Radio-Frequency Identification - Revision history

LSchertler: Added some Examples for every attack so the reader get a better understanding.

2024-12-14T12:40:00Z

Added some Examples for every attack so the reader get a better understanding.

LSchertler: Added Communication Principles

2024-12-11T12:07:26Z

Added Communication Principles

@@ Line 42: / Line 42: @@
 <li>Receiving the radio frequency signals transmitted by a tag and converting them back into original data</li>
 </ol>
 ===Tag===

NKirnbauer: fixed link

2024-11-04T22:56:29Z

fixed link

← Older revision		Revision as of 22:56, 4 November 2024
Line 44:		Line 44:

	===Tag===		===Tag===
	RFID tags are divided into six categories by EPC Global<ref>EPC-RFID, "RFID Tags," Accessed: 2023. [Online]. Available: https://www.epc-rfid.info/~~rfid-tags~~. Note: RFID tags are classified as Class 0 through Class 5, depending on their functionality.</ref>. A tag in one category has all the capabilities of the subordinate categories. This means that tags are backward compatible		RFID tags are divided into six categories by EPC Global<ref>EPC-RFID, "RFID Tags," Accessed: 2023. [Online]. Available: https://www.epc-rfid.info/rfid_tags. Note: RFID tags are classified as Class 0 through Class 5, depending on their functionality.</ref>. A tag in one category has all the capabilities of the subordinate categories. This means that tags are backward compatible

	Passive tags, which have no built-in energy source and draw their energy from the reader's radio waves, are assigned to classes 0 to 3.		Passive tags, which have no built-in energy source and draw their energy from the reader's radio waves, are assigned to classes 0 to 3.

NKirnbauer: gendering

2024-08-27T14:41:33Z

gendering

← Older revision		Revision as of 14:41, 27 August 2024
Line 69:		Line 69:

	==RFID Attacks==		==RFID Attacks==
	In contrast to attackers on the Internet, who can always attack a machine on the Internet, a server is always online and responds to requests from all over the world, an attacker of an RFID system does not have constant access. He must be physically close to the tag that is to be read. Or must be present during a transaction.		In contrast to attackers on the Internet, who can always attack a machine on the Internet, a server is always online and responds to requests from all over the world, an attacker of an RFID system does not have constant access. They must be physically close to the tag that is to be read. Or must be present during a transaction.
	Security models must be adapted to these facts. Further more, cheap RFID tags cannot perform standard encryption.		Security models must be adapted to these facts. Further more, cheap RFID tags cannot perform standard encryption.

VNawrata: /* Attack methods */

2024-01-05T10:55:54Z

Attack methods

← Older revision		Revision as of 10:55, 5 January 2024
Line 77:		Line 77:
	'''Cloning'''		'''Cloning'''

	There are two different types of cloning used to attack.		There are two different types of cloning used to attack.<ref>Kolin Nielson and Sayeed Sajal, "The Art of RFID Hacking," in Proceedings of the 2023 Intermountain Engineering, Technology and Computing (IETC), 2023, pp. 328-333, doi: 10.1109/IETC57902.2023.10152251.</ref>
	<ol style="list-style-type:disc">		<ol style="list-style-type:disc">
	<li>'''Simple RFID cloning:''' If an attacker gains physical access to an RFID tag, they can clone it. The advantage of cloning is that, unlike theft, the original tag does not have to be kept by the attacker. Since the owner can easily become aware that the original tag is missing in the event of theft, no changes are made to the tag during cloning. The cloned tag has the same access options as the original. This makes it much less likely that the victim will know that they have been victimized. Disadvantage, needs physical access to the card/tag, must copy it and then return it. There are various devices for copying the card.</li>		<li>'''Simple RFID cloning:''' If an attacker gains physical access to an RFID tag, they can clone it. The advantage of cloning is that, unlike theft, the original tag does not have to be kept by the attacker. Since the owner can easily become aware that the original tag is missing in the event of theft, no changes are made to the tag during cloning. The cloned tag has the same access options as the original. This makes it much less likely that the victim will know that they have been victimized. Disadvantage, needs physical access to the card/tag, must copy it and then return it. There are various devices for copying the card.</li>

VNawrata: /* RFID Attacks */

2024-01-05T10:53:17Z

RFID Attacks

← Older revision		Revision as of 10:53, 5 January 2024
Line 73:		Line 73:

	The challenge is therefore to create a realistic security model that reflects the threats and capabilities of reality as accurately as possible.		The challenge is therefore to create a realistic security model that reflects the threats and capabilities of reality as accurately as possible.


