Abstract: RFID is prevented from further usage by its security problems.A General RFID Authentication and Authorization Protocol Model（GRAAP Model） was introduced，an adjustment on the data access process of Seo’s RFID four roles model was made to simplify the RFID application authentication process so as to satisfy the practical usage requirement，new roles（RFID tag manager，data owner，data carrier，data accessing entity，etc.） were introduced，as well as the basic structure，roles’ responsibility and systematic protocol prototypes of this model.Comparing to the former RFID authentication protocol prototype，it is more flexible and can be the base of newer and more sophisticated managing，authentication and authorization protocols of RFID devices.

摘要： RFID技术安全性存在的问题阻碍了它的进一步应用。提出了一个一般化RFID安全认证授权协议模型，在Seo等提出的RFID四角色模型的基础上调整了系统读写过程以便简化RFID应用模型且更接近实用要求，并引入了RFID标签管理者、数据所有者、数据运载者和数据读取者等新角色，给出了新的RFID认证/授权模型的基本结构、角色职责和实现该模型的系统化协议原型。与之前的RFID认证授权模型相比更加灵活，可以在此基础上实现RFID设备之间更加多样的管理、认证、授权模式。