How to Cheat at Deploying and Securing RFID
Regular price
19.250 KD
inc. VAT
Couldn't load pickup availability
Table of contents
- Cover
- Title pagei
- Copyright Pageiii
- Technical Editorsv
- Contributing Authorsvi
- Contentsix
- Chapter 1: Physics, Math, and RFID: Mind the Gap1
- Introduction2
- Some Bare-Bones Physics Concepts2
- Understanding Electricity4
- Understanding Magnetism6
- Understanding Electromagnetism7
- Electromagnetic Waves8
- Types of Electromagnetic Waves9
- The Electromagnetic Spectrum10
- The Mathematics of RFID11
- Scientific Notation11
- Logarithms12
- Decibel13
- Units14
- An Overview of RFID: How It Works15
- Summary21
- Chapter 2: The Physics of RFID23
- Introduction24
- Understanding Radio Frequency Communication24
- Elements of Radio Frequency Communication24
- Modulation: Don't Leave Antenna Without It26
- The Propagation Problem26
- The Transmission Problem26
- Frequency Bands in Modulation26
- Understanding Modulation Types27
- Amplitude Modulation and Amplitude Shift Keying27
- Frequency Modulation and Frequency Shift Keying30
- Phase Modulation and Phase Shift Keying32
- On-Off Keying (OOK)32
- RFID Communication Techniques33
- Communication Through Coupling33
- Communication Through Backscattering34
- Understanding Performance Characteristics of an RFID System35
- Cable Loss35
- Impedance35
- The Voltage Standing Wave Ratio36
- Noise37
- Beamwidth38
- Directivity39
- Antenna Gain39
- Polarization40
- Resonance Frequency41
- Performing Antenna Power Calculations42
- Effective Radiated Power42
- Power Density42
- Link Margin43
- The Travel Adventures of RF Waves43
- Absorption43
- Attenuation44
- Dielectric Effects44
- Diffraction44
- Free Space Loss44
- Interference45
- Reflection45
- Refraction45
- Scattering46
- Summary48
- Key Terms49
- Chapter 3: Working with RFID Tags51
- Introduction52
- Understanding Tags52
- Components of a Tag52
- Tag Size55
- Operating Tag Frequencies55
- Understanding Tag Types57
- Passive Tags57
- Semipassive Tags58
- Active Tags59
- Tag Classification61
- Class 0 Tags62
- Class 1 Tags63
- Class 2 Tags63
- Class 3 Tags64
- Class 4 Tags64
- Class 5 Tags64
- Read Ranges of Tags66
- Labeling and Placing a Tag67
- Labeling a Tag67
- Inlay68
- Insert68
- Smart Labels68
- Pressure-Sensitive Labels69
- RFID-Enabled Tickets69
- Tie-On Tags69
- Selecting Adhesive Types for Tags70
- Placing a Tag70
- Shadowing71
- Tag Placement and Orientation72
- Polarization and Orientation72
- Orientation in Inductive Coupling73
- Summary74
- Key Terms75
- Chapter 4: Working with Interrogation Zones77
- Introduction78
- Understanding an Interrogator78
- What an Interrogator Is Made Of79
- Interrogator Types79
- Fixed-Mount Interrogators80
- Handheld Interrogators80
- Vehicle-Mount Interrogators81
- What an Interrogator Is Good For81
- Communication With the Host Computer81
- Communication With the Tags82
- Operational Capabilities82
- Communicating With the Host83
- Serial Connections83
- Network Connections84
- Dealing With Dense Environments86
- Understanding Collisions86
- Reader Collisions86
- Tag Collisions87
- Anticollision Protocols87
- Aloha-Based Protocols87
- Tree-Based Protocols88
- Configuring Interrogation Zones88
- Configuring Interrogator Commands89
- Configuring Interrogator Settings91
- Optimizing Interrogation Zones92
- The Network Factor92
- Operation Mode93
- Reader-to-Reader Interference93
- System Performance and Tuning94
- The Tag Travel Speed94
- Summary96
- Key Terms97
- Chapter 5: Working with Regulations and Standards101
- Introduction102
- Understanding Regulations and Standards102
- Regulations102
- Standards102
- Regulating Frequency Usage103
- The Regulatory Regions104
- Safety Regulations105
- RFID Standards107
- ISO Standards107
- EPCglobal Standards108
- Air Interface and Tag Data Standards111
- Tag Data Standards111
- Air Interface Protocols111
