blog/data/2011-01-18-rfid.txt

   1 Title: Masteroppgave fra UiO om RFID-sikkerhet
   2 Tags: norsk, personvern, rfid
   3 Date: 2011-01-18 15:10
   4
   5 <p>Mens jeg forsetter famlingen rundt i RFID-verden, kom jeg over en
   6 masteroppgave fra Institutt for Informatikk ved Universitetet i Oslo
   7 med tittelen
   8 "<a href="https://www.duo.uio.no/handle/10852/9990">Investigation
   9 of security features in Near-field communication (NFC)</a>" og følgende
  10 oppsummering:</p>
  11
  12 <blockquote>
  13 <p>With the increasing use of NFC and RFID technology it is important
  14 to look at the security, both for the user and for the system owner to
  15 see that the system is reliable. NFC is a standard inheriting some of
  16 the RFID standards and it is important to see how the old standards
  17 have handled security and how it is handled in NFC. There are certain
  18 RFID systems that are already in use, which is especially close to
  19 NFC. For example is
  20 <a href="http://en.wikipedia.org/wiki/MIFARE">Mifare</a> a system used
  21 in many public transportation systems as ticket and in contactless
  22 access cards. Another example is
  23 <a href="http://en.wikipedia.org/wiki/Biometric_passport">electronic
  24 passports</a> which uses a standard which is included in
  25 NFC. Examining the security in these and also investigate the use of
  26 NFC tags to make secure use of them is the focus in this thesis.</p>
  27 </blockquote>
  28
  29 <p>Rapportens analyse av MiFare Classic, som tilfeldigvis er systemet
  30 som brukes Universitetet i Oslos nye student- og ansattkort, er
  31 spesielt interessant for meg som jobber her.  Sikkerheten i MiFare
  32 Classic ble reversutviklet og problemene i sikkerheten presentert for
  33 <a href="http://events.ccc.de/congress/2007/Fahrplan/events/2378.en.html">CCC
  34 i 2007</a>.  Det er i dag mulig å klone slike kort.</p>
  35
  36 <p>Oppdatering 2015-01-14: URL-en til masteroppgaven fungerte ikke
  37 lenger.  Oppdatert til en som virker.</p>