The Radio Frequency Identification (RFID) technology has been integrated into healthcare systems for the purpose of improving healthcare management. However, people have concerns about the security and privacy of this kind of RFID systems. In order to solve the security problems faced by RFID-based healthcare systems, a novel security authentication protocol based on Physical Unclonable Function (PUF) and Advanced Encryption Standard (AES) encryption algorithm is designed. The protocol uses PUF technology to output unique and random responses to different excitation inputs, encrypts the authentication information sent by the tag, and uses the AES encryption algorithm to encrypt the authentication information between the cloud database and the reader. At the same time, in the authentication process, once the communicating entity completes the identity authentication of the other two entities, it immediately starts to update the key. The security analysis and formal analysis of BAN (proposed by Burrows et al.) logic prove the security and correctness of the protocol. Analysis results show that the computation cost and security performance of the proposed protocol are better than the compared protocols. Our findings will contribute to further enhancing the security for RFID healthcare systems.

中文翻译：

---

基于物理不可克隆功能的 RFID 医疗保健系统的新型安全认证协议

射频识别 (RFID) 技术已集成到医疗保健系统中，以改善医疗保健管理。然而，人们对这种RFID系统的安全性和隐私性存在担忧。为了解决基于RFID的医疗保健系统面临的安全问题，设计了一种基于物理不可克隆功能（PUF）和高级加密标准（AES）加密算法的新型安全认证协议。该协议采用PUF技术对不同的激励输入输出唯一的随机响应，对标签发送的鉴权信息进行加密，并采用AES加密算法对云数据库与读写器之间的鉴权信息进行加密。同时，在认证过程中，一旦通信实体完成了另外两个实体的身份认证，它立即开始更新密钥。BAN（Burrows等人提出）逻辑的安全性分析和形式化分析证明了协议的安全性和正确性。分析结果表明，所提协议的计算成本和安全性能优于对比协议。我们的发现将有助于进一步提高 RFID 医疗保健系统的安全性。分析结果表明，所提协议的计算成本和安全性能优于对比协议。我们的发现将有助于进一步提高 RFID 医疗保健系统的安全性。分析结果表明，所提协议的计算成本和安全性能优于对比协议。我们的发现将有助于进一步提高 RFID 医疗保健系统的安全性。