easycard(1).pdf

(965 KB) Pobierz
The EasyCard system
Analyzing the EasyCard
Tampering with the EasyCard
Reverse Engineering a real-world RFID
payment system
How the EasyCard allows you to print your own digital money
Harald Welte
hmw-consulting.de
gnumonks.org
gpl-violations.org
osmocom.org
27th CCC Congress, December 2010, Berlin/Germany
Harald Welte
Reverse Engineering a real-world RFID payment system
The EasyCard system
Analyzing the EasyCard
Tampering with the EasyCard
Outline
1
The EasyCard system
Analyzing the EasyCard
Tampering with the EasyCard
2
3
Harald Welte
Reverse Engineering a real-world RFID payment system
The EasyCard system
Analyzing the EasyCard
Tampering with the EasyCard
About the speaker
Kernel / bootloader / driver / firmware development since
1999
IT security expert, focus on network protocol security
Core developer of Linux packet filter netfilter/iptables
Board-level Electrical Engineering
Always looking for interesting protocols (RFID, DECT,
GSM)
Open Source hardware/firmware/software for RFID: librfid,
OpenPCD, OpenPICC
Harald Welte
Reverse Engineering a real-world RFID payment system
The EasyCard system
Analyzing the EasyCard
Tampering with the EasyCard
Introducing the EasyCard
EasyCard for Public Transport
April 2010: EasyCard as means of payment
Travelling to Taipei
Starting from 2006, I was doing a lot of freelancing work for
companies in Taiwan, resulting in numerous business trips to
the capital Taipei. As soon as you use public transport, you
notice they are using an RFID based system called EasyCard.
This was just after having worked extensively on the
OpenPCD
RFID reader and
OpenPICC
RFID tag simulator.
However, work kept me too busy to ever have a look at the
EasyCard until 2010.
Harald Welte
Reverse Engineering a real-world RFID payment system
The EasyCard system
Analyzing the EasyCard
Tampering with the EasyCard
Introducing the EasyCard
EasyCard for Public Transport
April 2010: EasyCard as means of payment
What is this EasyCard?
Harald Welte
Reverse Engineering a real-world RFID payment system
Zgłoś jeśli naruszono regulamin