Location-aware and safer cards: Enhancing RFID security and privacy via location sensing

WiSec'12 - Proceedings of the 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks

Volumn , Issue , 2012, Pages 51-61

  Ma, Di ^a   Prasad, Anudath K ^a   Saxena, Nitesh ^b   Xiang, Tuo ^a  

^a UNIVERSITY OF MICHIGAN DEARBORN   (United States)

^b UNIVERSITY OF ALABAMA AT BIRMINGHAM   (United States)

Author keywords

Context recognition; GPS; Relay attacks; RFID

Indexed keywords

AUXILIARY DEVICE; BACK-END SERVERS; CONTEXT RECOGNITION; CREDIT CARDS; LOCATION AWARENESS; LOCATION-AWARE; LOCATION-SENSING; PAYMENT TRANSACTIONS; RELAY ATTACK; RF-ID TAGS; RFID APPLICATIONS; RFID SECURITY; RFID SYSTEMS; SECURE TRANSACTIONS; SECURITY AND PRIVACY; TECHNOLOGICAL ADVANCEMENT; USER INVOLVEMENT;

COMPUTER NETWORKS; GLOBAL POSITIONING SYSTEM; INFORMATION SYSTEMS; RADIO FREQUENCY IDENTIFICATION (RFID);

RADIO NAVIGATION;

EID: 84860673845     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2185448.2185457     Document Type: Conference Paper

References (46)

