CN104660414A

CN104660414A - Ciphertext storage method and technique in RFID

Info

Publication number: CN104660414A
Application number: CN201510054722.XA
Authority: CN
Inventors: 李子臣; 刘博雅; 杨亚涛; 刘年义
Original assignee: Beijing Peace Is As Mountain Culture Science And Technology Ltd
Current assignee: Beijing Peace Is As Mountain Culture Science And Technology Ltd
Priority date: 2015-02-03
Filing date: 2015-02-03
Publication date: 2015-05-27

Abstract

The invention discloses a ciphertext storage method and technique in RFID and belongs to the technical field of RFID in an Internet of Things. The ciphertext storage method serves as a tag inner information ciphertext storage method which is designed for solving the problem of the security of the user information in RFID tags. The scheme of the invention also gives effective digital signature scheme for preventing attackers from copying or faking the tag information after reading the tag information. The ciphertext storage method and the technique thereof in RFID can accord with the security requirement of the existing RFID system, can also accord with the requirement of simple and practical system of the user, and can be safely and effectively applied to the scenes such as logistics systems, parking lot systems, one-card pass systems and access control systems; the leakage of the tag information can be effectively avoided.

Description

Method and technology for storing ciphertext in RFID (radio frequency identification device)

One, the technical field

The invention belongs to the technical field of RFID in the Internet of things, and particularly relates to a method for using a field in an RFID tag, encryption of field information, digital signature processing, and coding and storage of ciphertext information.

Second, background Art

At present, the papers and patents similar to the present invention mainly have an improved EPCGen2 standard RFID encryption method (Huiche, Huchou, Ling.) of Huiche et al (Huiche, Huchou, Ling.) an improved EPCGen2 standard RFID encryption method [ J ] microcomputer application, 2014, 30 (7): 31-34.). An active RFID encryption method based on a lightweight asymmetric encryption algorithm of Shandong university (patent applicant: Shandong university, inventor: Yangmen, Loanping, Shanna, Liudan Hua, Shandong university; invention name: an active RFID encryption method based on a lightweight asymmetric encryption algorithm, IPC classification number: H04L 9/201430 application number: CN 10527327 publication (publication) number: CN 104219046A).

As can be known from analysis and comparison of the prior art, most of the concern of the existing method is security in the communication process, but the security of data stored in the label is less involved, and the risk that an attacker can directly crack the label to obtain user information exists for plaintext storage. With the increasing popularization of the RFID technology, data related to important privacy of users are in urgent need of protection, while many existing technologies do not relate to data security, meanwhile, an attacker can forge or copy tag information directly aiming at the tag information obtained by the attacker, and the existing scheme is difficult to guarantee the security. In the prior most relevant patents, the method needs the reader and the tag to perform operation by adopting a cryptographic algorithm, which leads to the reduction of communication efficiency and is not suitable for large-scale application, and the active RFID tag has the problems of high cost, need of replacing a battery regularly and the like, and is difficult to popularize and apply. The scheme of the invention is suitable for passive electronic tags, does not need tags to perform related operations, and has the characteristics of simplicity, easiness, low cost and the like compared with related prior art methods.

In conclusion, the scheme of the invention designs a method and a technology for guaranteeing the information safety of the RFID tag aiming at the safety problem of the current RFID system, and has the characteristics of high safety, simplicity, practicability and the like.

Third, the invention

In the application of the RFID, the information stored in the tag is plaintext information, so that the risk that an attacker can directly crack the tag to obtain the user information exists. With the increasing popularity of RFID technology, data related to important privacy of users is urgently needed to be protected, and many existing technologies do not relate to data security. In order to solve the problems, the invention designs a method for storing the information ciphertext in the label, and meanwhile, in the face of an attacker reading the label information and copying or forging the label information, the scheme of the invention also provides an effective digital signature scheme for prevention. The scheme can meet the safety requirements of the existing RFID system and also can meet the requirements of users.

