RFID Transaction Terminal Relay Attack Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing RFID-based transaction systems are vulnerable to relay attacks, where an attacker increases the range of the RFID reader using relay stations, allowing unauthorized transactions by simulating the data carrier's presence within the communication field.

Innovation Solution

A method where position data from a portable data carrier is recorded and evaluated by a transaction terminal to determine if it is within a close range of the communication field, using movement and field strength data to reconstruct the movement path and verify the data carrier's proximity, thereby preventing relay attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If signal analysis methods (transit time or signal amplitude) are used to detect relay attacks, then detection reliability is improved, but device complexity increases

Engineering Contradiction:
Improverelay attack detection reliabilityVSAvoidsignal analysis complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces complex signal analysis methods (transit time measurement, amplitude analysis) with a geometric approach using position data and movement path reconstruction. Instead of analyzing electromagnetic signal characteristics, the system uses spatial coordinates and geometric evaluation to detect relay attacks, significantly reducing computational complexity while maintaining detection reliability

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent uses simple, easily obtainable position data from standard GPS or location services rather than requiring complex signal processing hardware. The position data serves as a lightweight alternative to sophisticated signal analysis equipment, providing adequate security with minimal resource requirements

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

2Ease of operation

If the communication field range is extended using relay stations, then ease of operation is improved, but security deteriorates

Engineering Contradiction:
Improvetransaction initiation convenienceVSAvoidrelay attack vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent performs preliminary evaluation of position data and movement paths before authorizing transactions. By checking whether the data carrier has moved through the communication field in a realistic manner before the transaction occurs, the system prevents relay attacks while allowing legitimate long-range transactions to proceed

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system continuously monitors position data and movement characteristics, providing feedback to determine whether to permit transactions. This ongoing evaluation allows the system to adapt to different scenarios, permitting convenient long-range operations when movement patterns are legitimate while blocking relay attacks when patterns are suspicious

Inventive Principle:
Principle #23Feedback

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach allows for quick and reliable identification of relay attacks, ensuring that transactions are only initiated when the data carrier is within a realistic vicinity of the communication field, thus enhancing security without requiring complex signal analysis.

Implementation Method 1

an RFID reader (as a transaction terminal) generates a short-range electromagnetic field for carrying out a transaction with an RFID transponder

Methodology Applied
Scientific EffectElectromagnetic field generation: Electromagnetic Induction

Implementation Method 2

The RFID transponder mostly receives its operating energy via the communication field

Methodology Applied
Scientific EffectElectromagnetic energy reception: Electromagnetic Induction

Data Source

PatentEP2592584B1Secure wireless transaction
Publication Date: 2014.06.25 GIESECKEDEVRIENT IP
  • EP2592584B1 patent drawingFigure 1~2
  • EP2592584B1 patent drawingFigure 3

AI summary

The disk position data (16) comprising the motion data which reflect the movements of portable data carrier (10), is recorded in the data carrier and is sent to a transaction terminal (20), through wireless communication. The transaction process is initiated by the transaction terminal, only if the transaction terminal determines that the data carrier is situated in a local area (N) of the wireless communication field (E), by evaluating the disk position data. The position data is further comprised of the local field strength information of the communication field. Independent claims are included for the following: (1) a transaction terminal; and (2) a portable data carrier.