Liaison Statement on RFID security

1
Liaison Statement on RFID security
SC31 MIIM Ad Hoc Meeting, Seoul, KOREA

• You Sung Kang
• (youskang_at_etri.re.kr)
• 2007. 10. 30

2
Summary
Purpose of this document

• To introduce the liaison statement which is sent
  to ISO/IEC JTC1 SC31 MIIM Ad Hoc Group from ITU-T
  Q.9/17
• To inform the recent status of RFID security
  activities in ITU-T Q.9/17
• To propose future plan for cooperation in order
  to protect Mobile RFID services from various
  attacks

3
Background

• Mobile RFID Security Framework

Backend network for Mobile RFID services
Tag-Reader interface for Mobile RFID services
Mobile RFID service network
Phone
ODS
Local ODS
Product
Cellular network
IS
RFID tag
Mobile RFID reader
ODS Object Directory Service IS Information
Service RPS RFID user Privacy management Service
Authentication
RPS
Data protection
Key management
Privacy protection
4
LS From ITU-T Q.9/17

• Document Header

5
LS From ITU-T Q.9/17
Purpose of Q.9/17 LS

• To provide information on the recent status of
  the RFID security activities
• To propose stronger collaboration with SC31 MIIM
  Ad Hoc Group

Recent status of the RFID security

• Developing a draft Recommendation regarding
  Privacy Protection Framework for Networked ID
  Services (Xnidsec-1)

Proposal of a common Rec. IS.

• Developing a common Recommendation
  International Standard on X.nidsec-1

• The LS of ITU-T Q.9/17 proposes to include the
  USN security.
• But, we consider only the RFID security in this
  presentation.

6
Proposal For Collaboration
Conditions

• X.nidsec-1 is restricted within privacy
  protection and will be consented sooner or later.
• ISO/IEC JTC1 SC31 MIIM Ad Hoc group will be
  evolved to a new group in the next year.

New common Rec. IS
Proposal
Anticipated scope

• Review of security and privacy requirements for
  Mobile RFID services
• Definition of functions and parameters for mobile
  handset authentication
• Definition of functions and parameters for user
  data integrity
• Definition of functions and parameters for
  kill/access passwords management
• Definition of functions and parameters for
  consumer privacy protection

All items shall be compatible with X.nidsec-1
7
Discussion

• Any Questions or Comments?

Thank you for your attention !