Abstract: Aiming at the problems of the existing Radio Frequency Identification（RFID） security authentication protocol, such as security flaws, high cost of tags and identification which requires a lot of calculation of database to match requested tag, this paper offers a scalable RFID mutual authentication protocol based on Rabin algorithm and crossover bitwise operation. The correctness and security of the protocol are proved through BAN logic formal analysis method. Security analysis and performance evaluation shows that this protocol has features of anti-counterfeiting, anti-replay, anti-tracking and extendibility. And it reduces the cost of computation and gates, which reduces the cost greatly. It applies to low-cost RFID system.

Key words: Radio Frequency Identification（RFID）, mutual authentication, Rabin algorithm, BAN logic, scalability

摘要： 针对现有的无线射频识别（RFID）安全认证协议存在安全缺陷、标签成本较高以及后台数据库需要进行大量的计算来搜索匹配符合要求的标签信息来进行认证等问题，提出了一种基于Rabin算法和交叉位运算的可扩展RFID双向认证协议。并基于BAN逻辑形式化分析方法，证明了该协议的正确性与安全性。安全分析和性能评估表明该协议不仅具有防假冒、防重放、防跟踪、可扩展性等特点，而且减少了标签的计算花费和门电路数，使得其成本大大降低，适用于低成本的RFID系统。

关键词: 无线射频识别, 双向认证, Rabin算法, BAN逻辑, 可扩展性