关键词: 无线射频识别, 恶意攻击, 隐私保护, 认证协议, 可扩展性, GNY逻辑

Abstract: Aiming at security vulnerabilities of the existing Radio Frequency Identification（RFID） authentication protocols, a novel anti-malicious attack mutual authentication protocol for RFID is proposed. The formal proof of the proposed authentication protocol is given based on GNY logic. The scheme combines public key encryption and symmetric cryptosystem, which adopts the method of reader dual-authentication and key refreshing during pre-
authentication phase. The protocol achieves the anti-desynchronization requirement by adding flag Tm of malicious attacks into the tag, which solves problems of low authentication efficiency, location tracking due to failure of renewing the key of tag, and Denial of Service（DoS） resulting from illegally updating inner keys of tag/server in the existed schemes. It can resist several malicious attacks including replay, tag/reader impersonation, traffic analysis and desynchronization, etc. Analysis results show that the new protocol is of good security, high efficiency and limited computational complexity, which fit for large scale tag applications.

Key words: Radio Frequency Identification（RFID）, malicious attack, privacy preserving, authentication protocol, scalability, GNY logic