- Impact of Regulations and Standards112
- Advantages of Regulations112
- Advantages of Standards112
- Disadvantages of Regulations and Standards113
- Regulatory and Standards Bodies113
- Summary115
- Key Terms116
- Chapter 6: Selecting the RFID System Design119
- Introduction120
- Understanding RFID Frequency Ranges120
- RFID Frequency Ranges and Performance122
- The Low-Frequency (LF) Range123
- The High-Frequency (HF) Range124
- Ultra High Frequency (UHF) Range124
- The Microwave Range125
- Selecting Operating Frequency127
- Selecting Tags128
- Kinds of Tag128
- Tag Types128
- Tag Classes128
- Operating Frequency129
- Read Performance129
- Data Capacity130
- Tag Form and Size130
- Environmental Conditions131
- Standards Compliance131
- Selecting Readers131
- Reader Types131
- Ability to Upgrade132
- Installation Issues132
- Legal Requirements132
- Manageability133
- Quantity133
- Ruggedness133
- Working With Antennas133
- Understanding Antenna Types133
- Dipole Antennas134
- Monopole Antennas135
- Linearly Polarized Antenna135
- Circularly Polarized Antennas136
- Omnidirectional Antennas137
- Helical Antennas137
- Selecting Antennas137
- Selecting Transmission Lines138
- Impedance138
- Cable Length and Loss138
- Transmission Line Types139
- Mounting Equipment for RFID Systems139
- Conveyors140
- Dock Doors141
- Forklifts141
- Stretch Wrap Stations142
- Point-of-Sale Systems142
- Smart Shelf143
- Summary144
- Key Terms145
- Chapter 7: Performing Site Analysis147
- Introduction148
- Planning the Site Analysis148
- Plan the Steps Ahead148
- Understanding Blueprints149
- Performing a Physical Environmental Analysis150
- Harsh Environmental Conditions150
- Physical Obstructions151
- Metallic Material151
- Packaging151
- Cabling151
- Electrostatic Discharge151
- Performing an RF Environmental Analysis152
- Planning a Site Survey153
- Determining the Ambient EM Noise154
- Analyzing the Electrical Environmental Conditions156
- Protecting the RFID System from Interference and Noise156
- Preparing Your Own Blueprints157
- Let the Experiment Begin157
- Using the Results of Your Experiment159
- Summary160
- Key Terms161
- Chapter 8: Performing Installation163
- Introduction164
- Preparing for Installation164
- Putting Together an RFID Solution165
- Considering Power Sources166
- Batteries166
- Power Supply Units167
- Uninterruptible Power Supplies167
- Power Over Ethernet167
- The Standard Installation Process and Practices168
- Design Selection168
- Site Analysis168
- Installation Tasks168
- System Management169
- The Tag Thing170
- Installing Hardware170
- Installing Readers171
- Installing Antennas171
- Installing Cables172
- Testing During Installation172
- Interrogation Zone Tests172
- Unit Tests173
- Application Integration Tests173
- System Tests173
- Ensuring Safety174
- Equipment Safety from the Environment174
- Electrostatic Discharge175
- Grounding176
- Ground Loops177
- Safety Regulations177
- Working With Various Installation Scenarios177
- Setting Up Stationary Portals178
- Setting Up a Conveyor Portal178
- Setting Up a Dock Door Portal180
- Setting Up a Shelf Portal181
- Setting Up Mobile Portals183
- Handheld Interrogator Portals183
- Mobile-Mount Portals183
- Summary185
- Key Terms186
- Chapter 9: Working With RFID Peripherals187
- Introduction188
- Smart Labels: Where RFID Meets Barcode188
- Working With RFID Printers189
- Understanding RFID Printers190
- Installing the RFID Printer193
- Configuring the RFID Printer195
- Troubleshooting the RFID Printer197
- Understanding Ancillary Devices and Concepts201
- Encoders and Label Applicators201
- RFID Printer Encoders201
- Automated Label Applicators202
- Pneumatic Piston Label Applicators202
- Wipe-On Label Applicators203
- Feedback Systems205
- Photo Eyes206
- Light Trees206
- Horns207
- Motion Sensors208
- Real-Time Location Systems208
- Summary211
