Abstract: The current authentication protocol for RFID system is based on the pre-set shared key value. The adversary can obtain the key by some means, which will cause the security threat to the subsequent authentication. An RFID system key wireless gengeration protocol based on EPC tag is proposed. It encrypts a part of the EPC for communication to prevent the leakage of secret information, introduces the security model about tags and readers to improve the security of communications, keeps the freshness of the communication process by using random numbers in readers and only uses XOR operation to reduce tag’s costs and calculation. The proposed protocol is formally proven by GNY logic. The security analysis and performance analysis show that the protocol conforms to the security model and is able to resist both active attack and passive attack, with high security and low cost advantages.

Key words: Radio Frequency Identification（RFID）, shared key, Electronic Product Code（EPC）, GNY logic, security model

摘要： 针对目前RFID系统的认证协议都是在事先设置好的共享密钥值基础上的，敌手可以通过一些手段获取密钥而对后续的认证造成安全威胁，提出了一种基于EPC编码标签的RFID系统密钥无线生成协议。将部分EPC加密进行通信，防止秘密信息泄露；引入标签与阅读器的安全模型，提高通信的安全性；阅读器随机数保持通信过程的新鲜性；仅采用异或运算降低标签成本与计算量。通过GNY逻辑对协议进行形式化证明，安全分析和性能分析表明，该协议符合安全模型并能够抵抗主动攻击和被动攻击，具有安全性高、低成本的特点。

关键词: 射频识别, 共享密钥, 电子产品码（EPC）编码, GNY逻辑, 安全模型