Analysis of OPACITY and PLAID Protocols for Contactless Smart Cards

Approved for public release; distribution is unlimited === There is an increasing use of contactless smart card technology for identification, access control, and financial transactions due to its numerous advantages. However, there is also an increasing number of attacks that exploit the insecure c...

Full description

Bibliographic Details
Main Authors: Kiat, Koh Ho, Run, Lee Yong
Other Authors: Fulp, John D.
Published: Monterey, California. Naval Postgraduate School 2012
Online Access:http://hdl.handle.net/10945/17385
Description
Summary:Approved for public release; distribution is unlimited === There is an increasing use of contactless smart card technology for identification, access control, and financial transactions due to its numerous advantages. However, there is also an increasing number of attacks that exploit the insecure contactless communications in order to gain unauthorized access to personal and sensitive information for illegitimate use. Open Protocol for Access Control Identification and Ticketing with privacY (OPACITY) and Protocol for Lightweight Authentication of Identity (PLAID) are two privacy-enhanced protocols that enable secure contactless communications to protect the confidentiality, integrity, and authenticity of contactless smart card information and transactions. This thesis will examine and analyze the principle mechanisms behind OPACITY and PLAID protocols to determine the strengths and weaknesses of the protocols, as well as to benchmark the performance of the protocols against each other.