RFID DoS attacks 'proven'

RFID DoS attacks 'proven'

Summary: Australian researchers claim to have shown that RFID tags can be disrupted by being bombarded with different radio frequencies

TOPICS: Security

Researchers say they have proven that effective attacks can be launched against RFID tags.

In tests, generation one standard RFID tags and readers were unable to function after they were overloaded with data, researchers at Edith Cowan University in Perth said in a report published this month.

"Vulnerabilities in the newer UHF style of RFID tags have been found and are of concern for anyone trying to implement a RFID system that would have mission critical or human life issues involved in it," warned academics in the SCISSEC research group at Edith Cowan University.

Although many companies are trialling RFID tagging in their supply chain, the tags are not commonly used in life-critical situations today. However, the tags are used by the US military to track supplies.

Generation two standard RFID tags could also be disrupted, according to the researchers. Generation two tags are more sophisticated than generation one tags, and can operate at four different speeds.

RFID relies on tags being identified by readers when they are within range. Readers communicate with the tags by hopping between a number of channels within an allocated band of frequencies (902-928MHz). It was thought this provided security because the reader could hop between frequencies when encountering interference.

In the tests, the Australian researchers saturated the frequency range used by the tags, which prevented the tags from talking to the readers. The Australian researchers said in their report that the use of frequency hopping would not stop DoS attacks, as the tags themselves could not hop frequencies.

They demonstrated that from a range of one metre they could disrupt communications between tags and readers, putting the tag into a "communication fault state".

While the readers can hop frequencies in the allocated band range if they encounter interference, RFID tags cannot as they regard the entire band as one channel.

Last month, Dutch researchers announced the successful creation of a virus capable of infecting RFID tags.

Topic: Security

Tom Espiner

About Tom Espiner

Tom is a technology reporter for ZDNet.com. He covers the security beat, writing about everything from hacking and cybercrime to threats and mitigation. He also focuses on open source and emerging technologies, all the while trying to cut through greenwash.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • This has been done in all aspects of rf communications, it is called jamming. What is the point they are trying to make?
  • RF Jamming Works!

    WOW what a news story

    Can just see ASDA shoopers pushing there trolley full of batteries and signal generators around the shop so they can get out of the new RFID checkout without paying the bill!