RFID系统与EMV系统中的中继攻击.PDFVIP

RFID 系统与EMV 系统中的中继攻击 1 1,2 1,2 3 1 1,2 谢俊 ,刘军荣 ，陆海宁 ,林秋 ,谷大武 ,郭筝 (1.上海交通大学, 上海 200240；2.上海观源信息科技有限公司, 上海 200240； 3.上海华虹集成电路有限责任公司, 上海 200240) 摘 要：中继攻击是RFID 系统和EMV 系统中常见的攻击方式之一。本文详细介绍了中继攻击的基本原 理和实施方法,并提出了相应的防护措施。介绍了最早的中继攻击案例：早在1976 年，就有数学家提出了 中继攻击在对弈游戏中的应用。通过门禁系统和NFC 芯片信用卡中的中继攻击案例，详细分析了中继攻 击的基本原理，总结了现实中实施中继攻击必需的设备：中继读卡器、伪造智能卡和高速信道。进一步指 出中继攻击不仅仅局限于非接触式的系统。通过EMV 系统中的中继攻击案例，分析了接触式交易系统中 的中继攻击。最后提出了抵御中继攻击的安全措施：法拉第笼法、设定密码法、时间测定法和距离边界法 （DBP ），并分析了各个安全措施优缺点。 关键词：中继攻击; 防护措施; RFID; EMV; DBP Relay Attack in RFID System and EMV System 1 1,2 1,2 3 1 1,2 XIE Jun , LIU Jun-rong , LU Hai-ning , LIN Qiu , GU Da-wu , GUO Zheng (1.Shanghai Jiaotong University, Shanghai 200240, China; 2.Shanghai Viewsource Information Science Technology Co., Ltd, Shanghai 200240, China; 3.Shanghai Huahong Integrated Circuit Co., Ltd, Shanghai 200240, China) Abstract: Relay attack is common in RFID system and EMV system. This paper describe the theory of relay attack, present several implementations of relay attack, and put forward the countermeasures against it. Earliest relay attack is introduced: in 1976, a mathematician explained how someone who does not know the rules of chess could beat a Grandmaster. Relay attack scenario in access control system and NFC credit card are presented, through which we demonstrate the theory of relay attack and summarize that a relay attack requires three components: a reader device, a card emulator device and a fast communication channel. Furthermore, we pointed out relay attack is not restricted in contactless transaction systems. Contact based environment, such as EMV system is also vulnerable to relay at