An investigative analysis of the security weaknesses in the evolution of RFID enabled passport. (1st January 2012)

• Record Type: Journal Article
• Authors: Bogari, Eyad Abdullah; Zavarsky, Pavol; Lindskog, Dale; Ruhl, Ron
• Is Part Of: International journal of internet technology and secured transactions. Volume 4:Number 4(2012)
• Page Start: 290
• Page End: 311
• Publication Date: 2012-01-01
• Subjects: radio frequency identification -- RFID -- e-passport security features -- e-passport vulnerabilities -- International Civil Aviation Organization -- ICAO -- PKI -- internet technology and secured transactions; Internet -- Security measures -- Periodicals; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1748-569X

Abstract

Since the introduction of radio frequency identification (RFID) enabled passports, the system has been plagued with various vulnerability issues that prove to compromise the e-passport security. To date, three generations of e-passports have been introduced by the International Civil Aviation Organization (ICAO) and the European Union (EU). The first two generations of e-passports are being issued worldwide. This paper presents the evolution of these passports over the years to develop taxonomy of the weaknesses and to serve as a reference point detailing security vulnerabilities linked to the RFID e-passport features in the three generations. The findings can also assist in profiling possible attack vectors on the existing RFID enabled passports and in developing comprehensive RFID e-passport risk mitigation strategies. To illustrate the importance of a comprehensive risk strategy when using RFID e-passport, the attack process modelling method is used to highlight the possible attacks and weaknesses which could result from not using one or more security features.