RFIDs and secret handshakes: Defending against ghost-and-leech attacks and unauthorized reads with context-aware communications

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 479-490

  Czeskis, Alexei ^a   Koscher, Karl ^a   Smith, Joshua R ^b   Kohno, Tadayoshi ^a  

^a UNIVERSITY OF WASHINGTON   (United States)

^b INTEL CORPORATION   (United States)

Author keywords

Context aware aommunications; Gesture recognition; Man in the middle attacks; Passive gesture recognition; Privacy; Proxy attacks; Relay attacks; RFID; RFID device selection; Skimming attacks

Indexed keywords

CONTEXT-AWARE AOMMUNICATIONS; MAN-IN-THE-MIDDLE ATTACKS; PASSIVE GESTURE RECOGNITION; PRIVACY; PROXY ATTACKS; RELAY ATTACKS; RFID; RFID DEVICE SELECTION; SKIMMING ATTACKS;

COMMUNICATION; MOBILE TELECOMMUNICATION SYSTEMS; RADIO NAVIGATION; WIRELESS TELECOMMUNICATION SYSTEMS;

GESTURE RECOGNITION;

EID: 70349301622     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1455770.1455831     Document Type: Conference Paper

References (28)

1. L. Bao and S. S. Intille. Activity recognition from user-annotated acceleration data. In A. Ferscha and F. Mattern, editors, Proceedings of PERVASIVE, 2004.
2. S. C. Bono, M. Green. A. Stubblefield, A. Juels, A. D. Rubin, and M. Szydlo. Security analysis of a cryptographically-enabled rfid device. In SSYM '05: Proceedings of the 14th conference on USENIX Security Symposium, pages 1-1, Berkeley, CA, USA. 2005. USENIX Association.
3. H.-J. Chae, D. J. Yeager. J. R. Smith, and K. Fu. Maximalist cryptography and computation on the WISP UHF RFID tag. In Proceedings of the Conference on RFID Security, July 2007.
4. T. Chioudhury. G. Borriello, S. Consolvo, D. Haehnel, B. Harrison, B. Hemingway, J. Hightower, P. P. Klasnja, K. Kosclier, A. LaMarca, J. A. Landay, L. LeGrand, J. Lester, A. Rahimi. A. Rea. and D. Wyatt. The mobile sensing platform: An embedded activity recognition system. IEEE Pervasive Computing, 7(2):32-41, 2008.
5. J. Conway. On Numbers and Games. Academic Press, 1976.
6. N. Davies, D. P. Siewiorek, and R. Sukthankar. Activity based computing. IEEE Pervasive Computing, 7(2):20-21, 2008.
7. S. Drimer and S. J. Murdoch. Keep your enemies close: Distance bounding against smartcard relay attacks. In 16th USENIX Security Symposium, August 2007.
8. EPCUGoba1. Class 1 Generation 2 UHF Air Interface Protocol Standard. http://www.epcglobalinc.org/standards/anuhig2.
9. D. Gafurov, K. Helkala. and T. S?drol. Biometric gait authentication using accelerometer sensor. Journal of Computers, 1(7):51-59, 2006.
10. D. Halperin, T. S. Heydt-Benjamnin. B. Ransford, S. S. Clark. B. Defend, W. Morgan, K. Fu, T. Kohno. and W. H. Maisel. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In IEEE Symposium on Security and Privacy. IEEE Computer Society. May 2008.
11. G. Hancke. A practical relay attack on ISO 14443 proximity cards. 2005. http: //www.cl. cam. ac. uk/?h275/relay . pdf.
12. G. P. Hancke and M. G. Kuhn. An RFID distance bounding protocol. In Proceedings of IEEE/Create-Net SecureComm, 2005.
13. T. S. Heydt-Benjamin, D. V. Bailey. K. Fu, A. Juels, and T. O'Hare. Vulnerabilities in first-generation RFID-enabled credit cards. In Proceedings of Financial Cryptography and Data Security, 2007.
14. A. Juels. RFID security and privacy: A research survey. In IEEE Journal on Selected Areas in Communications, 2006.
15. A. Juels, R. Rivest. and M. Szydlo. The blocker tag: Selective blocking of RFID tags for consumer privacy. In 10th Annual ACM Conference on Computer and Communications Security, 2003.
16. D. Kaminsky. Soylent badges: An attack surface analysis of RFID. 2007. http://www.law.washington.edu/LCT/Events/rfid/Dan-Kaminsky-RFID-Attack-%Surface .pdf.
17. Z. Kfir and A. Wool. Picking virtual pockets using relay attacks on contactless smartcard systems, 2005. citeseer.ist .psu.edu/kfirO5picking.html.
18. B. Logan, J. Healey, M. Plulipose, E. Munguia-Tapia. and S. Intille. A long-term evaluation of sensing modalities for activity recognition. In Proceedings of Ubicomp, 2007.
19. R. Mayrhofer and H. Gellersen. Shake well before use: Authentication based on accelerometer data. In Proc. Pervasive 2007: 5th International Conference on Pervasive Computing. Springer-Verlag, May 2007. to appear.
20. MIT Auto-ID Center. 860MHz - 930MHz Class I Radio Frequency Identification Tag Radio Frequency & Logical Communication Interface Specification Candidate Recommendation, 2002. http: //tinyurl . com/2ebjx7.
21. D. Molnar and D. Wagner. Privacy and security in library RFID issues, practices, and architectures. In 11th ACM Conference on Computer and Communications Security, 2004.
22. S. N. Patel, J. S. Pierce, and G. D. Abowd. A gesture-based authentication scheme for untrusted public terminals. In UIST '04: Proceedings of the 17th annual ACM symposium on User interface software and technology, pages 157-160, New York. NY, USA, 2004. ACM.
23. A. P. Sample and J. R. Smith. A low-cost capacitive touch interface for passive RFID tags. Submitted for publication.
24. J. R. Smith. A. P. Saniple, P. S. Powledge, S. Roy, and A. Mamishev. A wirelessly-powered platform for sensing and computation. In P. Dourish and A. Friday, editors, Ubicomp. volume 4206 of Lecture Notes in Computer Science, pages 495-506. Springer. 2006.
25. A. Varshavsky, A. Scanriell. A. LaMarca, and E. de Lara. Amigo: Proximity-based authenticaiton of mobile devices. In Proceedings of Ubicomp, 2007.
26. Identity Stronghold website. http://idstronghold.com/.
27. SMARTCODE solves the privacy issue relating to potential unauthorized reading of RFID enabled passports and ID cards. http://tinyurl.com/ypodsz.
28. Privaris plusID products. http://www.privaris.com/products/index.html.