Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [rfid]

Radio Frequency identification

-1
votes
2answers
49 views

What kind of RFID chips are on parking tags?

I was looking at buying a Proxmark, but one of my bigger interests in parking tags. What kind of RFID tags are commonly used in parking badges, and is that kind programmable with a Proxmark?
3
votes
1answer
68 views

How to tell Mifare Plus from others?

How would one determine what version of Mifare a system is using, if one only has access to the fob? For example: https://www.amazon.com/MIFARE-Blue-Key-Fobs-RFID/dp/B011PJXG0U From the product info ...
2
votes
2answers
214 views

RFID-Safe Wallet destroys credit card?

I'm getting a hang of paying with credit cards, and contactless payment especially, lately (which was quite uncommon where I live until like a few months ago). I'm now looking to buy one of these ...
0
votes
0answers
95 views

Cloning NFC card failed - dump looks identical

I've been trying to experiment with cloning NFC cards as part of an experiment. I've successfully got to the point where I've got a dump of both cards (done with Mifare Classic Tool). After the '...
0
votes
2answers
84 views

RFID Transmission from far away

Is it possible to trigger a reader from a standard RFID Access Control System? More specifically the badge system commonly used in companies for allowing entry. As in passing an ID to it? Assuming ...
1
vote
0answers
36 views

Security of RFID/NFC card Payment [closed]

You are standing in front of a building with 3 rooms and have a NXP Mifare Classic 1k card. In the first room is a device (device1) that can do the following things: Shows how much money is on the ...
3
votes
1answer
51 views

What secure RFID standards are there; for high value item inventory?

I am wanting to use some RFID devices to help with inventory management of some high value items (paintings). The paintings are packed in wooden transport cases, awaiting shipment. Periodically we, ...
0
votes
0answers
123 views

Cloning Contactless Credit Cards [duplicate]

I have the idea to inject an RFID/NFC chip in my hand and use it for payments and some other stuff. As far as I understand, Visa Paywave is just an RFID chip with a specific ID in it, I've tried ...
1
vote
0answers
38 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
2
votes
2answers
924 views

Why do DESFire and Mifare Plus cards offer a random UID feature?

Why do DESFire cards and Mifare Plus cards offer a Random UID feature? What risks should it mitigate or what features should it offer?
0
votes
0answers
23 views

Using Access Readers for software access

Is it possible to use card access readers for something other than physical access? I've been reading about Wiegand and OSDP protocols and it looks like the hardware is all based on that (with some ...
1
vote
0answers
42 views

How is the key shared between tag and reader in RFID mutual AES protocol?

In the RFID mutual authentication protocol, how and where are data stored? What data is stored in the tag, reader and server (database) before first time of communication? For example, in the AES-128 ...
-3
votes
1answer
74 views

Are active tags more vulnerable than passive ones?

According to me, active RFID tags are more likely to suffer from a security attack (i.e. the risk is higher) than passive tags because active tags manifest their presence themselves in their ...
4
votes
2answers
260 views

How to make a secure communication between UHF reader and UHF RFID Tag?

I found some boom barriers,used for gate system, were integrated with UHF reader + access controller and a UHF stickers (attached in car's windshield) for access control using wiegand protocol. In ...
82
votes
4answers
35k views

Can a student ID containing an NFC chip be cloned?

The head of our IT department and Networking class in my college has given me and another student a challenge; he told us that if we could clone the NFC tags in our student ID's used to sign in on ...
1
vote
2answers
151 views

RFID lock security

first of all, i really apologize for asking this kind of generic question, but since i am a complete newbie in this area, i hope you wont mind. I found a nice and cheap RFID powered locking system (...
1
vote
1answer
304 views

mifare desfire ev1 security with wiegand and rs485

I have learned a lot on access badge rfid but something there is not much in the google world. I know Mifare Desfire ev1 works like apps with several keys for each app. As of now it is the most ...
0
votes
2answers
618 views

What should I know to prevent relay attack on NFC?

