|
|
| (22 intermediate revisions by the same user not shown) |
| Line 1: |
Line 1: |
| ==Introduction==
| | #redirect[[Radio-Frequency Identification]] |
| Radio-frequency identification (RFID) is a communication technology, that uses electromagnetic waves to identify and track tags. | |
| A RFID system consists out of a tag, which is attached to an object, an reader, which extracts the information of the tag and an application, that uses the gathered information.
| |
| | |
| ==RFID-System==
| |
| | |
| | |
| | |
| ===Reader===
| |
| A reader is responsible for initiating the communication with a tag, in case of a passive tag the reader also supplies the energy needed to operate the tag. A reader consists out of to components:
| |
| <ol style="list-style-type:lower-decimal">
| |
| <li>A control unit</li>
| |
| <li>A high-frequency interface</li>
| |
| </ol>
| |
| | |
| ====Control Unit====
| |
| The control unit is responsible for
| |
| <ol style="list-style-type:disc">
| |
| <li>Communication with the application</li>
| |
| <li>Communication with the tag</li>
| |
| <li>Coding and decoding of the signal</li>
| |
| <li>Anti-collision algorithm</li>
| |
| <li>Encryption and decryption of data sent between reader and tag</li>
| |
| <li>Authentication between reader and tag</li>
| |
| </ol>
| |
| | |
| ====High-frequency interface====
| |
| The high-frequency interface is responsible for
| |
| <ol style="list-style-type:disc">
| |
| <li>Generation of strong high-frequency signals to activate the tag and supply it with energy</li>
| |
| <li>Modulating the transmission signal to send data to the tag</li>
| |
| <li>Receiving the radio frequency signals transmitted by a tag and converting them back into original data</li>
| |
| </ol>
| |
| | |
| ===Tag===
| |
| RFID tags are divided into six categories by EPC Global. A tag in one category has all the capabilities of the subordinate categories. This means that tags are backward compatible
| |
| | |
| Passive tags, which have no built-in energy source and draw their energy from the reader's radio waves, are assigned to classes 0 to 3.
| |
| Active tags, with their own energy source, are assigned to class 4.
| |
| Class 5 is reserved for tag readers and active tags that can read other tags.
| |
| <ol style="list-style-type:disc">
| |
| <li>class 0: These tags are passive and work with UHF. These tags are pre-programmed in the manufacturer's factory and can no longer be reprogrammed, the information can no longer be changed.</li>
| |
| <li>Class 1:Class 1 tags use HF radio waves. In contrast to class 0 tags, class 1 tags and higher can be programmed by the user. However, in class 1, tags can only be described once.</li>
| |
| <li>Class 2: Unlike class 1, class 2 tags can be written to multiple times.</li>
| |
| <li>Class 3: Read-write with integrated sensors that are able to detect parameters such as temperature, pressure and movement; can be semi-passive or active. Semi-passive means that they occupy an energy source but cannot initiate communication with other tags or readers.</li>
| |
| <li>Class 4: Class 4 tags have their own energy source and can initiate communication with other tags or readers, so they are active tags.</li>
| |
| <li>Class 5: Class 5 tags are the most advanced, they can transfer energy to passive tags and communicate with readers and tags of any class, so they can also be classified as readers.</li>
| |
| </ol>
| |
| | |
| ===RFID tag information===
| |
| Four types of information can be stored on a transponder:
| |
| <ol style="list-style-type:disc">
| |
| <li>'''Information to identify the tagged item:''' This category includes the identification data used to uniquely identify the tagged item. This includes user-defined fields such as bank accounts, product barcodes and prices, as well as predefined registers such as the Application Family Identifier (AFI) and the Data Storage Format Identifier (DSFID)</li>
| |
| <li>'''Supplementary information on the object:''' Supplementary data includes further standard information such as Application Identifiers (AIs) and ANSI MH-10 Data Identifiers (DIs), which enable further differentiation and specific information on the tagged item</li>
| |
| <li>'''Control data:''' Control data could include information about the configuration of the tag, such as the settings for the security controls, including mechanisms that restrict reads or writes to user memory blocks and special registers that contain the AFI and DSFID values</li>
| |
| <li>'''Manufacturer data''': The unique identifier (UID), transponder type, manufacturer and manufacturing data can be stored in this category. This information can be specific to each manufacturer and transponder type. </li>
| |
| </ol>
| |
| The first two categories, identification and supplementary information, are present on all tags as they provide essential information for identifying and supplementing the tagged item. Categories three and four, control data and manufacturer data, can vary depending on the manufacturer and contain specific information for configuring the tag and identifying the manufacturer.
| |
| | |
| ==RFID Attacks==
| |
| In contrast to attackers on the Internet, who can always attack a machine on the Internet, a server is always online and responds to requests from all over the world, an attacker of an RFID system does not have constant access. He must be physically close to the tag that is to be read. Or must be present during a transaction.
| |
| Security models must be adapted to these facts. Further more, cheap RFID tags cannot perform standard encryption.
| |
| | |
| The challenge is therefore to create a realistic security model that reflects the threats and capabilities of reality as accurately as possible.
| |
| | |
| ===Cloning===
| |
| There are two different types of cloning used to attack.
| |
| | |
| '''Simple RFID cloning:''' If an attacker gains physical access to an RFID tag, they can clone it. The advantage of cloning is that, unlike theft, the original tag does not have to be kept. Since the owner can easily become aware that the original tag is missing in the event of theft, no changes are made to the tag during cloning. The cloned tag has the same access options as the original. This makes it much less likely that the victim will know that they have been victimized. Disadvantage, needs physical access to the card/tag, must copy it and then return it. There are various devices for copying the card.
| |
| | |
| '''Distance RFID cloning:''' There are a large number of devices that can read and clone RFID tags at a distance. The range is limited to less than 1 meter, and the greater the range, the more expensive the devices become. There are devices that can store the read data on an SD card.
| |