Security Analysis of the Object Name Service

Abstract

The EPCglobal network is designed to function as a global information retrieval network for objects carrying RFID tags with an Electronic Product Code (EPC). To locate corresponding information sources a so-called Object Name Service (ONS) is used. We take a look at privacy and security implications of ONS deployment and evaluate possible mitigation strategies.