- Key Terms212
- Chapter 10: Monitoring and Troubleshooting RFID Systems215
- Introduction216
- Monitoring an RFID System216
- Understanding Root-Cause Analysis216
- Understanding Monitoring219
- Status Monitoring219
- Performance Monitoring220
- Monitoring and Troubleshooting Interrogation Zones220
- Mean Time Between Failures (MTBF)220
- Average Tag Traffic Volume221
- Actual Versus Predicted Traffic Rate222
- Read Errors to Total Reads Rate223
- Read Error Change Rate223
- Monitoring and Troubleshooting Tags224
- Identifying Improperly Tagged Items224
- Identifying Reasons for Tag Failures225
- Managing Tag Failures226
- Management Prior to Applying Tags226
- Management During Application227
- Management After Applying the Tags/During Tracking227
- Monitoring and Troubleshooting Hardware228
- Understanding the Causes of Hardware Failures228
- Diagnosing RFID Hardware Failures229
- Standard Troubleshooting Procedure230
- Summary232
- Key Terms233
- Chapter 11: Threat and Target Identification235
- Introduction236
- Attack Objectives236
- Radio Frequency Manipulation237
- Spoofing237
- Insert237
- Replay238
- DOS238
- Manipulating Tag Data238
- Middleware239
- Backend240
- Blended Attacks241
- Summary242
- Chapter 12: RFID Attacks: Tag Encoding Attacks243
- Introduction244
- Case Study: John Hopkins vs. SpeedPass244
- The SpeedPass244
- Breaking the SpeedPass248
- The Johns Hopkins Attack250
- Lessons to Learn253
- Summary256
- Chapter 13: RFID Attacks: Tag Application Attacks257
- MIM258
- Chip Clones - Fraud and Theft258
- Tracking: Passports/Clothing262
- Passports264
- Chip Cloning > Fraud266
- Disruption268
- Summary269
- Chapter 14: RFID Attacks: Securing Communications Using RFID Middleware271
- RFID Middleware Introduction272
- Electronic Product Code System Network Architecture272
- EPC Network Software Architecture Components272
- Readers272
- RFID Middleware273
- EPC Information Service273
- Object Name Service274
- ONS Local Cache274
- EPC Network Data Standards274
- EPC275
- PML275
- RFID Middleware Overview275
- Reader Layer-Operational Overview277
- Smoothing and Event Generation Stage280
- Event Filter Stage280
- Report Buffer Stage280
- Interactions with Wireless LANs281
- 802.11 WLAN281
- Attacking Middleware with the Air Interface283
- Understanding Security Fundamentals and Principles of Protection287
- Understanding PKIs and Wireless Networking287
- Understanding the Role of Encryption in RFID Middleware288
- Overview of Cryptography288
- Symmetric Ciphers289
- Asymmetric Ciphers291
- Elliptic Curve Ciphers292
- Understanding How a Digital Signature Works292
- Basic Digital Signature and Authentication Concepts293
- Why a Signature Is Not a MAC293
- Public and Private Keys293
- Why a Signature Binds Someone to a Document294
- Learning the W3C XML Digital Signature294
- Applying XML Digital Signatures to Security297
- Using Advanced Encryption Standard for Encrypting RFID Data Streams298
- Addressing Common Risks and Threats298
- Experiencing Loss of Data299
- Loss of Data Scenario299
- The Weaknesses in WEP299
- Criticisms of the Overall Design300
- Weaknesses in the Encryption Algorithm300
- Weaknesses in Key Management301
- Securing RFID Data Using Middleware302
- Fields:302
- Using DES in RFID Middleware for Robust Encryption303
- Using Stateful Inspection in the Application Layer Gateway For Monitoring RFID Data Streams305
- Application Layer Gateway305
- Providing Bulletproof Security Using Discovery, Resolution, and Trust Services in AdaptLink(tm)306
- Discovery Service306
- Resolution, ONS, and the EPC Repository307
- EPC Trust Services307
- Summary309
- Chapter 15: RFID Security: Attacking the Backend311
- Introduction312
- Overview of Backend Systems312
- Data Attacks314
- Data Flooding314
- Problem 1314
- Solution 1314
- Problem 2314
- Solution 2314
- Purposeful Tag Duplication315
