Chapter 6 - RFID Attacks: Securing Communications Using RFID Middleware

Abstract

This chapter focuses at ways that multi-layered security built into the Radio Frequency Identification (RFID) middleware layer can be used to prevent unauthorized access. It looks at the middleware implementation provided in Commerce Events'AdaptLinkTM, which provides a scalable security infrastructure to thwart RFID attacks. The chapter begins by examining the EPCnetworkTM protocols adopted by EPCglobal, the de facto standard for the current cryptographic techniques used within the enterprise. The chapter also recalls the security fundamentals and principles that are the foundation of any good security strategy, addressing a range of issues from authentication and authorization, to controls and audit. The proliferation of RFID tags has quickly enabled the whole enterprise to gain real-time visibility into business information. For businesses to retain their competitive edge, protecting this information is critical. RFID middleware is the key enabling infrastructure that leverages existing investments and new development in security standards to bring robust RFID security in the enterprise.