Data%20Security%20in%20RFID

1
Data Security in RFID

• Security is when everything is settled. When
  nothing can happen to you, Security is the denial
  of life.
• 
  - Germaine Greer
• Presented by
• 
  Satish Gavali
• 
  29th Nov 07

2
Overview

• Need of RFID Data Security
• RFID Attacks
• Security Measures

3
Need of RFID Data Security

• Widely used in
• - Supply chains (Wholesale and Retail)
• - Automatic Toll Pass systems
• - Access Control
• and many more

4
RFID Attacks

• Targets
• - RFID Tag
• - Middleware
• - Backend

5
RFID Tag

• Chip cloning
• - Common way of fraud
• - Cloned with the help of reader
• - Used to clone access cards

6
RFID Middleware

• Data Loss
• - Sniffing the data over the network
• - Injecting into LAN causing Denial of
• Service
• - Prone to social engineering attacks

7
RFID Backend

• Destroy or dump the database
• Injecting SQL queries
• Manipulating the critical information

8
Security Measures

• Three important factors
• Availability
• Integrity Confidentiality

9
Security Measures

• Cryptography (Hash Lock Scheme)
• Anti-collision Algorithms
• - Blinded Tree-Walking
• - Randomized Tree-Walking
• Application Layer Gateways

10
Thank You..!!

• References
• Finkenzeller, Klaus. 2003. RFID Handbook
  Fundamentals and Applications. Wiley
• Publication.
• Thornton, Frank. 2006. RFID Security. MA
  Syngress Publishing Inc.
• Glover, Bill. 2006. RFID Essentials. CA OReilly
  Media Inc.
• Scarfone, Karen. 2007. Securing RFID Systems.
  International Technology Laboratory Bulletin.
• JISC Technology and Standards. 2006. RFID
  Frequency, Standards, Adoption and Innovation.
  http//www.jisc.ac.uk/uploaded_documents/TSW0602.p
  df