基于LPN的可扩展RFID隐私认证研究

LPN (Learning Parity with Noise) is one of the basic tools to construct RFID (Radio Frequency IDentification) security techniques. RFID authentication protocols based on LPN has the advantage to be able to resist quantum attacks. At the present, the developments of RFID require it to provide scalability, authenticity and privacy at the same time. However, LPN based RFID security researches are mainly focused on authenticity. There are few concentrations on privacy, especially the scalability, which has hindered the RFID security community for a long time. The scalability is still an open question in RFID community...This project aims at taking advantage of LPN to provide scalability, authenticity and privacy for RFID systems simultaneously. At first, we define proper cryptographic primitives, such as indistinguishable addition-homomorphic encryption and keyed pseudorandom function, via the common properties of scalability, authenticity and privacy. Then, we propose a two-round authentication protocol model which is able to be resistant to man-in-the-middle attacks. Finally, we construct the proposed cryptographic primitives based on structural LPN such as Ring-LPN or Toeplitz-LPN. Hence, we are able to construct scalable and private authentication protocols for low-cost RFID systems. During the research period, we plan to answer a long open problem in LPN-based cryptographic field, i.e. to construct a constant error rate public key encryption scheme from LPN assumption. Furthermore, we present a new method to construct two-round authentication protocols with man-in-the-middle security. The core idea is the unchangeability of the authentication keys.

LPN是构造RFID安全技术的基础工具之一，它可以为RFID系统设计抗量子攻击的轻量级认证协议。目前，可扩展性、认证性和隐私性是RFID技术发展的迫切需求。但是学术界利用LPN设计的RFID安全技术主要集中于认证性，少有研究关注隐私性，尤其是可扩展性已经困扰学术界多年，至今尚未有较理想的解决方案。.本项目旨在利用LPN的优势来同时解决低成本RFID系统的可扩展性、认证性和隐私性：首先利用可扩展性、认证性和隐私性的共性来定义不可区分的加法同态加密和带密钥的伪随机函数这两个密码基础构件；然后设计抗中间人攻击的两轮认证协议模型；最后基于结构化LPN实现并优化这些密码基础构件,从而设计出可扩展的RFID隐私认证协议。在本项目中我们将着手解决基于LPN构造常数误差率的公钥加密技术这一学术难题，并发现利用认证密钥的不可篡改性来设计抗中间人攻击的两轮认证协议的新方法。

LPN是构造RFID安全技术的基础工具之一，它可以为RFID系统设计抗量子攻击的轻量级认证协议。本项目通过4年的研究，首先基于LPN设计了抗中间人攻击的认证协议；然后基于常数误差率的Ring-LPN设计了CCA安全的公钥加密方案；最终完成了项目的研究目标：基于LPN设计可扩展的隐私认证协议。此外，项目组还对可搜索加密技术和多重签名技术进行了研究，分别设计了抗交叉泄露的可搜索加密方案和理想格上的多重数字签名方案。.本项目的研究拓展了抗量子攻击的RFID隐私认证技术的发展，为RFID应用提供了强安全支撑。另一方面，本项目的研究丰富和发展了后量子密码学，为抗量子攻击的认证技术和公钥加密技术提供了更多选择。