The specific implementation process comprises the following steps:

1. different field information (including TID, EPC and User) of the RFID label is read by using a program written in the scheme of the invention;

2. the field information required in the RFID label is encrypted by using the program compiled in the scheme of the invention, and the field information required in the RFID label is digitally signed;

3. encoding the encryption information and the signature value by the program written in the scheme of the invention, so that the encryption information conforms to the standard specification of the RFID label information;

4. the program compiled in the scheme of the invention is used for writing the coded encryption information and the signature value into different fields of the RFID tag to finish ciphertext storage;

the technical scheme of the invention meets the application requirements of most of RFID systems at present, and the safety protection of RFID label information is added on the basis; the technical scheme of the invention utilizes a safe and reliable cryptographic algorithm to store the information originally stored in a plaintext form in the tag in a ciphertext form, thereby ensuring the data security of the tag to the maximum extent, solving the security problem of difficult popularization of RFID and certainly promoting more and more applications of an RFID system; the RFID technology is increasingly popularized, and the scheme applies the password technology to the RFID system, promotes the popularization of the password technology and promotes the information safety.

Description of the drawings

FIG. 1 is a flow chart of an implementation of the inventive arrangements;

FIG. 2 is a diagram of the method of use of the RFID tag field of the present invention;

fifth, detailed description of the invention

The scheme of the invention encrypts the RFID tag information, and the ciphertext is stored in the tag, so that the method can be safely and effectively applied to scenes such as a logistics system, a parking lot system, an all-purpose card system, an access control system and the like, and the tag information is effectively prevented from being leaked.

For example, most of information stored in a one-card-through in the one-card-through system is plaintext information, information in the RFID tag is illegally intercepted by an attacker, and the information in the tag is obtained by breaking the password of the one-card-through block area by means of exhaustion or differential attack and the like, so that the attacker can know the important privacy of the tag holder according to the information, more likely illegally steal user property according to the information, and great harm is caused; meanwhile, an attacker can copy part of read information and forge the one-card of a legal user, so that the risk of impersonation exists.

For example, in an access control system, a user holds information for identifying identity stored in an RFID tag, and an attacker can copy or forge the RFID tag of a legal user by intercepting the information in the RFID tag of the legal user, so that the access control can be freely carried out, and great harm is caused. By using the technical scheme of the invention, the information of the user identification identity is encrypted into the ciphertext to be stored in the tag, and an attacker can not use the information of the user even if stealing the information of the user.

Claims

The method and the technology for storing the ciphertext in the RFID are characterized by comprising an RFID label field using method and a ciphertext coding method; wherein,

the RFID label field using method is used for carrying out operations such as encryption, digital signature and the like on different fields of information in the label;

the ciphertext coding method is used for coding and storing the ciphertext and the digital signature value obtained by encryption.
2. The method and technique for storing ciphertext in RFID as claimed in claim 1, wherein the method for using the RFID tag field comprises: and encrypting the TID as a secret key, digitally signing the TID as information to be signed, writing the encrypted information and the digital signature value into an EPC (electronic product code) area or a User area, and efficiently and reasonably using the field storage of the RFID label.
3. The method and technique for storing ciphertext in an RFID as claimed in claim 1, wherein the ciphertext encoding method comprises: and the read RFID label information is encrypted and encoded and then stored in the RFID label, so that compared with the existing storage mode, the ciphertext storage function of the label is realized.
4. The method and technique for ciphertext storage in RFID as claimed in claim 1, comprising the steps of:

step 1: different field information (including TID, EPC and User) of the RFID label is read by using a program written in the scheme of the invention;

step 2: the field information required in the RFID label is encrypted by using the program compiled in the scheme of the invention, and the field information required in the RFID label is digitally signed;

and step 3: encoding the encryption information and the signature value by the program written in the scheme of the invention, so that the encryption information conforms to the standard specification of the RFID label information;

and 4, step 4: the encrypted information and the signature value after being coded are written into different fields of the RFID label by using the program written in the scheme of the invention, and the ciphertext storage is completed.