CCSDS 881.0-R-1, Spacecraft Onboard Interface Services—RFID ...

DRAFT RECOMMENDED PRACTICE FOR RFID-BASED INVENTORY MANAGEMENT SYSTEMSif a non-zero password is set and presented prior to issuance of the command. If an accesspassword is set, it must be presented to the tag in order to lock or alter any of the tag’smemory banks, including identification, password, and user memory banks. It is alsorequired for the permalock command, which permanently locks the memory banks.Use of password authentication is highly recommended, as intentional or unintentionalimpairment or destruction of tags might otherwise result. However, assigning arbitrarilyunique passwords to each tag is typically impractical.A number of technical controls can provide security for the RF communication to the tag,including cover-coding, data encryption, shielding, frequency designation, and selective(e.g., periodic or event-driven) use of RF subsystems. Summarizations of these controls areprovided in (reference [D10]). For most space-based RFID systems, the RF reader-tagcommunication link enjoys a high degree of isolation and shielding from adversarial threatsonce launched. Technologies such as RFID enclosures provide additional degrees ofshielding.Tag data protection controls include tag memory access control, encrypting tag data, the killfeature, and tamper protection. Tags that are frangible, typically implemented by antennasthat are destroyed when a tag is removed from an item, provide tamper protection.Radio Frequency Identification Systems (RFIS) systems engineers should thoroughly assessall risks and provide mitigation required to reduce the risks to acceptable levels. Table 5-1 inreference [D10] provides a convenient table listing controls and the risks that they mitigate.CCSDS 881.0-R-1 Page C-5 October 2011