Abstract: In the application of Internet of things, the existing RFID mutual authentication protocol exists the problems that authentication efficiency is low and it has security flaws, this paper proposes a RFID mutual authentication protocol that satisfies backward security, by Rabin operation of one-way encryption algorithm, to solve the problem of synchronization and later to the privacy. Using random number to keep the label information of freshness, BAN logic method is used to the formal agreement. This kind of agreement with the existing security authentication protocol security and cost comparison, the results show that this protocol not only prevents the tracking, resists brute force, prevents replay attack et al, but also for reduction of gate, makes cost down, suitable for low-cost RFID system.

Key words: Internet of things, Radio Frequency Identification（RFID）, Rabin algorithm, BAN formal analysis, mutual authentication

摘要： 针对在物联网应用中，现有的RFID双向认证协议存在认证效率低和安全隐患等问题，提出了一种满足后向安全的RFID双向认证协议，采用随机数使标签保持信息的新鲜性，从而实现标签与阅读器之间的双向认证；通过Rabin加密算法的运算单向性，来解决同步以及后向安全的问题；并采用BAN逻辑方法对协议进行了形式化证明。该协议与现有的此类安全认证协议进行安全性和成本比较，结果表明该协议不仅具有防跟踪、抗暴力破解、防重放攻击等特点，而且还可以实现双向认证，同时因为门电路的减少，使得成本下降，适用于低成本的RFID系统。

关键词: 物联网, 射频识别, Rabin算法, BAN形式化分析, 双向认证