Readers behaving badly: Reader revocation in PKI-based RFID systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6345 LNCS, Issue , 2010, Pages 19-36

  Nithyanand, Rishab ^a   Tsudik, Gene ^a   Uzun, Ersin ^a  

^a Irvine   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

RADIO FREQUENCY IDENTIFICATION (RFID);

DOCUMENT IDENTIFICATION; IDENTIFICATION CARDS; KEY OPERATIONS; PAYMENT INSTRUMENT; PUBLIC KEY CERTIFICATES; PUBLIC KEYS; RFID APPLICATIONS; RFID SYSTEMS; RFID-TAG; TRAVEL DOCUMENTS;

ACCESS CONTROL;

EID: 78049451613     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-15497-3_2     Document Type: Conference Paper

References (33)

1. Nokia e51 specifications, http://europe.nokia.com/find-products/devices/ nokia-e51/specifications
2. Nokia n95 specifications, http://www.nokiausa.com/find-products/phones/ nokia-n95-8gb/specifications
3. Display enabled identification and payment instruments (November 2009), http://sprout.ics.uci.edu/projects/usec/survey.html
4. Blundo, C., Persiano, G., Sadeghi, A.-R., Visconti, I.: Resettable and Non-Transferable Chip Authentication for ePassports. In: Conference on RFID Security (2008)
5. Brooke, J.: Sus - a quick and dirty usability scale. Usability Evaluation in Industry (1996)
6. Bundesamt fur Sicherheit in der Informationstechnik. Advanced Security Mechanisms for Machine Readable Travel Documents: Version 2.0 (2008)
7. Cheon, J. H., Hong, J., Tsudik, G.: Reducing RFID Reader Load with the Meetin-the-Middle Strategy. Cryptology ePrint Archive, Report 2009/092 (2009)
8. Czeskis, A., Koscher, K., Smith, J. R., Kohno, T.: Rfids and secret handshakes: defending against ghost-and-leech attacks and unauthorized reads with contextaware communications. In: Computer and Communications Security - CCS (2008)
9. Goodrich, M., Tamassia, R.: Efficient authenticated dictionaries with skip lists and commutative hashing, US Patent App. 10/416, 015 (May 7, 2003)
10. Heydt-Benjamin, T., Bailey, D., Fu, K., Juels, A., O'hare, T.: Vulnerabilities in first-generation RFID-enabled credit cards. Financial Cryptography and Data Security (2007)
11. Hoepman, J.-H., Hubbers, E., Jacobs, B., Oostdijk, M., Wichers Schreur, R.: Crossing Borders: Security and Privacy Issues of the European e-Passport. In: Yoshiura, H., Sakurai, K., Rannenberg, K., Murayama, Y., Kawamura, S.-i. (eds.) IWSEC 2006. LNCS, vol. 4266, pp. 152-167. Springer, Heidelberg (2006)
12. Housley, R., Ford, W., Polk, W., Solo, D.: RFC 2459: Internet X.509 public key infrastructure certificate and CRL profile (January 1999)
13. Infineon Technologies AG, AIM CC. Preliminary Short Product Information: Chip Card and Security IC's (2006)
14. International Civil Aviation Organization. Machine Readable Travel Documents: Specifications for Electronically Enabled Passports with Biometric Identification Capability (2006)
15. Juels, A., Molnar, D., Wagner, D.: Security and privacy issues in e-passports. In: Security and Privacy for Emerging Areas in Communications Networks - SECURECOMM (2005)
16. Kaliski, B.: Future directions in user authentication. In: IT-DEFENSE (2005)
17. Karjoth, G., Moskowitz, P. A.: Disabling rfid tags with visible confirmation: clipped tags are silenced. In: Workshop on Privacy in the Electronic Society - WPES (2005)
18. Kobsa, A., Sonawalla, R., Tsudik, G., Uzun, E., Wang, Y.: Serial hook-ups: a comparative usability study of secure device pairing methods. In: Symposium on Usable Privacy and Security - SOUPS (2009)
19. Kocher, P. C.: On certificate revocation and validation. In: Hirschfeld, R. (ed.) FC 1998. LNCS, vol. 1465, pp. 172-177. Springer, Heidelberg (1998)
20. Kugler, D., Ullman, M.: Contactless security tokens - enhanced security by using new hardware features in cryptographic based security mechanisms. In: Dagstuhl Seminar Proceedings of Foundations for Forgery - Resilient Cryptographic Hardware (July 2009)
21. Kumar, A., Saxena, N., Tsudik, G., Uzun, E.: Caveat eptor: A comparative study of secure device pairing methods (2009)
22. Lewis, J., Sauro, J.: The factor structure of the system usability scale. In: Proceedings of the Human Computer Interaction International Conference (HCII 2009), San Diego CA, USA (2009)
23. Merkle, R. C.: Secrecy, authentication, and public key systems. Technical report, Stanford University (1979)
24. Micali, S.: Efficient certificate revocation. Technical Memo MIT/LCS/TM-542b, Massachusetts Institute of Technology (1996)
25. Micali, S.: Certificate revocation system. United States Patent, US Patent 5, 666, 416 (September 1997)
26. Monnerat, J., Vaudenay, S., Vuagnoux, M.: About Machine-Readable Travel Documents. In: Conference on RFID Security (2007)
27. Myers, M., Ankney, R., Malpani, A., Galperin, S., Adams, C.: Internet public key infrastructure online certificate status protocol-ocsp (1999)
28. Naor, M., Nissim, K.: Certificate revocation and certificate update. Technical report (1999)
29. Narasimha, M., Solis, J., Tsudik, G.: Privacy preserving revocation checking. International Journal of Information Security 8(1), 61-75 (2009)
30. Oren, Y., Feldhofer, M.: A Low-Resource Public-Key Identification Scheme for RFID Tags and Sensor Nodes. In: ACM Conference on Wireless Network Security - WiSec (2009)
31. Saxena, N., Uddin, M. B., Voris, J.: Treat 'em like other devices: user authentication of multiple personal rfid tags. In: SOUPS (2009)
32. Scholz, P., Reihold, C., John, W., Hilleringmann, U.: Analysis of energy transmission for inductive coupled rfid tags. In: International Conference on RFID (2007)
33. Ullman, M.: Personal communication (September 2009)