Abstract
We study the Mifare Ultralight cards in detail, and we present a new secure method for the recharge of these RFID disposable tickets that also extends to the case of multiple resources on a single device. We specify a formal but yet realistic semantics of these cards, and we also define a simple imperative language suitable to program secure APIs. In fact, the language is provided with a type-system enforcing security properties on resources stored in the card.
Work partially supported by the RAS Project “TESLA: Techniques for Enforcing Security in Languages and Applications”.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Moscow metro: the worlds first major transport system to operate fully contactless with nxps mifare technology. press statement (2009), http://www.nxp.com/news/content/file_1518.html
Mifare ultralight contactless single-ticket IC, Product data sheet. Rev. 3.8 028638 (December 22 , 2010), www.nxp.com/documents/data_sheet/MF0ICU1.pdf
Bugliesi, M., Calzavara, S., Eigner, F., Maffei, M.: Resource-aware Authorization Policies for Statically Typed Cryptographic Protocols. In: Proc. of 24th IEEE Symposium on Computer Security Foundations (2011)
Centenaro, M., Focardi, R., Luccio, F., Steel, G.: Type-Based Analysis of PIN Processing APIs. In: Backes, M., Ning, P. (eds.) ESORICS 2009. LNCS, vol. 5789, pp. 53–68. Springer, Heidelberg (2009)
Gordon, A., Jeffrey, A.: A Type and Effect Analysisof Security Protocols. In: Cousot, P. (ed.) SAS 2001. LNCS, vol. 2126, p. 432. Springer, Heidelberg (2001)
Siekerman, P., van der Schee, M.: Security evaluation of the disposable ov-chipkaart v1.7. Research Project, University of Amsterdam (2007), http://staff.science.uva.nl/~delaat/sne-2006-2007/p41/Report.pdf
Steel, G.: Formal Analysis of PIN Block Attacks. Theoretical Computer Science 367(1-2), 257–270 (2006)
Tanenbaum, A.: Dutch public transit card broken (2008), http://www.cs.vu.nl/~ast/ov-chip-card/
Verdult, R.: Proof of concept, cloning the ov-chip card, Technical report, Radboud University Nijmegen (2008), http://www.cs.ru.nl/~flaviog/OV-Chip.pdf
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Focardi, R., Luccio, F.L. (2012). Secure Recharge of Disposable RFID Tickets. In: Barthe, G., Datta, A., Etalle, S. (eds) Formal Aspects of Security and Trust. FAST 2011. Lecture Notes in Computer Science, vol 7140. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-29420-4_6
Download citation
DOI: https://doi.org/10.1007/978-3-642-29420-4_6
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-29419-8
Online ISBN: 978-3-642-29420-4
eBook Packages: Computer ScienceComputer Science (R0)