关键词: 无线射频识别（RFID）, 交叉位运算, 超轻量级, 移动系统, 随机数

Abstract: In the traditional RFID system, the communication through the wired way is generally considered to be secure between the reader and the database. When designing the bidirectional authentication protocol, the both are regarded as a whole. However, with the rise of emerging industries such as mobile payment, the mobile RFID system is necessary to be applied, which means the reader and the database no longer communicate through the wired way, but through wireless way, so the communication channel is not secure and reliable. When designing the authentication protocol, the both can’t be regarded as a whole, so that the traditional RFID system can not be well applied to the mobile payment process. In order to solve the above problem, an ultra-lightweight authentication protocol suitable for mobile RFID systems is proposed. The proposed protocol uses cross-bitwise operation to encrypt the transmitted information so that the protocol can achieve ultra-lightweight level and reduce the amount of computation at the tag to a certain extent. The tripartite communication entities the tag, the reader and the database need to be authenticated before they perform other operations. During the encryption process, the introduction of random numbers, can keep the transmission of information fresh, and can improve the difficulty of the attacker’s crack. The security analysis shows that the protocol has high security and can ensure the security of communication information. The performance analysis shows that the proposed protocol has less computational complexity and lower cost.

Key words: RFID, cross-bitwise operation, ultra-lightweight, mobile system, random numbers