Newsletters Welcome, Guest Log In | Register

Subscribe

Sign up now and get the best business technology insights direct to your inbox.

  • Daily Edge
  • CTO Edge Update
  • Business Tools & Templates
  • Aligning IT & Business Goals
  • Maximizing IT Investments

0

Researchers Clone U.S. RFID Passports

Posted by Kara Reeder Oct 27, 2008 11:06:33 AM

Researchers at the University of Washington have shown the relative easiness of hacking the RFID tags in U.S. border passports and enhanced driver's licenses (EDLs), reports vnunet.com. In a joint paper with Internet security firm RSA, researchers detailed how chips can be cloned from up to 150 feet.

 

The U.S. Passport Card (PASS Card) is intended to make crossing boarders easier and more secure. But researchers found the that RFID tags are essentially just barcodes with no security or privacy provisions. The tags also are missing the unique tag identifier codes that are recommended by the Department of Homeland Security.

 

According to The New York Times, Washington state and New York are the only states that use EDLs, but others are in the works.

 

Researchers say there is no reason to panic, as cards do not contain personal information. However, the problems demonstrate a systemic weaknesses in the border-crossing system. And with RFID tags being used more frequently in retail, shipping and other businesses, the tools of RFID hacking are becoming more easily available.

Add a comment Leave a comment on this blog post.

There are no comments on this post

IT Security Manual Template

Immediately download a customizable set of documents and templates that covers every aspect of IT Security. These templates are compliant with ISO27000, HIPPAA and Sarbanes oxley standards.

Learn more >

Securing Your IT Environment

This research-driven best practices guide steps you through the entire process of securing your network and other elements of your IT environment.

Learn more >

Preventing Data Breaches in Privileged Accounts Using Access Control

This white paper explores insider attacks, threats and risks involved across every enterprise, and recommends a sound, cost-saving solution to prevent a disaster from happening to a company's financial assets and reputation using access control.

Buyer's Guide for Enterprise Single Sign-On

This white paper offers a thorough checklist that should enable potential ESSO implementers to deploy the right ESSO solution, to help eliminate sign-on problems, reduce helpdesk costs, maximize user productivity, strengthen security, simplify administration and accelerate regulatory compliance.