Picking Virtual Pockets using Relay Attacks on Contactless Smartcard
- 22 March 2006
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- Vol. 2523, 47-58
- https://doi.org/10.1109/securecomm.2005.32
Abstract
A contactless smartcard is a smartcard that can communicate with other devices without any physical connection, using Radio-Frequency Identifier (RFID) technology. Contactless smartcards are becoming increasingly popular, with applications like credit-cards, national-ID, passports, physical access. The security of such applications is clearly critical. A key feature of RFID-based systems is their very short range: typical systems are designed to operate at a range of ≈ 10cm. In this study we show that contactless smartcard technology is vulnerable to relay attacks: An attacker can trick the reader into communicating with a victim smartcard that is very far away. A "low-tech" attacker can build a pick-pocket system that can remotely use a victim contactless smartcard, without the victim’s knowledge. The attack system consists of two devices, which we call the "ghost" and the "leech". We discuss basic designs for the attacker’s equipment, and explore their possible operating ranges. We show that the ghost can be up to 50m away from the card reader— 3 orders of magnitude higher than the nominal range. We also show that the leech can be up to 50cm away from the the victim card. The main characteristics of the attack are: orthogonality to any security protocol, unlimited distance between the attacker and the victim, and low cost of the attack system.Keywords
This publication has 5 references indexed in Scilit:
- Soft blockingPublished by Association for Computing Machinery (ACM) ,2004
- Security and Privacy Aspects of Low-Cost Radio Frequency Identification SystemsPublished by Springer Nature ,2004
- The blocker tagPublished by Association for Computing Machinery (ACM) ,2003
- RFID HandbookPublished by Wiley ,2003
- Squealing Euros: Privacy Protection in RFID-Enabled BanknotesLecture Notes in Computer Science, 2003