Analys av säkerheten av RFID i inpasseringssystem
Radio Frequency Identification, RFID, is a convenient way to enable contactless identification which does not require any physical nor optical contact. As with any radio-based communication the signal can be intercepted, thus making the technology vulnerable to several kinds of attacks. Interception of communication is not the only threat. Since RFID tags might contain personal information or information that will grant the owner access to secure areas, skimming and spoofing attacks are also major threats against this technology. In this thesis report, the perspective of an adversary is portrayed in an RFID-enabled environment by presenting where RFID is used and how it could be abused. We also perform cloning attacks against two common types of RFID tags, EM4100 and Mifare Classic, and assess the threat against security that this could present. The likelihood of executing this attack is based on the required competence, equipment needed and its cost and under what conditions the attack actually can be performed in a real life situation. These results are presented and discussed in this report.