Smart Cards and RFID Security Systems

The Royal Holloway Information Security Group (ISG) and its Smart Card Centre (SCC) are pleased to announce that students on the MSc in Information Security may now choose optional modules to specialize in the field of smart card and RFID (radio frequency identification) security systems from September 2009. This timely introduction gives students the opportunity to obtain a vocational qualification in the field of information security with theoretical and practical expertise in the security of smart cards and RFID.

The ISG’s MSc in Information Security has been a very successful programme over many years. The subject of Information Security, far from declining, is becoming increasingly important for modern society, government and industry. The ISG and the MSc are very well proven and respected, providing linkages with topical technologies and initiatives as well as the core subject material. Royal Holloway is a pioneer in establishing the security of smart cards as an academic discipline. The Royal Holloway Smart Card Centre (SCC)   was established in 2002 with joint founders Vodafone and Giesecke & Devrient. As well as conducting high quality research into smart card security it provides expert advice and consultancy to companies and government agencies.

From the start, the SCC provided a module on Smart Card Token Security to the highly successful MSc in Information Security. A recent review of the smart card module has provided an opportunity to incorporate an increased focus on RFID and mobile Near Field Communication technology in the curriculum and an upgrade of the SCC laboratories has established a new and well-equipped RFID lab.

With these developments the SCC can now support the Information Security Group, to deliver a master’s degree in smart card and RFID security systems. Successful students on this programme will be awarded the Royal Holloway MSc in Information Security but additionally will have “majored” or specialised in Smart Card and RFID Security Systems. They will complete the core modules of the MSc together with the Smart Cards/Token Security and Applications module and an in depth Project on some aspect of the security of smart cards or RFID undertaken in the SCC labs. See MSc in Information Security for details about the programme.

Smart cards and RFID are often studied in isolation, whereas ideally to obtain a more comprehensive understanding there should also be a real appreciation of back-end IT and Systems design. The existing MSc core modules Security Management (IY5502), An Introduction to Cryptography and Security Mechanisms (IY5502), Network Security (IY5511) and Computer Security (IY5512) provide an ideal complement to smart card and RFID related work covered in Smart Cards/Token Security and Applications (IY5606). The options module Applications and Business Security Developments (IY5601) provides and understanding of business issues and applications associated with smart cards and RFID. A book edited by SCC staff members is used as a IY5606 course textbook but also contains additional relevant material.

The SCC is uniquely placed to offer ISG students hands-on practical Projects using the wide range of equipment within its labs. The importance of Smart Cards has never been higher, with banking cards, train tickets, entitlement cards, IDs, passports, mobile phone technology all making use of this technology. These applications of smart cards now extend to all aspects of our lives and have become very high profile, both in the UK and internationally. The related technology RFID (radio frequency identification) also has a myriad of applications and is tipped to be a huge multi-billion industry when aimed mainly at item tagging, asset management and logistics.

All these applications are subject to threats. The data accessed by smart cards and the assets tracked by RFID tags have enormous value, increasing by the day. However, not only are there commercial reasons for securing the data processed by these technologies, but there are also governance issues such as privacy for individuals and the conglomeration of personal information in the hands of governments and corporations, not to mention organised crime.

The security of smart card and RFID systems has featured in several high profile cases with reported problems in some technologies and major international systems. The SCC has a high profile in this area for providing expert and independent advice. The Director of the Smart Card Centre, Keith Mayes, recently led the SCC/ISG team that carried out a consultancy contract on behalf of the Dutch government. This was initially for a counter-expertise review of the OV-chipkaart used in the Dutch Public Transport Systems (see Dutch OV-chipkaart ) and has lead to related and on-going work. The SCC also has public support from Transport for London and ITSO (Integrated Transport Smartcard Organisation) for transport related security work. The SCC also benefits from its many industry supporters  who provide expert advice and practical support for the breadth of SCC activities.