Security and privacy concerns about the RFID layer of EPC Gen2 networks

Joaquin Garcia-Alfaro (1, 2, 3, 4) , Jordi Herrera-Joancomarti (3, 5) , Joan Melia-Segui (3, 6)

1 TSP - RST - Département Réseaux et Services de Télécommunications
2 SAMOVAR - Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux
3 Internet Interdisciplinary Institute
4 CNRS - Centre National de la Recherche Scientifique
5 dEIC - Department of Information and Communications Engineering
6 ETIC / UPF - Departament de Tecnologies de la Informació i les Comunicacions [Barcelona]

RFID systems are composed by tags (also known as electronic labels) storing an identification sequence which can be wirelessly retrieved by an interrogator, and transmitted to the network through middleware and database information systems. In the case of the EPC Gen2 technology, RFID tags are not provided with on-board batteries. They are passively powered through the radio frequency waves of the interrogators. Tags are also assumed to be of low-cost nature, meaning that they shall be available at a very reduced price (predicted for under 10 US dollar cents in the literature). The passive and low-cost nature of EPC Gen2 tags imposes several challenges in terms of power consumption and integration of defense countermeasures. Like many other pervasive technologies, EPC Gen2 might yield to security and privacy violations if not handled properly. In this chapter, we provide an in-depth presentation of the RFID layer of the EPC Gen2 standard. We also provide security and privacy threats that can affect such a layer, and survey some representative countermeasures that could be used to handle the reported threats. Some of the reported efforts were conducted within the scope of the ARES project

Mots clés: RFID; Survey

Domaines: Cryptographie et sécurité [cs.CR]

Joaquin Garcia-Alfaro, Jordi Herrera-Joancomarti, Joan Melia-Segui. Security and privacy concerns about the RFID layer of EPC Gen2 networks. Advanced research in data privacy, 567, Springer international publishing, pp.303 - 324, 2014, Studies in Computational Intelligence 978-3-319-09884-5. ⟨10.1007/978-3-319-09885-2_17⟩. ⟨hal-01264797⟩