Radio Frequency Identification [RFID]

systems have become popular for

automated identification and supply chain

applications. This article describes the

technical fundamentals of RFID systems

and the associated standards. Specifically,

we address the security and privacy aspects

of this relatively new and heterogeneous

radio technology. We discuss the related

security requirements, the threats and the

implemented mechanisms. Then the current

security and privacy proposals and their

enhancements are presented. Finally we

discuss the role of this technology in

Ubiquitous Computing-The automated identification of objects

with electromagnetic fields is the major

purpose of the RFID [Radio Frequency

Identification] technology. An RFID system

basically consists of transponders [tags],

readers [scanners] and application systems

for further processing of the acquired data.

There is a large variety of different RFID

systems: they may use low, high or ultra

high frequencies, the transponder may emit

only a fixed identifier or possess

significant memory and processing

capabilities. Transponders may incorporate

no security features at all or realise

effective security protocols similar to

smartcards. Most transponders are

passively powered by the radio field

emitted by the reader but there are also

active tags with a separate power supply.

The transponder design is also little

uniform: there are e.g. tiny tags with a size

of several millimetres, very thin “smart

labels” or standard ID-1 cards