ePassport reloaded goes mobile

ePassports reloaded goes mobile Jeroen van Beek BlackHat Europe 2009, Amsterdam

Where will we go today? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Technology overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Technology overview, ct. doors RFID reader and optical scanner camera

Technology overview, ct. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Path of attack: step 1 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

“ Employee Amsterdam Airport steals blank passports” Passports were part of diplomatic mail.

Path of attack step 1, ct. + = +

Path of attack step 2a ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Path of attack step 2a, ct. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Active Authentication ,[object Object],= =

Path of attack step 2a, ct. ,[object Object],[object Object],[object Object],[object Object],[object Object]

Path of attack step 2b ,[object Object],[object Object],[object Object],[object Object]

Path of attack step 2b ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Path of attack step 2b, ct. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Clone with your phone, ct. ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Man In The Middle ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Impact ,[object Object],[object Object],Police and judicial cooperation only Set to implement later Expressed interest

Awareness ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Awareness, ct. ,[object Object],[object Object],[object Object],[object Object],[object Object]

Awareness, ct. ,[object Object],[object Object],[object Object]

Awareness, ct. ,[object Object],[object Object]

In 2002, 1.200 blank Dutch IDs were stolen. The printing company SDU did not officially report the crime(!) until the first documents were seen in the field in 2004…

EAC: the next generation ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Solutions ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Do it yourself ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],RFID reader, ~ $75 PC, ~ $750 JCOP v4.1 72k, ~$20 NFC phone, ~$200

Further reading ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

ePassport reloaded goes mobile

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (13)

Ähnlich wie ePassport reloaded goes mobile

Ähnlich wie ePassport reloaded goes mobile (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

ePassport reloaded goes mobile