Abstract: For the problem that the label information data is easily disclosed in LOT (Internet of Things), this paper proposes an improved RFID mutual authentication security hardening protocol. Unlike the traditional RFID authentication protocol, the proposed protocol authenticates the identity of members through authentication methods based on zero-knowledge proof, utilizes real-time information exchange between certifiers and verifiers to complete the zero-knowledge proof, and programs the participants’ identity security to their own identity key’s security. This protocol’ formal proof, including three aspects: secret proof, certification proof and label untraceability, shows that this protocol satisfies mutual authentication requirements of RFID.

Key words: Internet of Things, RFID, mutual authentication, real-time information exchange, formal proof

摘要： 针对物联网中标签上数据信息容易泄露的问题，提出了一个新型的双向认证安全强化协议。不同于传统的RFID认证协议，提出的协议通过基于零知识证明的认证方法来认证成员身份，利用证明者与验证者实时的信息交互完成零知识证明，并将参与主体的身份安全规约到其自身身份密钥的安全性上。文中最后对本协议的形式化证明，包括秘密性证明、认证性证明、标签不可追踪性三个方面，表明本协议均满足RFID双向认证要求。

关键词: 物联网, RFID, 双向认证, 实时信息交互, 形式化证明