臺灣博碩士論文加值系統

無線射頻辨識(RFID, Radio Frequency Identification)系統是目前科技界熱門的主題之一，這是因為RFID能夠應用的範圍非常的廣，不論是供應鏈、圖書館、停車場、電子收費、醫療管理、門禁管理、居家看護等等，RFID的應用可以為我們的生活帶來非常大的便利性，但是當RFID充份融入我們的生活之後其安全性及隱私的問題就開始受到重視。有學者提到在一般的電子標籤(Tag)只要接收到讀取器(Reader)的訊號就會立刻回傳ID(TagID)，因此就有學者提出一些Tag認證方式，目的在保護Tag不受到重送攻擊及竊聽威脅。
在未受保護的RFID系統中是使用非常直接的通訊方式來取得TagID，也就是Reader提出一次要求Tag送出TagID的訊息，Tag就回送一次TagID如此一直重覆，這樣子的設計是一個普通的RFID系統所使用的方法，線路設計是最單純的、每秒所能夠讀取Tag數量將會是最多的、而且Tag的成本最低。
相對的一個受到保護的RFID系統，為了達到保護通訊安全必定會多了許多的加密計算過程以及交握次數，因此一個受保護的RFID系統必需盡可能的提高每秒讀取Tag的數量、並盡可能的降低Tag成本以及兼顧安全性等要求。
在本論文中將提出一個高效率、低成本並兼顧安全性的RFID通訊方式。

關鍵字：無線射頻辨識系統、認證協定、資訊安全、隱私安全

RFID (Radio Frequency Identification) is one of the most promising NFC (Near Field Communication) communication technologies for ubiquitous network societies in recent year as RFID tag not only features identification、renewable and reusable but also high security that has been increasing its applications in the markets, including supply chain、retail、transportation、security、electronic toll system、library management system and healthcare. Our daily life would therefore be more convenient due to such applications mentioned early on. However, security and privacy will be an issue while RFID has become part of our daily life. Researchers have put out a warning about it as RFID tag would instantly callback ID once RFID tag received a signal from any RFID Reader. They have therefore proposed some authentication protocols to protect RFID tags from being eavesdropped and replaying attacked. The most straight way of reading RFID tag ID for a general unprotected RFID system is to ask tags recall ID immediately. This kind of tags design would be simpler, the number of tags read per second would be larger and its costs would be lower. On the other hand, RFID tags with the protection of authentication protocol design would be more complex, smaller number tags read per second and higher costs as a result. In this thesis, we propose a new way of authentication protocol in comparison with the others related to the efficiency and security.

Keyword : RFID, authentication, protocol, security, private

第一章 緒論 1
1.1 研究背景 1
1.2 研究動機 2
1.3 研究目的 3
1.4 醫療記錄之應用 4
1.4.1 醫療記錄醫護人員之應用 4
1.4.2 醫療記錄就診病患之應用 5
1.4.3 隱私安全的重要性 5
1.5 研究限制與範圍 6
1.6 研究架構及流程與步驟 6
1.6.1 研究主題 6
1.6.2 文獻探討 6
1.6.3 實作驗證 6
1.6.4 驗證與結論 8
1.7 論文結構 8
第二章 相關文獻探討 9
2.1.1 RFID歷史概述 9
2.1.2 RFID發展現況 9
2.1.3 RFID系統基本概念 10
2.2 使用加密演算法之認證協定 11
2.2.3 Mutual three-pass authentication protocol 12
2.2.4 Key diversification (金鑰多樣化) 13
2.3 使用雜湊函數加密方式之認證協定 16
第三章 論文主體 19
3.1 安全需求 19
3.2 本文認證協定 19
3.3 本文認證協定討論 21
3.4 本文認證協定的缺點及改進 21
第四章 驗證與分析 24
4.1 模擬器功能介紹 24
4.1.1 RFID認證協定模擬器_Reader端 24
4.1.2 RFID認證協定模擬器_Tag端 24
4.1.3 RFID認證協定模擬器_流程圖 25
4.1.4 RFID認證協定模擬器_監看端 25
4.2 RFID認證協定模擬器實際操作 25
4.2.1 RFID認證協定模擬器_監看端實際操作 26
4.2.2 RFID認證協定模擬器_Reader端實際操作 29
4.2.3 RFID認證協定模擬器_Tag端實際操作 31
4.2.4 RFID認證協定模擬器_流程圖實際操作 34
4.3 驗證 38
4.3.1 效率比較 38
4.3.2 成本比較 38
4.3.3 亂數r驗證 39
第五章 結論與未來展望 42
5.1 結論 42
5.2 未來展望 42
參考文獻 43
誌謝 45
簡歷 46

[1]鄭同伯著, RFID EPC 無線射頻辨識完全剖析, 臺北市：博碩文化, 初版, Nov 2004.
[2] 溫榮弘譯, 無線通訊技術與RFID, 臺北市：全華科技圖書股份有限公司, 初版 Aug 2004.
[3]巫坤品, 王青青, “密碼學與網路安全-原理與實務”, 臺北市,臺灣培生教育出版社,2004.
[4]K. Finkenzeller, “RFID Handbook: Fundamentals and Applications in Contactless Smart Cards and Identification”, 2nd Ed.期刊論文
[6]S. A. Weis, E. S. Sarma, R. L. Rivest, and D.W. Engels, “Security and Privacy Aspects of Low-Cost RadioFrequency Identification Systems”, Security in PervasiveComputing, 2003.
[7]M. Feldhofer, “An authentication protocol in a security layer for RFID smart tags”, Proceedings of IEEE MELECON, Vo. 2, P. 759 – 762, 2004
[8]S. Sarma, and D. W. Engels, “RFID Systems, Security & Privacy Implications”, Auto-ID center white paper, Feb 2003. http://www.autoidlabs.org.
[9]Gwo-Ching Chang,” A Feasible Security Mechanism for Low Cost RFID Tags” , Mobile Business, 2005. ICMB 2005. International Conference on11-13 July 2005 Page(s):675 – 677.
[10]Xingxin Gao, Zhe Xiang, Hao Wang, Jun Shen, Jian Huang, Song Song, “An Approach to security and privacy of RFID system for supply chain ”, IEEE International Conference on E-Commerce Technology for Dynamic E-Business, 2004 Page(s):164-168.
[11]Auto-ID Center, “860MHz-960MHz Class I Radio Frequency Identification Tag Radio Frequency & Logical communication Interface Specification Proposed Recommendation Version 1.0.0” , Technical Report MIT-AUTOID-TR-007, Nov. 2002
[12]Sozo Inoue, Hiroto Yasuura, “ RFID privacy using usercontrollable uniqueness” , RFID Privacy Workshop @ MIT,2003
[13]Damith C. Ranasinghe, Daniel W. Engels, Peter H. Cole, “Security and Privacy: Modest Proposals for Low- Cost RFID Systems”
[14]Ari. Juels, “Privacy and Authentication in Low-Cost RFID Tags”, submission 2003.
[15]Miyako Ohkubo, Koutarou Suzuki and Shingo Kinoshita, “Forward-secure RFID Privacy Protection using Hash Chain”, submitted 2003.