Location-Aware and Safer Cards: Enhancing RFID Security and Privacy via Location Sensing
Location-Aware and Safer Cards: Enhancing RFID Security and Privacy via Location Sensing
复制标题
位置感知和更安全的卡：通过位置感应增强 RFID 安全性和隐私
DOI：
10.1145/2185448.2185457
复制
发表时间：
2012
影响因子：
7.3
通讯作者：
Yan Zhu
中科院分区：
文献类型：
--
作者：
Di Ma;Nitesh Saxena;Tuo Xiang;Yan Zhu
在本文中，我们报告了一种新的方法，以提高安全性和隐私在某些RFID应用，位置或位置相关的信息（如速度）可以作为一个合法的访问上下文。这些应用的示例包括访问卡、收费卡、信用卡和其他支付令牌。我们表明，位置感知可以使用的标签和后端服务器防御未经授权的阅读和中继攻击的RFID系统。在标签方面，我们设计了一个位置感知的选择性解锁机制，使用该机制，标签可以选择性地响应读者的询问，而不是这样做杂乱。在服务器端，我们设计了一个位置感知的安全交易验证方案，允许银行服务器决定是否批准或拒绝支付交易，并检测特定类型的中继攻击涉及恶意读者。我们工作的前提是当前的技术进步，可以使RFID标签具有低成本的位置（GPS）传感能力。与之前的研究不同，我们的防御不依赖于辅助设备，也不需要任何明确的用户参与。
In this paper, we report on a new approach for enhancing security and privacy in certain RFID applications whereby location or location-related information (such as speed) can serve as a legitimate access context. Examples of these applications include access cards, toll cards, credit cards, and other payment tokens. We show that location awareness can be used by both tags and back-end servers for defending against unauthorized reading and relay attacks on RFID systems. On the tag side, we design a location-aware selective unlocking mechanism using which tags can selectively respond to reader interrogations rather than doing so promiscuously. On the server side, we design a location-aware secure transaction verification scheme that allows a bank server to decide whether to approve or deny a payment transaction and detect a specific type of relay attack involving malicious readers. The premise of our work is a current technological advancement that can enable RFID tags with low-cost location (GPS) sensing capabilities. Unlike prior research on this subject, our defenses do not rely on auxiliary devices or require any explicit user involvement.