臺灣博碩士論文加值系統

無線射頻識別(RFID)技術自二次大戰首度用來識別敵我(Friend or Foe)戰機系統啟用後，在1960年初首度應用於電子監視防盜系統(Electronic Article Surveillance)，商業化應用於此開端，1970年初美國政府用來追蹤核武及其他保護材料，歷經數十年的技術改良演進，晶片型(microchips)電子標籤，旋風似的橫掃全球，電子標籤無所不在(ubiquitous)，蓄勢待發；未來它將取代1973年所發展的通用產品碼-條碼(Universal Product Code-barcodes)功能，成為消費市場主流。
無線射頻識別技術應用廣泛，未來發展潛能無可限量。然而，攸關網路安全與隱私權相關問題，至今仍缺乏法律規範；因此，本研究以資訊安全與公共政策的角度，就技術面與政策面進行分析、探討無線射頻識別技術之網路安全與隱私權問題；在技術層面，我們利用洗牌原理提出解決方案；在政策層面，我們提出建立「識別資訊權利法案」之建議；期待能因此改變消費者疑慮，創造生產與消費雙贏之契機，迎接新世代的消費型態來臨。

RFID was first used during the world warⅡto identify Friend or Foe systems on the British aircraft. In the 1960s, the first commercialized Electronic Article Surveillance systems were deployed. In the 1970s, the U.S. Government applied this technology to tracking nuclear and safeguards materials [5]. After several decades of technologies improvement, RFID is ubiquitous; it is globally adopted and deployed throughout the US and much of developed countries. Soon after, microchip RFID seems to become a major vehicle for consumer marketplace to supplant Universal Product Code -barcodes.
RFID tags can be scanned at a distance and without the tag holder's knowledge or consent, as the RFID rapidly widens into every sector of commerce and society, the lack of privacy protections for data interchange in current applications, which have enormous impacts on data security and personal privacy. In this thesis, we present a brief introduction of RFID systems and their operation at first. And then we describe both security and privacy risks and how to secure an RFID's system. We propose using Cascade Perfect Shuffle and Identity Information Bill of Rights to protect our assets. We believe that it can minimize apprehensive for confidentiality, furthermore benefit both manufactures and consumers.

目 錄
摘 要…………………………………………………………………………i

目 錄…………………………………………………………………………iii

圖 目 錄…………………………………………………………………………iv

表 目 錄…………………………………………………………………………v

第 一 章 緒 論…………………………………………………………………1

第 二 章 相關技術與文獻探討 ………………………………………………3

一、無線射頻識別基本原理與應用……………………………………………3
二、無線射頻系統分類…………………………………………………………5
三、無線射頻識別技術的國際標準化與發展趨勢……………………………8
四、無線射頻識別技術的潛在問題分析………………………………………11

第 三 章 電子標籤安全性與私密性 …………………………………………13

一、電子標籤的安全性分析 …………………………………………………13
二、電子標籤的私密性分析 …………………………………………………14
三、電子標籤的安全機制探討 ………………………………………………15
四、電子標籤目前的安全性和私密性標準 …………………………………16

第 四 章 電子標籤安全性與私密性之解決方案 ……………………………18

一、技術解決方案………………………………………………………………18
二、串流式完美洗牌成本分析…………………………………………………23
三、政策解決方案………………………………………………………………24

第 五 章 電子標籤電磁輻射安全標準分析 …………………………………27

第 六 章 結論與建議 …………………………………………………………31

參考書目…………………………………………………………………………32

[1]Bhuptani, Manish and Moradpour, Shahram. RFID Field Guide, Deploying Radio Frequency Identification Systems. Prentice Hall, 2005.
[2]Buchmann, Johannes A. Introduction to Cryptography, 2nd ed. Springer, 2004.
[3]Finkenzeller, Klaus. RFID Handbook: Fundamentals and Applications in Contactless Smart Cards and Identification, 2nd ed. John Wiley & Sons, 2003.
[4]Garfinkel, Simson and Rosenberg, Beth. RFID Applications, Security, and Privacy. Addison Wesley 2006.
[5]Garfinkel, Simson. Juels, Ari and Pappu, Ravi. RFID Privacy: An Overview of Problems and Proposed Solutions. IEEE Security & Privacy, Volume 3, Issue 3, 2005.
[6]Glover, Bill and Bhatt, Himanshu. RFID Essentials, 1st ed. O’Reilly Media, 2006.
[7]Hsieh, Tsu-Miin. Yeh, Yi-Shiung. and Lin, Chu-Hsing. One-Way Hash Functions with Changeable Parameters. Information Sciences 118(1999) 223-239.
[8]ISO/IEC 15693 Standard, 2003.
[9]Juels, Ari. RFID Security and Privacy: A Research Survey. RSA Lab, 28 September 2005.
[10]Nadeem, M. Hamnerius, Y. and Persson, M. Magnetic Field from Electronic Article Surveillance Devices is the Basic Restriction Exceed? Department of Electromagnetics, Chalmers University of Technology, Sweden.
[11]Ohkubo, Miyako. Suzuki, Koutarou and Kinoshita, Shingo. Cryptographic Approach to "Privacy- Friendly" Tags. NTT Labs.
[12]Phillips, Ted. Karygiannis, Tom. and Kuhn, Rick. Security Standards for the RFID Market. IEEE Security & Privacy, Volume 3, Issue 6, 2005.
[13]Sarma, Sanjay E. Weis, Stephen A. and Engels, Daniel W. Radio-Frequency Identification: Security Risks and Challenges. RSA Lab, Volume 6, No.1 2003.
[14]Schneier, Bruce. Applied Cryptography: Protocols, Algorithms, and Source Code in C, 2nd ed. John Wiley & Sons, 1996.
[15]Simitian. Senate Bill No. 682, Identity Information Protection Act of 2005.
[16]Weis, Stephen A. Security and Privacy in Radio-Frequency Identification Devices. MIT, May 2003.
[17]Weis, Stephen A. Sarma, Sanjay E. Rivest, Ronald L. and Engels, Daniel W. Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems. LNCS, Vol 2802, 2003.
[18]Website. http://cdnet.stpi.org.tw/
[19]Website. http://www.epcglobalinc.org
[20]Website. http://www.hitachi.com
[21]Website. http://www.rfidjournal.com
[22]Website. http://www.semiconductors.philips.com
[23]Website. http://www.zebra.com
[24]刁建成，RFID原理與應用，全華，2005年
[25]何中庸，非接觸型IC卡，全華，2005年
[26]邱瑩青，RFID實踐非接觸式智慧卡系統開發，學貫，2005年
[27]溫榮宏，無線通信技術與RFID，全華，2004年
[28]鄭同伯，RFID EPC 無線射頻辨識完全剖析，博碩文化，2004年
[29]賴溪松等人，近代密碼學及其應用，松崗，2001年
[30]交通部電信總局低功率射頻電機技術規範，94年3月.