HID addresses virus concerns in RFID technology

Apr 18, 2006 12:25 PM

Peter Lowe, chief technology officer for HID Global, Irvine, Calif., has responded to recent concerns about the threat of viruses infiltrating and spreading throughout RFID systems for physical access control.
"RFID is a broad term that encompasses everything from simple devices that contain a few thousand transistors and feature little or no security to contactless smart cards which are tiny computers that contain several million transistors and incorporate military grade security," Lowe says.
The current research on RFID viruses focuses on read/write RFID tags used for applications such as animal tagging and product identification in retail, Lowe says. The research says that readers could interpret data stored on RFID cards as executable instructions. "The reality is that readers never interpret the contents of a card as executable code; they always interpret the contents as data only," Lowe says.
Lowe adds that some smart cards do use read/write technology, such as those using HID Global's iCLASS technology. "The benefit of this technology lies in the enhanced security it offers through encryption and mutual authentication, making it less susceptible to tampering. Other techniques such as the use of digital signatures can be employed to verify the authenticity of data on a card and that the data came from a trusted source," he says.
RFID scientists and experts from the International Organization for Standardization (ISO) also responded to the virus concerns at a recent AIM Global meeting in Kyoto, Japan. They emphasized "that there are two broad types of RFID tags, ones that have pre-encoded, or fixed data, and ones that have data that can be changed. Systems with fixed data such as those used to identify pets cannot be changed and therefore are immune to infection by a virus."
Furthermore, most readers that control doors remain read-only and could not rewrite a card. "Comparing RFID tags used in animal identification and supply chain applications to contactless smart cards used in our industry is like comparing go-carts to military tanks," Lowe says.

Want to use this article? Click here for options!
© 2012 Penton Media Inc.

This month in Access Control

• Targeting The Customer
• Electronic Pedigrees
• One Hero Among Many
• Who? What? When? Where? Why?
• More from September's issue