경량 RFID 경계 결정 프로토콜
A Light-Weight RFID Distance Bounding Protocol A Light-Weight RFID Distance Bounding Protocol
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
최근 근접 인증에 사용되는 비접촉식 스마트카드와 같은 RFID 태그들이 경계 위조(distance fraud) 공격, 마피아 위조(mafia fraud) 공격, 테러리스트 위조(terrorist fraud) 공격과 같은 다양한 위치 기반 공격인 중계 공격(relay attack)들에 매우 취약함이 증명되었다. 더 나아가 이러한 중계 공격들을 방지하기 위해 리더와 태그사이의 메시지 송수신 왕복 시간을 측정하는 경계 결정(distance-bounding) 프로토콜이 한 해결책으로 연구되고 있다. 2005년에 Hancke과 Kuhn은 처음으로 해쉬 함수 기반의 RFID 경계 결정 프로토콜을 제안하였다. 하지만 Hancke-Kuhn 프로토콜은 공격자에게 번의 왕복에서 (3/4)n의 성공 확률을 제공하여 중계 공격을 완벽히 방어할 수 없다. 본 논문에서는 공격자에게 번의 왕복에서 (5/8)n의 성공 확률을 제공하는 새로운 경량 RFID 경계 결정 프로토콜을 제안한다. 연구 결론으로 제안한 프로토콜은 안전한 해쉬 함수와 XOR 연산을 기반으로 하여 높은 저장 공간 효율성을 제공할 뿐만 아니라, 공격자의 성공 확률을 (5/8)n으로 최적화하여 중계 공격에 대해서도 더욱 더 안전하다.
Abstract
Recently, it is proved that contactless smart-card based RFID tags, which is used for proximity authentication, are vulnerable to relay attacks with various location-based attacks such as distance fraud, mafia fraud and terrorist fraud attacks. Moreover, distance bounding protocols have been researched to prevent these relay attacks that can measure the message transmitted round-trip time between the reader and the tag. In 2005, Hancke and Kuhn first proposed an RFID distance bounding protocol based on secure hash function. However, the Hancke-Kuhn protocol cannot completely prevent the relay attacks because an adversary has (3/4)n attack success probability. Thus, this paper proposes a new distance-bounding protocol for light-weight RFID systems that can reduce to (5/8)n for the adversary's attack success probability. As a result, the proposed protocol not only can provide high-space efficient based on a secure hash function and XOR operation, but also can provide strong security against the relay attacks because the adversary's attack success probability is optimized to (5/8)n.
참고문헌 (19)
- "Secure positioning of wireless devices with application to sensor networks"[URL]
- I. Satoh, "Location-based services in ubiquitous computing environments, Service-Oriented Computing-ICSOC 2003", Springer-Verlag LNCS 2910, 527~542 (2003)
- J.E. Bardram, "Context-aware user authentication-Supporting proximity-based login in pervasive computing", Spring-Verlag, 107~123 (2003), UbiComp 2003, LNCS 2864
- ISO 14443, "Identification cards-contactless integrated circuit cards-proximity cards", International Organization for Standardization, ~
- ISO 15693, "Identification cards-contactless integrated circuit cards-vicinity cards", International Organization for Standardization, ~
- ISO 18092, "Information technology-telecommunications and information exchange between systems -near field communication-interface and protocol (NFCIP-1)", Int. Organization for Standardization, ~ (2004)
- "A practical relay attack on ISO 14443 proximity cards"[URL]
- G. Hancke, "An RFID distance bounding protocol", the 1st International Conference on Security and Privacy for Emergin Areas in Communications Networks (SECURECOMM’05), pp.67~73 (2005), IEEE Computer Society
- Y. Desmedt, "Major security problems with the “Unforgeable” (Feige)-Fiat-Shamir proofs of identity and how to overcome them", SecuriCom'88, pp.15~17 (1988)
- Samy Bengio, "Secure implementation of identification systems", Journal of Cryptology, 4(3), pp.175~183 (1991)
- Thomas Beth, "Identification tokens-or: Solving the chess grandmaster problem", CRYPTO, pp.169~177 (1990), Springer Verlag
- S. Brands, "Distance-bounding protocols", Advances in Cryptology EUROCRYPT’03, pp.344~359 (1993), Springer-Verlag
- Y.-J. Tu, "RFID distance bounding protocols", the 1st International EURASIP Workshop in RFID Technology
- J. Reid, "Detecting relay attacks with timing-based protocols", Proceedings of the 2nd ACM Symposium on Information, Computer, and Communications Security, pp.204~213 (2007)
- C. Meadows, "Distance bounding protocols: authentication logic analysis and collusion attacks", Secure Localization and Time Synchronization for Wireless Sensor and Ad Hoc Networks, pp.279~298 (2007), Springer-Verlag
- D. Singelee, "Distance bounding in noisy environments", ESAS 2007, 통권 : 4572, pp.101~115 (2007), Springer
- J. Munilla, "Attacks on a distance bounding protocol", Computer Communications, 33(7), pp.884~889 (2010)
- "Yet another secure distance- bounding protocol"[URL]
- C. Kim, "The swiss-knife RFID distance bounding protocol", Information Security and Cryptology-ICISC 2009, pp.98~115 (2009), Springer-Verlag