	===Attack methods===		===Attack methods===

VNawrata: /* Tag information */

2024-01-05T10:53:01Z

Tag information

← Older revision		Revision as of 10:53, 5 January 2024
Line 66:		Line 66:
	<li>'''Manufacturer data''': The unique identifier (UID), transponder type, manufacturer and manufacturing data can be stored in this category. This information can be specific to each manufacturer and transponder type. </li>		<li>'''Manufacturer data''': The unique identifier (UID), transponder type, manufacturer and manufacturing data can be stored in this category. This information can be specific to each manufacturer and transponder type. </li>
	</ol>		</ol>
	The first two categories, identification and supplementary information, are present on all tags as they provide essential information for identifying and supplementing the tagged item. Categories three and four, control data and manufacturer data, can vary depending on the manufacturer and contain specific information for configuring the tag and identifying the manufacturer.		The first two categories, identification and supplementary information, are present on all tags as they provide essential information for identifying and supplementing the tagged item. Categories three and four, control data and manufacturer data, can vary depending on the manufacturer and contain specific information for configuring the tag and identifying the manufacturer.<ref>Fotios Chantzis, Ioannis Stais, Paulino Calderon, Evangelos Deirmentzoglou, and Beau Woods, "Practical IoT Hacking: The Definitive Guide to Attacking the Internet of Things," No Starch Press, 2021, ISBN 978-1-7185-0091-4.</ref>

	==RFID Attacks==		==RFID Attacks==

VNawrata: /* Tag */

2024-01-05T10:48:51Z

Tag

← Older revision		Revision as of 10:48, 5 January 2024
Line 44:		Line 44:

	===Tag===		===Tag===
	RFID tags are divided into six categories by EPC Global<ref>https://www.epc-rfid.info/~~rfid_tags~~</ref>. A tag in one category has all the capabilities of the subordinate categories. This means that tags are backward compatible		RFID tags are divided into six categories by EPC Global<ref>EPC-RFID, "RFID Tags," Accessed: 2023. [Online]. Available: https://www.epc-rfid.info/rfid-tags. Note: RFID tags are classified as Class 0 through Class 5, depending on their functionality.</ref>. A tag in one category has all the capabilities of the subordinate categories. This means that tags are backward compatible

	Passive tags, which have no built-in energy source and draw their energy from the reader's radio waves, are assigned to classes 0 to 3.		Passive tags, which have no built-in energy source and draw their energy from the reader's radio waves, are assigned to classes 0 to 3.

VNawrata: /* RFID-System */

2024-01-05T10:45:48Z

RFID-System

← Older revision		Revision as of 10:45, 5 January 2024
Line 4:		Line 4:

	==RFID-System==		==RFID-System==
			It consists out of three parts <ref>Xiaolin Jia, Quanyuan Feng, Taihua Fan, and Quanshui Lei, "RFID Technology and Its Applications in Internet of Things (IoT)," in Proceedings of the 2012 2nd International Conference on Consumer Electronics, Communications and Networks (CECNet), 2012, pp. 1282-1285, doi: 10.1109/CECNet.2012.6201508.
			</ref>:
			<ol style="list-style-type:disc">
			<li>Tag</li>
			<li>Reader</li>
			<li>Application</li>
			</ol>
			The focus will be set on the tag and the reader, not on the application.

	===Reader===		===Reader===

VNawrata: /* Test cite */

2023-12-31T14:00:54Z

Test cite

← Older revision		Revision as of 14:00, 31 December 2023
Line 303:		Line 303:
	</li>		</li>
	</ol>		</ol>

	~~= Test cite =~~
	~~<ref>{{Cite web~~
	~~\| url=https://www.iotforall.com/5-key-iot-applications-in-smart-cities/~~
	~~\| title=5 Key IoT Applications in Smart Cities~~
	~~\| publisher=IoT For All~~
	~~\| access-date=2023-12-30~~
	~~}}</ref>~~

	~~Foo{{#tag:ref\|Whereas this does, see {{cite web\|url=https://www.iotforall.com/5-key-iot-applications-in-smart-cities \|title= \|publisher= \|accessdate=}}}}~~

	~~Foo{{#tag:ref\|Whereas this does, see {{cite journal\|url=https://www.google.com \|author= \|date= \|title=Search}}}}~~

	= References =		= References =

	[[Category:Basic]]		[[Category:Basic]]