Weis, S.E. Sanma, R.L. Rivest and D.W. Engels “Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems”
16.Y.H. Wang, W.N. Wang, C.A. Wang and C. Cheng “An agent based e-marketplace over e-business” Cyber Worlds, 2002. Proceedings. First International Symposium on 6-8, Nov 2002 , pp. 303-310.
17.C. Wang and H.F. Leung “Mobile agents for secure electronic commerce transactions with privacy protection of the customers” e-Technology, e-Commerce and e-Service, 2005. EEE ''05. Proceedings. The 2005 IEEE International Conference on29 March-1 April 2005, pp. 530-535.
18.Pew Internet and American Life Project, http://www.pewinternet.org/
19.RFID Technology, Privacy Issues, http://itpro.nikkeibp.co.jp/free/NBY/RFID/20040823/1/
20.RFID wikipedia http://en.wikipedia.org/wiki/RFID
21.Census Bureau http://www.census.gov/
22.Electronic Commerce and Consumer Privacy http://www.ffiec.gov/ffiecinfobase/resources/elect_bank/fdi-fil-86-98_e_commerce_consumer_priv.pdf