정형검증을 통한 RFID 보안프로토콜 분석 및 구현 = Analysis and Implementation of RFID Security Protocol using Formal Verification

다국어 초록 (Multilingual Abstract)

Radio Frequency Identification (RFID) technology is an important part of infrastructures in ubiquitous computing. Although all products using tags is a target of these services, these products also are a target of attacking on user privacy and services using authentication problem between user and merchant, unfortunately. Presently, it is very important about security mechanism of RFID system and in this paper, we analyze the security protocol among many kinds of mechanisms to solve privacy and authentication problem using formal verification and propose a modified novel protocol. In addition, the possibility of practical implementation for proposed protocol will be discussed.

국문 초록 (Abstract)

Radio Frequency Identification(RFID: 무선주파수식별) 기술은 유비쿼터스 구조 기술의 중요한 한 부분을 이루고 있다. 태그를 이용한 모든 제품들이 이러한 서비스의 대상이 되고 있지만 불행히도 다방면에 이용되는 이면에는 사용자의 사생활과 사용자 및 판매자 간의 인증문제를 이용한 서비스 공격의 대상이 되고 있다. 현재 이러한 RFID 시스템의 보안 메커니즘들은 이슈화되고 있으며 본 논문에서는 여러가지 메커니즘들 중 사생활 및 인증문제 해결을 위해 정형검증을 통한 보안프로토콜 분석 및 취약성을 수정한 프로토콜을 제안하고자 한다. 또한 제안된 프로토콜의 실현가능성을 위한 구현가능성을 언급하고자 한다.

참고문헌 (Reference)

1 EPCGLOBAL, "http://www.epcglobalinc.org"

2 Golle, P., "Universal Reencryption for Mixnets" LNCS 163-178, 2004

3 Boussinot, F., "The ESTEREL language" 1293-1304, 1991

4 Juels, A., "The Blocker Tag: Selective Blocking of RFID tags for Consumer Privacy" 103-111, 2003

5 Weis, S., "Security and privacy in radiofrequency identification devices" Massachusetts Institute of Technology (MIT). Massachusetts 2003

6 Weis, S., "Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems" 201-212, 2003

7 Perrig, A., "SPINS : Security Protocols for Sensor Networks" Mobile Computing and Net- working 2001

8 Sarma, S., "RFID Systems and Security and Privacy Implications" LNCS 454-469, 2003

9 Gaubatz, G., "Public Keys Cryptography in Sensor Networks Revisited" 2-18, 2005

10 Ulrich S., "Parallelizing the Murϕ Verifier" 18 (18): 117-129, 2001

11 Chien, H.Y., "Mutual Authenti- cation Protocol for RFID Conforming to EPC Class 1 Generation 2 Standards" 29 (29): 254-259, 2007

12 Juels, A., "Minimalist Cryptography for RFID Tags" LNCS 149-164, 2004

13 Juels, A., "In submission"

14 Clarke, E.M., "Formal Methods: State of the Art and Future Directions" 28 (28): 626-643, 1996

15 Formal Systems, "FDR2 User Manual" 1999

16 Peris-Lopez, P., "EMAP: An Efficient Mutual Authentication Protocol for Low- cost RFID Tags" 352-361, 2006

17 Defend, B., "Cryptanalysis of Two Lightweight RFID Authentication Schemes" 2007

18 Hoare, C.A.R., "Communicating Sequential Pro- cesses" Prentice-Hall 1985

19 Lowe, G., "Casper: A compiler for the analysis of security protocols" IEEE Computer Society, Silver Spring, MD 18-30, 1997

20 Kosta, M. E., "An Analysis of Security and Privacy Issues Relating to RFID Enabled ePassports" IFIP SEC 467-472, 2007