基于RFID的民航行李管理系统中关键密码技术的研究

Considering the problems of low efficiency, privacy and security issues in RFID authentication, baggage sorting, and baggage information retrieval in Civil Aviation Baggage Management System, firstly, we aim to solve four theoretical research challenges: (1) to solve the authorization of plaintext check rights, we invent new schemes of Authorized Verifier Plaintext Checkable Encryption using secure public key encryption, trapdoor one-way function and hash function and Authorized Multi-Verifier Plaintext Checkable Encryption using secure public key encryption, broadcast encryption and hash function; (2) to solve the tag number check and privacy preserving problems, we propose one-way tag number verifiable Multi-RFID grouping proof using keyed MAC, pseudo random permutation function and tag number mark value; (3) look intro the new technique of third party based ORAM and two level search structure based on fuzzy trapdoor and accurate trapdoor to meet the security requirement of search mode privacy protection; and (4) propose the new approach of the index structure of “Oblivious Hierarchical Hash Tree with Links” to solve the problem of paralleled search and update. Based on the research results on plaintext checkable encryption, RFID grouping proof and dynamic symmetric searchable encryption, an efficient, secure and privacy preserving RFID based baggage management system with multiple-tag authentication, baggage sorting and dynamic baggage information retrieval will be constructed. The project will enrich cryptography theory, and promote the innovative development of civil aviation information industry. It will significantly contribute to security theory, social life and economy.

针对民航行李管理系统中RFID标签认证、行李分拣和行李信息查询时效率低下、隐私泄露和安全威胁等问题，理论上：创新地提出基于安全公钥加密、陷门单向函数和哈希函数的授权验证者明文可检验加密和基于安全公钥加密、广播加密和哈希函数的授权多验证者明文可检验加密解决明文检验的授权问题；提出基于带密钥MAC、伪随机置换函数和标签数量标记值的单向标签数量可验证多RFID群证明解决多标签识别时标签数量验证和隐私保护问题；提出第三方的ORAM技术，和模糊陷门、精确陷门双层搜索模式，解决动态对称可搜索加密搜索模式隐私泄露问题；提出不经意的带链分层哈希树索引结构解决数据搜索和更新的并行化问题；应用上：基于所研究的明文可检验加密、多RFID群证明和动态对称可搜索加密的成果设计安全、高效、隐私保护的多行李联合识别、分拣和信息高效查询方案。本课题研究将丰富密码学理论，推动民航信息化的发展，具有重要的理论意义和实用价值。

民航行李管理系统中RFID标签认证、行李分拣和行李信息查询时效率低下、隐私泄露和安全威胁等问题。为了既不泄露用户的隐私信息，又在不解密的情况下可以验证用户信息，对用户的行李信息进行高效查询，并基于行李信息实现高效行李分拣，本项目对同态签密、变色龙同态哈希、基于物联网的标签联合认证和基于物联网的隐私保护信息搜索展开了研究，并设计了同态签密方案、集合同态签名方案、门限变色龙哈希函数、同态变色龙哈希函数、双服务器模型下的授权明文可验证加密方案、）基于标签的授权明文可验证加密方案，以及物联网中轻量级的可搜索加密方案。这些密码学方案在民航行李信息验证、分拣和搜索中实施性能良好。在基金资助期间，本项目共培养博士研究生3名，硕士生2名，发表论文13篇，其中SCI索引11篇，EI索引2篇，专利4个。