Distance Bounding Protocols in RFID and NFC Security

Distance bounding protocols integrate cryptographic challenge–response exchanges with precise time-of-flight measurements to establish an upper bound on the physical separation between a reader and a tag or device. By gauging the rapidity of responses, these protocols mitigate relay attacks in which adversaries impersonate legitimate devices at a distance. Originally conceived to resist mafia fraud and distance fraud, such schemes have evolved to address practical constraints of RFID and NFC technologies, including limited computational resources, signal noise and environmental variability. Implementations range from lookup‐based approaches that minimise computation time to phase‐based ranging and ambient-sensor enhancements that exploit physical-layer characteristics. In automotive passive keyless entry systems, for instance, phase rotation of backscattered signals is harnessed to infer proximity, while narrow-band and quantum-inspired methods explore novel channels for distance estimation. Widespread deployment in access control, contactless payments and ticketing underscores the global significance of robust distance bounding, as billions of transactions annually depend on secure short-range communication.

Research from Nature Portfolio

No recent Nature Portfolio content available.

Distance Bounding Protocols in RFID and NFC Security publication trend

The graph below shows the total number of articles in distance bounding protocols in rfid and nfc security across all publications each year (not limited to Nature Index journals).

Technical terms

Distance bounding protocol: A security scheme that uses time-of-flight measurements in challenge-response exchanges to estimate an upper bound on distance between two entities.

Relay attack: A threat in which an adversary transparently forwards messages between a genuine device and reader to circumvent proximity checks.

Mafia fraud: A man-in-the-middle attack where an adversary relays protocol messages between a verifier and a distant honest prover without knowledge of secrets.

Distance fraud: An attack in which a malicious prover manipulates timing to appear closer to the verifier than it actually is.

RFID: Radio-frequency identification, a technology that uses electromagnetic fields to identify and track tags attached to objects.

NFC: Near-field communication, a short-range wireless technology for data exchange and contactless transactions.

Phase rotation: Variation in the phase of a backscattered signal, exploited to infer changes in signal path length and thus detect relay attempts.

References

1. On the optimal resistance against mafia and distance fraud in distance-bounding protocols. Computer Communications (2023).
2. Using Ambient Sensors for Proximity and Relay Attack Detection in NFC Transactions: A Reproducibility Study. IEEE Access (2024).
3. BackProx: Secure Backscatter-Assisted Proximity Detection for Passive Keyless Entry and Start Systems. Sensors (2023).
4. Secure, Accurate, and Practical Narrow-Band Ranging System. IACR Transactions on Cryptographic Hardware and Embedded Systems (2021).
5. On Detecting Relay Attacks on RFID Systems Using Qubits. Cryptography (2020).