本論文以Liu等人及彭宇弘提出之協定為基礎加以改進，上述兩個協定皆只有作單向 tag-to-reader認證，我們提出在標籤與讀取器通訊過程中，藉由相互挑戰回應達到雙向鑑別，並結合隨機雜湊鎖之理念，將每回合通訊之認證資訊加入隨值數作運算，以達到不可追蹤性。在三者之安全性比較分析上，所提之RFID認證安全度最高。 Radio Frequency Identity (RFID) has become more popular day after day in supply chain. However, because of its contact-less retrieval and substantial commercial interests in the supply chain, attackers would seek market intelligence or privacy over RFID. In order to protect commercial benefits, how to ensure the security of RFID system is extremely important.
In this paper, based on Liu’s et al. and Yu-Hung Peng’s schemes, we propose a more secure RFID authentication scheme. Proposed scheme add into the reader-to-tag authentication, which eliminate the possibility of hostile reader attack. Furthermore, by equipping hash lock method with random number, our scheme also supports untraceability. Security analysis indicates that the proposed scheme has the highest security.
