Abstract: In the traditional RFID system, secure wired channel communication is used between reader and server, while the new mobile RFID system is different from the traditional RFID system. The wireless channel communication between reader and server makes the authentication protocol suitable for the traditional RFID system not applicable to the mobile RFID system. To solve this problem, a mutual authentication protocol MSB for ultra-lightweight mobile radio frequency identification system based on bit replacement operation is proposed. MSB encrypts information based on bit-by-bit operation to reduce the computational load of communication entities. Label, reader and server authenticate before communicating mechanism makes MSB resist common attacks. Security analysis shows that the protocol has high security attributes, performance analysis shows that the protocol has low computational complexity, formal analysis of the protocol based on GNY logic gives a rigorous reasoning and proof process.

Key words: Radio Frequency Identification（RFID）, mobile system, mutual authentication, ultra-lightweight, Bit Replacement Operation（Bro）

摘要： 在传统的RFID系统中，读写器与服务器之间采用安全的有线信道通信；而新产生的移动RFID系统则与传统的RFID系统中不同，读写器与服务器之间基于无线信道进行通信，使得适用于传统RFID系统的认证协议并不能运用在移动RFID系统中。为解决该缺陷，提出一种基于位替换运算的超轻量级移动射频识别系统双向认证协议MSB。MSB基于按位运算对信息进行加密，降低通信实体的计算量；标签、读写器、服务器先认证再通信机制，使得MSB能抵抗常见的攻击。对协议进行安全性分析，表明协议具备较高的安全属性；对协议进行性能分析，表明协议具备低计算量的特征；对协议进行基于GNY逻辑形式化分析，给出协议严谨的推理证明过程。

关键词: 射频识别, 移动系统, 双向认证, 超轻量级, 位替换运算