RFID Transaction Terminal Relay Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing RFID-based transaction systems are vulnerable to relay attacks, where an attacker increases the range of the RFID reader using relay stations, allowing unauthorized transactions by simulating the data carrier's presence within the communication field.
Innovation Solution
A method where position data from a portable data carrier is recorded and evaluated by a transaction terminal to determine if it is within a close range of the communication field, using movement and field strength data to reconstruct the movement path and verify the data carrier's proximity, thereby preventing relay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If signal analysis methods (transit time or signal amplitude) are used to detect relay attacks, then detection reliability is improved, but device complexity increases
Solution Approach 1:
The patent replaces complex signal analysis methods (transit time measurement, amplitude analysis) with a geometric approach using position data and movement path reconstruction. Instead of analyzing electromagnetic signal characteristics, the system uses spatial coordinates and geometric evaluation to detect relay attacks, significantly reducing computational complexity while maintaining detection reliability
Solution Approach 2:
The patent uses simple, easily obtainable position data from standard GPS or location services rather than requiring complex signal processing hardware. The position data serves as a lightweight alternative to sophisticated signal analysis equipment, providing adequate security with minimal resource requirements
2Ease of operation
If the communication field range is extended using relay stations, then ease of operation is improved, but security deteriorates
Solution Approach 1:
The patent performs preliminary evaluation of position data and movement paths before authorizing transactions. By checking whether the data carrier has moved through the communication field in a realistic manner before the transaction occurs, the system prevents relay attacks while allowing legitimate long-range transactions to proceed
Solution Approach 2:
The system continuously monitors position data and movement characteristics, providing feedback to determine whether to permit transactions. This ongoing evaluation allows the system to adapt to different scenarios, permitting convenient long-range operations when movement patterns are legitimate while blocking relay attacks when patterns are suspicious
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach allows for quick and reliable identification of relay attacks, ensuring that transactions are only initiated when the data carrier is within a realistic vicinity of the communication field, thus enhancing security without requiring complex signal analysis.
Implementation Method 1
an RFID reader (as a transaction terminal) generates a short-range electromagnetic field for carrying out a transaction with an RFID transponder
Implementation Method 2
The RFID transponder mostly receives its operating energy via the communication field
Data Source
Figure 1~2
Figure 3
AI summary
The disk position data (16) comprising the motion data which reflect the movements of portable data carrier (10), is recorded in the data carrier and is sent to a transaction terminal (20), through wireless communication. The transaction process is initiated by the transaction terminal, only if the transaction terminal determines that the data carrier is situated in a local area (N) of the wireless communication field (E), by evaluating the disk position data. The position data is further comprised of the local field strength information of the communication field. Independent claims are included for the following: (1) a transaction terminal; and (2) a portable data carrier.