無線射頻識別 (RFID) 提供了採用無線電波進行資料傳送及識別物件唯一性的技術及系統。這使得其代替了現行的條碼系統,並且於我們日常生活中之諸多領域上變得更加普及。其也提供了避免偽造、簡單的身份檢查及安全性的加強等應用。然而, RFID 技術在隱私性及安全性等方面也帶來了新的風險。因 RFID 系統主要是透過無線電頻率進行無線傳送,使得其在識別過程中的相關資訊容易遭到第三方惡意地竊聽,這也是其被廣泛使用前的主要障礙之一。過去幾年來,有諸多研究從不同觀點提出解決關於 RFID 隱私及安全問題之方法。我們在回顧了一些協定後,提出一個利用二次剩餘理論且可用於低成本 RFID 標籤上之相互認證協定,並同時可滿足安全、效率及成本上之要求。另外,我們所提出之協定是很簡單的,且可以很容易使用標準密碼學上之雜湊函數進行實作。 Radio Frequency Identification (RFID) refers to technologies and systems that use radio waves to transmit and uniquely identify objects. These are poise to supplant barcodes, and become perva-sive for many domains in our daily lives. These also provide to re-duce fraud, easy identity checks, and enhance security. However, RFID technology also raises new risks about the privacy and security implications. RFID system has been conducted by wireless com-munication of radio frequency so that the information on identifi-cation could be eavesdropping by the third party maliciously. There are major impediments to their widespread use. Over the past few years, several streams of research have emerged approaching the RFID privacy/security problem from different perspectives. We study a few protocols and propose a novel mutual authentication protocol based on quadratic residues for low-cost RFID tags, and can satisfy security, performance and cost requirement at the same time. Additionally, our protocol is very simple and it can be imple-mented easily with the use of standard cryptographic hash func-tions.