Abstract
RFID tags are tiny, inexpensive, inductively powered computers that are going to replace bar codes on many products, but which have many other uses as well. For example, they will allow smart washing machines to check for incompatible clothes (e.g., white shirts and red socks) and smart refrigerators to check for milk that is too old to be consumed. Subdermal tags with medical information are already being implanted in animals and people. However, a world in which practically everything is tagged and can be read at a modest distance by anyone who wants to buy an RFID reader introduces serious security and privacy issues. For example, women walking down the street may be effectively broadcasting the sizes of their RFID-tagged bras and medical data without realizing it. To protect people in this environment, we propose developing a compact, portable, electronic device called an RFID Guardian, which people can carry with them. In the future, it could be integrated into PDAs or cell phones. The RFID Guardian looks for, records, and displays all RFID tags and scans in the vicinity, manages RFID keys, authenticates nearby RFID readers, and blocks attempted accesses to the user’s RFID tags from unauthorized readers. In this way, people can find out what RFID activity is occuring around them and take corrective action if need be.
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
c’t magazine, Bauanleitung fur einen simplen rfid-detektor, no. 9 (2004)
EPCglobal, 13.56 MHz ISM band class 1 radio frequency (RF) identification tag interface specification
Feldhofer, M.: An authentication protocol in a security layer for RFID smart tags. In: The 12th IEEE Mediterranean Electrotechnical Conference, May 2004, vol. 2, pp. 759–762. IEEE, Los Alamitos (2004)
Feldhofer, M., Dominikus, S., Wolkerstorfer, J.: Strong authentication for RFID systems using the AES algorithm. In: Joye, M., Quisquater, J.-J. (eds.) CHES 2004. LNCS, vol. 3156, pp. 357–370. Springer, Heidelberg (2004)
Finkenzeller, K.: RFID Handbook: Fundamentals and applications in contactless smart cards and identification. John Wiley & Sons, Ltd., Chichester (2003)
Gaubatz, G., Kaps, J.-P., Ozturk, E., Sunar, B.: State of the art in publickey cryptography for wireless sensor networks. In: Proceedings of the Second IEEE International Workshop on Pervasive Computing and Communication Security (2005)
Hennig, J.E., Ladkin, P.B., Sieker, B.: Privacy enhancing technology concepts for RFID technology scrutinised, Research Report RVS-RR-04-02, University of Bielefeld, D-33501 Bielefeld, Germany (October 2004)
Juels, A.: Minimalist cryptography for low-cost RFID tags. In: The Fourth International Conference on Security in Communication Networks, September 2004. LNCS. Springer, Heidelberg (2004)
Juels, A., Rivest, R.L., Szydlo, M.: The blocker tag: Selective blocking of RFID tags for consumer privacy. In: Proceedings of the 10th ACM Conference on Computer and Communications Security. ACM Press, New York (2003)
Redemske, R.: Tools for RFID testing and measurement (2005)
Rieback, M.R., Crispo, B., Tanenbaum, A.S.: Keep on blockin’ in the free world: Personal access control for low-cost RFID tags. In: 13th International Workshop on Security Protocols (April 2005)
Vajda, I., Buttyán, L.: Lightweight authentication protocols for lowcost RFID tags. In: Second Workshop on Security in Ubiquitous Computing (October 2003)
Weis, S., Sarma, S., Rivest, R., Engels, D.: Security and privacy aspects of low-cost radio frequency identification systems. In: Hutter, D., Müller, G., Stephan, W., Ullmann, M. (eds.) Security in Pervasive Computing. LNCS, vol. 2802, pp. 201–212. Springer, Heidelberg (2004)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Rieback, M.R., Crispo, B., Tanenbaum, A.S. (2005). RFID Guardian: A Battery-Powered Mobile Device for RFID Privacy Management. In: Boyd, C., González Nieto, J.M. (eds) Information Security and Privacy. ACISP 2005. Lecture Notes in Computer Science, vol 3574. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11506157_16
Download citation
DOI: https://doi.org/10.1007/11506157_16
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-26547-4
Online ISBN: 978-3-540-31684-8
eBook Packages: Computer ScienceComputer Science (R0)