I am doing thesis on "NFC relay attack" in my BSc last year. I have studied 10-15 papers and learned the basics of NFC and relay attack. Still I am no where near to understand how relay attack is ...
1
vote
0answers
544 views

NFC Forum Type 4 Tag and NXP MIFARE DESFire EV2?

I have some comprehension problems regarding the NFC Forum Type 4 Tag capabilities of NXP MIFARE DESFire EV2. I found the NXP Application Note AN1104 regarding NFC Forum Type 4 Tag and NXP MIFARE ...
1
vote
2answers
1k views

Are NFC tags with cryptographic features “write-only”?

I was wondering how exactly cryptographic NFC tags/cards retain their security. I read that there are certain types of cards that are able to perform symmetric or asymmetric cryptography. These cards ...
0
votes
1answer
92 views

Why are card associations launching RFID enabled payment cards despite of their being unsecure?

You can use applications to get data from these cards. I got tracks data of my cards as well as card number and expiry from my debit card just by single tap of phone. A criminal can use that data and ...
3
votes
2answers
14k views

Mifare DESfire EV1 cloning?

How can I clone an encrypted Mifare DESfire EV1 Card? Tried a 13.56Mhz Reader/writer from eBay but didn't work properly... I need to find any possible way of doing this.
1
vote
0answers
143 views

Connect RFID readers with system/PC [closed]

I have a Raspberry Pi, HID smartcard (HID iClass Px G8Y), HID Card Reader (RP40 multiClass). What I am trying to do is to read the data from this smartcard via the Card Reader onto my system (Laptop/...
2
votes
1answer
6k views

Is there a reason why Android blocks emulating a RFID tag?

So, I have this public transportation card, as well as a card that grants access to my school and lastly one that grants access to my work's office building. My android device doesn't allow me to ...
1
vote
3answers
777 views

How to make the Tag number of the RFID device appear as a secret number?

I just bought RFID-reader device (USB reader) and with it the Tag cards. These tag cards are meant to be as a secret card that no one should know the number of it even its owner. The problem is the ...
1
vote
1answer
571 views

13.56 Mhz RFID security

I am new to the security field, i hope you can help me with this issue, I am designing an access control system based on RFID 13.56 Mhz, and i am using Mifare RC522 IC, which is compatible with the ...
2
votes
1answer
915 views

Mifare Desfire symmetric authentication with master key on android

I wanted to use the Mifare Desfire chip for product authentication purposes, where the chip would be embedded into products. As such, I am looking for a NFC solution that makes it virtually impossible(...
3
votes
3answers
757 views

mifare classic 1k for micropayments

Can Mifare Classic 1k be used for micro payments in a secure way? I have a system in mind for use in a arcade game saloon. You are getting a card from cashier and can top it up for example with 100 ...
1
vote
3answers
350 views

Are wireless card skimmers just fearmongering?

I'm not sure about other countries but Australian Banks have been releasing cards with RFID Chips in them (for what reason is beyond me since around the same time there's been payway apps which swap ...
2
votes
0answers
4k views

Is it possible to clone an NFC/RFID chip that uses IsoDep, NfcA and NdefFormatable

I have an NFC/RFID keychain that looks pretty much like this one: When I read it with an Android app called "Nfc Reader", it shows me a specific ID (always the same) and it says that these ...
4
votes
3answers
682 views

Is this RFID blocking wallet actually secure?

This question is based on a quick experiment that I ran when questioning the effectiveness of my RFID blocking wallet (this one). In my experiment, I walked out of my office, placed my RFID id card in ...
6
votes
1answer
372 views

Privacy and security risks of Green Card scanning with or without offical RFID protection envelope

The presentation slides by Bishop Fox at RFID Hacking - Live Free or RFID Hard - 01 Aug 2013 – Black Hat USA 2013 – Las Vegas, NV briefly describes a number of RFID hacking approaches, and ends with a ...
97
votes
4answers
42k views

How can RFID/NFC tags not be cloned when they are passive technology?

