Method and system for security authentication of radio frequency identification

A system for security authentication of radio frequency identification, comprising:

• a tag, which is for storing an EPC code and an encryption key;
• is further for responding to an inventory command sent via a reader, and feeding back the EPC code to a security authentication control apparatus;
• and is further for receiving an unencrypted random number randomly generated by the security authentication control apparatus and sent by the security authentication control apparatus via the reader, and directly using said encryption key to carry out an encryption calculation directly on said unencrypted random number randomly generated by and received from said security authentication control apparatus to generate encrypted data, and feeding back said encrypted data to said security authentication control apparatus via said reader;
• the reader, which is for transmitting a security authentication command, and reading tag data and forwarding the tag data to the security authentication control apparatus;
• and
• the security authentication control apparatus, which is for sending the inventory command to said tag via the reader, receiving the EPC code fed back by the tag;
• and is further for randomly generating the unencrypted random number and sending the unencrypted random number to said tag via the reader, receiving the encrypted data fed back by the tag, and carrying out the security authentication on said encrypted data;
• wherein said security authentication control apparatus comprises:
• a code obtaining module, which is for sending an inventory command with a mask code to said tag via said reader;
• and receiving the EPC code fed back by the tag via said reader;
• a random number generation module, which is for randomly generating the unencrypted random number after completing to obtain the EPC code, and sending the unencrypted random number to said tag via said reader;
• and
• an authentication module, which is for receiving the encrypted data fed back by said tag via said reader, using a decryption key paired with said encryption key to decrypt said encrypted data, and comparing whether the decrypted data are equal to said unencrypted random number, if equal, sending an authentication success command to an authorization module, or else sending an authentication failure command to the authorization module;
• and
• wherein said security authentication control apparatus further comprises the authorization module which is for deciding whether to send said EPC code to an upper layer application according to an authentication result fed back by the authentication module.