Journal article
User-aided reader revocation in PKI-based RFID systems
Journal of computer security, Vol.19(6), pp.1147-1172
12/23/2011
DOI: 10.3233/JCS-2011-0435
Abstract
Recent emergence of RFID tags capable of performing public key operations motivates new RFID applications, including electronic travel documents, identification cards and payment instruments. In this context, public key certificates form the cornerstone of the overall system security. In this paper, we argue that one of the prominent challenges is how to handle revocation and expiration checking of RFID reader certificates. This is an important issue considering that these high-end RFID tags are geared for applications such as e-documents and contactless payment instruments. Furthermore, the problem is unique to public key-based RFID systems, since a passive RFID tag has no clock and thus cannot use (time-based) off-line methods.
In this paper, we address the problem of reader certificate expiration and revocation in PKI-based RFID systems. We begin by observing an important distinguishing feature of personal RFID tags used in authentication, access control or payment applications – the involvement of a human user. We take advantage of the user's awareness and presence to construct a simple, efficient, secure and (most importantly) feasible solution. We evaluate the usability and practical security of our solution via user studies and discuss its feasibility.
Details
- Title: Subtitle
- User-aided reader revocation in PKI-based RFID systems
- Creators
- Rishab Nithyanand - Stony Brook University, Stony Brook, New York, NY, USA. E-mail: rnithyanand@cs.stonybrook.eduGene Tsudik - University of California, Irvine, CA, USA. E-mail: gts@ics.uci.eduErsin Uzun - Palo Alto Research Center, Palo Alto, CA, USA. E-mail: ersin.uzun@parc.com
- Contributors
- Dimitris Gritzalis (Editor)
- Resource Type
- Journal article
- Publication Details
- Journal of computer security, Vol.19(6), pp.1147-1172
- DOI
- 10.3233/JCS-2011-0435
- ISSN
- 0926-227X
- eISSN
- 1875-8924
- Language
- English
- Date published
- 12/23/2011
- Academic Unit
- Center for Social Science Innovation; Computer Science; Public Policy Center (Archive)
- Record Identifier
- 9984002313702771
Metrics
49 Record Views