Everywhere a question like this is asked, I see people responding that (in a scenario where a card is used) the card does some processing with the data it receives/generates some data when it receives ...
2
votes
4answers
792 views

Best practices for loyalty cards (barcode & NFC)

I am currently trying to determine the best way to go about designing a system that integrates both barcodes and NFC passes. The barcodes will be displayed on a phone screen. The barcode (2D, Aztec, ...
5
votes
0answers
80 views

How do (broadcast-only/passive) RFID licence plates assert their identity?

I would have guessed by some kind of challenge-response, but there seem to be many claims of 'passive' or 'broadcast-only' tags in the plates. For example from http://www.e-plate.com/security.html: ...
7
votes
1answer
350 views

What is the current state of RFID / NFC security?

I'm attempting to do some RFID and NFC cloning and replaying research, as I'm hoping to be able to demo physical security as an attack vector to a few of out clients and prospects. The downside (...
1
vote
1answer
6k views

What's the best way to test if an RFID blocking wallet is effective? [closed]

I was recently gifted a wallet that alleges to block RFID signals. As I am sure you fine folks at Information Security are aware, this is to protect the information stored on my contactless bank card ...
9
votes
1answer
1k views

How do EMV contactless cards protect against replay attacks?

I understand that standard RFID cards are vulnerable to replay attacks however, how do smart cards which are also contactless protect against replay attacks? Is this decided by the chip or by the ...
3
votes
0answers
2k views

What are the differences between the Proxmark3 and the Chameleon Mini? [closed]

I want to play with RFID/NFC cards and I need a tool to read, write and emulate tags. I know the Proxmark 3 (http://www.proxmark.org/), but I also heard about the new Chameleon Mini (https://www....
7
votes
1answer
1k views

RFID blocker with a card

There is a company out there that developed a product which looks like a simple card ( format of a credit card or so ) and claims to block rfid-signals in a distance of 10mm. It is not a case to ...
0
votes
0answers
2k views

How Mifare classic nested attack works?

I familiarised myself with all available docs on mifare nested attack available, yet I fail to see how predicting tag nonce can help cracking keys. When tag sends nonce (N_t), key stream ks1 is ...
2
votes
0answers
123 views

What's the standard protocol for secure contactless communication

A contactless smartcard has to communicate with a reader in a secure way. The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...
2
votes
1answer
145 views

Using metal business card holders as RFID wallets

I have been reading about RFID technology and products. Are metal business and/or credit card holders viable substitutes for RFID wallets? Are all metal wallets Faraday cages?
7
votes
3answers
2k views

Are RFID shielding sleeves/wallets necessary for payment cards?

I have seen advertised several times now products that claim to "protect" contactless payment cards (e.g. special sleeves, wallets). What exactly do these products protect against? Is it just ...
4
votes
0answers
1k views

NXP NTAG 21x/Desfire password protection and Original signature, protects against cloning?

Hi i saw a few threads about NFC NTAG against cloning and NTAG Desfire , i just want to find out if NTAG 21x with their "New" password protection and "Original Signature against cloning" really does ...
5
votes
2answers
2k views

Approach to hack RFID Cards

Recently RFID cards 13.56Mhz band caught my eye. What is the step by step approach to hack RFID Cards? I have a rough idea, but there are still quite a few doubts. Identify the type of the card. Eg. ...
2
votes
1answer
2k views

Code execution through JSP RFI?

I'm working on improving my understanding of RFI (Remote File Inclusion), especially in JSP apps. I've created a vulnerable application that imports a JSP page from another server to replicate the ...
1
vote
2answers
406 views

RFID – based identification card

I have the question below, I did question 1 and 2. I am failing to understand question 3. You have been asked to participate in developing the requirements for RFID-based identification card for ...
2
votes
2answers
874 views

Securing RFID membership cards [duplicate]

Let's say I issue RFID-enabled membership cards for events. People can have their credit cards, personal ID, etc tied to this membership card. When they come to my events, they can use this card to ...
2
votes
0answers
516 views

How secure is the “read-only” feature of a passive NFC tags?

I want to write some data in a NFC tag (probably mifare) then put a permanent lock to it, so it can be read-only. How secure is that ? As in, how am I certain that nobody every will be able to re-...