- Problem315
- Solution315
- Spurious Events315
- Problem315
- Solution315
- Readability Rates315
- Problem315
- Solution316
- Virus Attacks316
- Problem 1 (Database Components)316
- Problem 2 (Web-based Components)316
- Problem 3 (Web-based Components)316
- Solution 1317
- Problem 4 (Buffer Overflow)317
- Solution 4317
- RFID Data Collection Tool - Backend Communication Attacks317
- MIM Attack317
- Application Layer Attack317
- Solution318
- TCP Replay Attack318
- Solution318
- Attacks on ONS318
- Known Threats to DNS/ONS318
- ONS and Confidentiality319
- ONS and Integrity319
- ONS and Authorization319
- ONS and Authentication320
- Mitigation Attempts320
- Summary321
- Chapter 16: Management of RFID Security323
- Introduction324
- Risk and Vulnerability Assessment324
- Risk Management326
- Threat Management328
- Summary331
- Index333
RFID is a method of remotely storing and receiving data using devices called RFID tags. RFID tags can be small adhesive stickers containing antennas that receive and respond to transmissions from RFID transmitters. RFID tags are used to identify and track everything from Exxon EZ pass to dogs to beer kegs to library books.
Major companies and countries around the world are adopting or considering whether to adopt RFID technologies. Visa and Wells Fargo are currently running tests with RFID, airports around the world are using RFID to track cargo and run customs departments, universities such as Slippery Rock are providing RFID-enabled cell phones for students to use for campus charges. According to the July 9 CNET article, RFID Tags: Big Brother in Small Packages?, "You should become familiar with RFID technology because you'll be hearing much more about it soon. Retailers adore the concept, and CNET News.com's own Alorie Gilbert wrote last week about how Wal-Mart and the U.K.-based grocery chain Tesco are starting to install "smart shelves" with networked RFID readers. In what will become the largest test of the technology, consumer goods giant Gillette recently said it would purchase 500 million RFID tags from Alien Technology of Morgan Hill, CA."
For security professionals needing to get up and running fast with the topic of RFID, this How to Cheat approach to the topic is the perfect "just what you need to know" book!
* For most business organizations, adopting RFID is a matter of when
* The RFID services market is expected to reach $4 billion by 2008
* Covers vulnerabilities and personal privacy--topics identified by major companies as key RFID issues
Major companies and countries around the world are adopting or considering whether to adopt RFID technologies. Visa and Wells Fargo are currently running tests with RFID, airports around the world are using RFID to track cargo and run customs departments, universities such as Slippery Rock are providing RFID-enabled cell phones for students to use for campus charges. According to the July 9 CNET article, RFID Tags: Big Brother in Small Packages?, "You should become familiar with RFID technology because you'll be hearing much more about it soon. Retailers adore the concept, and CNET News.com's own Alorie Gilbert wrote last week about how Wal-Mart and the U.K.-based grocery chain Tesco are starting to install "smart shelves" with networked RFID readers. In what will become the largest test of the technology, consumer goods giant Gillette recently said it would purchase 500 million RFID tags from Alien Technology of Morgan Hill, CA."
For security professionals needing to get up and running fast with the topic of RFID, this How to Cheat approach to the topic is the perfect "just what you need to know" book!
* For most business organizations, adopting RFID is a matter of when
* The RFID services market is expected to reach $4 billion by 2008
* Covers vulnerabilities and personal privacy--topics identified by major companies as key RFID issues