Abstract: Aiming at security and privacy threats during Radio Frequency Identification(RFID) tag ownership transfer, this paper proposes a “first delegation then update” ownership transfer mode. Corresponding protocols of the mode are also designed. All the information about the tag is transmitted to the new owner securely after a key negotiation. The tag’s secret is updated securely after a mutual authentication, which makes the old owner can not query the tag any longer. The scheme ensures the privacy and security of the new owner in the ownership transfer.

Key words: Radio Frequency Identification(RFID), ownership transfer, delegation, key negotiation, security

摘要： 针对射频识别标签所有权转换过程的安全隐私问题，提出一种“先授权后更新”的所有权转换模式，并设计相应的实现协议。在密钥协商后，把标签的全部相关信息安全地转交给新的所有者。在相互认证的基础上，安全更新标签秘密，使得原所有者无法再对标签进行查询。该方案保证所有权转换过程中新用户的隐私安全。

关键词: 射频识别, 所有权转换, 授权, 密钥协商, 安全

CLC Number: 

• TP309