In the Internet of things application, the existing RFID security authentication protocols have problems like security flaws and low authentication efficiency. Aiming at these problems, this paper proposed an improved RFID mutual-authentication protocol based on bit operation. It keeps the freshness of the label using random number, and was formally proved with the BAN logic formalized method at the same time.