RFID 시스템을 위한 안전하고 효율적인 DB 보안 및 인증기법

Abstract

In the RFID system, bulk tag information is stored into the back-end database as plaintext format not ciphertext. In this case, the tags`s private informations can be easily compromised by an external hacker or an insider attacker. If the private informations of tags disclosed by the attackers, it can occur serious privacy invasion problem. Recently the database(DB) security is an important issue to prevent the above DB compromised attack. However, DB security for RFID systeme has not been considered yet. If we use the DB security technique into the RFID system, the above described privacy invasion` problem can be easily prevented. Based on this motivation, this paper proposes a secure and efficient back-end database security and authentication(S-DB) scheme with XOR-based encryption/decryption algorithm. In the proposed scheme, all tag`s private information is encrypted and stored by using the DB secret key to protect the DB compromised attack. As a result, the proposed S-DB scheme `can provide stronger security and more efficiency for the secure RFID system environment.