1. RFID toll collection systems, 2007. Available at: http://www.securitysa. com/news.aspx?pklnewsid=25591.
2. 66-Channel LS20031 GPS Receiver Module, 2011. Available at: http://www.megachip.ru/pdf/POLOLU/66-CHANNEL.pdf.
3. GM-101 Cost Effective GPS Module With Ttl Rs-232 Interface, 2011. Available at: http://www.alibaba.com/product-gs/435104168/GM-101-Cost-Effective- GPS-Module.html.
4. GPS Glossory, 2011. Available at: http://www.gsmarena.com/glossary.php3? term=gps.
5. NMEA 0183 Standard, 2011. Available at: http://www.nmea.org/content/nmea- standards/nmea-083-v-400.asp.
6. S. Brands and D. Chaum. Distance-bounding protocols. In Advances in Cryptology - EUROCRYPT, International Conference on the Theory and Applications of Cryptographic Techniques, 1993.
7. J. Bringer, H. Chabanne, and E. Dottax. HB++: a lightweight authentication protocol secure against some attacks. In Security, Privacy and Trust in Pervasive and Ubiquitous Computing, 2006.
8. M. Buckner, R. Crutcher, M. R. Moore, and S. F. Smith. GPS and sensor-enabled RFID tags. Available online at http://www.ornl.gov/webworks/cppr/ y2001/pres/118169.pdf.
9. M. Buettner, R. Prasad, M. Philipose, and D. Wetherall. Recognizing Daily Activities with RFID-Based Sensors. In International Conference on Ubiquitous Computing (UbiComp), 2009.
10. G. Cropsey. Designing a distance and speed algorithm using the global positioning system. Available online at http://www.egr.msu.edu/classes/ece480/ capstone/spring08/group10/documents/Application%20Note-%20Gabe.pdf March 2008.
11. A. Czeskis, K. Koscher, J. Smith, and T. Kohno. RFIDs and secret handshakes: Defending against Ghost-and-Leech attacks and unauthorized reads with context-aware communications. In ACM Conference on Computer and Communications Security, 2008.
12. S. Drimer and S. J. Murdoch. Keep your enemies close:Distance bounding against smartcard relay attacks. In 16th USENIX Security Symposium, August 2007.
13. A. Francillon, B. Danev, and S. Capkun. Relay attacks on passive keyless entry and start systems in modern cars. In 18th Annual Network and Distributed System Security Symposium (NDSS), 2011.
14. H. Gilbert, M. Robshaw, and Y. Seurin. HB#: Increasing the security and efficiency of hb+. In Advances in Cryptology - EUROCRYPT, International Conference on the Theory and Applications of Cryptographic Techniques, 2008.
15. Goldiron. Numerex unveils hybrid tag includes active RFID, GPS, satellite and sensors. Available online at http://goldiron.wordpress.com/2009/02/25/ numerexunveils-hybrid-tag-includes-active-rfid-gps-satelliteand-sensors/ February 2009.
16. G. P. Hancke and M. G. Kuhn. An RFID distance bounding protocol. In Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks, 2005.
17. B. Hanlon, B. Ledvina, M. Psiaki, P. K. Jr., and T. E. Humphreys. Assessing the GPS spoofing threat. GPS World, Available online at http://www.gpsworld.com/defense/security-surveillance/assessing-spoofing-threat- 3171?page-id=1, January 2009.
18. T. S. Heydt-Benjamin, D. V. Bailey, K. Fu, A. Juels, and T. O'Hare. Vulnerabilities in first-generation RFID-enabled credit cards. In Financial Cryptography, 2007.
19. J. Holleman, D. Yeager, R. Prasad, J. Smith, and B. Otis. NeuralWISP: An energy-harvesting wireless neural interface with 1-m range. In Biomedical Circuits and Systems Conference (BioCAS), 2008.
20. A. Juels. RFID security and privacy: A research survey. IEEE Journal on Selected Areas in Communications, 24(2):381-394, February 2006. (Pubitemid 43269757)
21. A. Juels, D. Molnar, and D. Wagner. Security and privacy issues in E-passports. In Security and Privacy for Emerging Areas in Communications Networks (Securecomm), 2005.
22. A. Juels, R. L. Rivest, and M. Szydlo. The blocker tag: selective blocking of RFID tags for consumer privacy. In ACM Conference on Computer and Communications Security (CCS), 2003.
23. A. Juels, P. F. Syverson, and D. V. Bailey. High-power proxies for enhancing RFID privacy and utility. In Privacy Enhancing Technologies, 2005.
24. A. Juels and S. Weis. Authenticating pervasive devices with human protocols. In International Cryptology Conference (CRYPTO), 2005.
25. J. Katz and J. Shin. Parallel and concurrent security of the HB and HB+ protocols. In Advances in Cryptology - EUROCRYPT, International Conference on the Theory and Applications of Cryptographic Techniques, 2006.
26. Z. Kfir and A. Wool. Picking virtual pockets using relay attacks on contactless smartcard. In Security and Privacy for Emerging Areas in Communications Networks (Securecomm), 2005.
27. A. Kobsa, R. Nithyanand, G. Tsudik, and E. Uzun. Usability of display-equipped rfid tags for security purposes. In European Symposium on Research in Computer Security (ESORICS), 2011.
28. K. Koscher, A. Juels, V. Brajkovic, and T. Kohno. EPC RFID tag security weaknesses and defenses: passport cards, enhanced drivers licenses, and beyond. In ACM Conference on Computer and Communications Security, 2009.
29. M. Kuhn. An asymmetric security mechanism for navigation signals. In 6th Information Hiding Workshop, 2004.
30. R. Nithyanand, G. Tsudik, and E. Uzun. Readers behaving badly: Reader revocation in PKI-based RFID systems. In European Symposium on Research in Computer Security (ESORICS), 2010.
31. Y. Oren and A. Wool. Relay attacks on RFID-based electronic voting systems. Cryptology ePrint Archive, Report 2009/422, 2009. http://eprint.iacr. org/2009/422.
32. P. Papadimitratos and A. Jovanovic. GNSS-based positioning: Attacks and countermeasures. In IEEE Military Communications Conference (MILCOM), pages 1-7, San Diego, CA, USA, November 16-19 2008.
33. P. Papadimitratos and A. Jovanovic. Protection and fundamental vulnerability of global navigation satellite systems (GNSS). In International Workshop on Satellite and Space Communications (IWSSC), 2008.
34. K. B. Rasmussen and S. Čapkun. Realization of RF distance bounding. In Proceedings of the USENIX Security Symposium, 2010.
35. M. R. Rieback, B. Crispo, and A. S. Tanenbaum. RFID guardian: A battery-powered mobile device for RFID privacy management. In Australasian Conference on Information Security and Privacy (ACISP), 2005.
36. A. Ruhanen and et. al. Sensor-enabled RFID tag handbook. Available online at http://www.bridge-project.eu/data/File/BRIDGE-WP01-RFID-tag-handbook.pdf, January 2008.
37. A. Sample, D. Yeager, and S. J. A capacitive touch interface for passive RFID tags. In IEEE International Conference on RFID, 2009.
38. A. Sample, D. Yeager, P. Powledge, and J. Smith. Design of a passively-powered, programmable sensing platform for UHF RFID systems. In IEEE International Conference on RFID, 2007.
39. N. Saxena, B. Uddin, J. Voris, and N. Asokan. Vibrate-to-Unlock: Mobile Phone Assisted User Authentication to Multiple Personal RFID Tags. In Pervasive Computing and Communications (PerCom), 2011.
40. N. Saxena and J. Voris. Still and silent: Motion detection for enhanced rfid security and privacy without changing the usage model. In Workshop on RFID Security (RFIDSec), June 2010.
41. L. Scott. Anti-spoofing and authenticated signal architectures for civil navigation signals. In 16th International Technical Meeting of the Satellite Division of The Institute of Navigation (ION GPS/GNSS), pages 1543-1552, 2003.
42. J. R. Smith, P. S. Powledge, S. Roy, and A. Mamishev. A wirelessly-powered platform for sensing and computation. In 8th International Conference on Ubiquitous Computing (Ubicomp), 2006.
43. sparkfun. 32 Channel San Jose Navigation GPS 5Hz Receiver with Antenna, 2011. Available at: http://www.sparkfun.com/products/8266.
44. N. O. Tippenhauer, C. Popper, K. B.Rasmussen, and S. Capkun. On the requirements for successful GPS spoofing attacks. In ACM Conference on Computer and Communication Security (CCS'11), October 2011.
45. D. Wagner. Privacy in pervasive computing: What can technologists do? Invited talk, SECURECOMM 2005. Available online at http://www.cs.berkeley.edu/ ~daw/talks/SECCOM05.ppt, September 2005.
46. J. S. Warner and R. G. Johnston. Think GPS cargo tracking = high security? Technical report, Los Alamos National Laboratory, 2003.