CEN/TR 16671:2014

Information technology - Authorization of mobile phones when used as RFID interrogators

The scope of this Technical Report is to explore developments in the use of mobile phones as RFID interrogators. It uses as a datum the communication protocols developed for near field communication, which have a defined level of security. This Technical Report will explore known developments in the use of mobile phones as RFID interrogators including (but not limited to):
—   extending NFC phone capabilities to read RFID tags compliant with ISO/IEC 15693 and ISO/IEC 18000-3 Mode 1;
—   using mobile phones as interrogators for UHF tags based on ISO/IEC 18000-6 Type C;
—   the development of multi-protocol readers capable of switching between high frequency and UHF.
The objective of the Technical Report is to identify specific characteristics associated with mobile phones being used as interrogators with tags that are primarily intended for other purposes. It will identify some potential threats associated with the technology. It will also identify gaps in the standardization process that might need to be addressed to mitigate against such threats.
To counterbalance any negative implications, the Technical Report also identifies real and potential applications that could lead to an accelerated take-up of RFID and the Internet of Things through mobile phones being used as RFID interrogators by individual citizens and organizations.

Informationstechnik - Autorisierung von Mobilfunkgeräten als RFID-Lesegeräte

Technologies de l’information - Autorisation des téléphones mobiles utilisés comme lecteurs RFID

Informacijska tehnologija - Dovoljenje za uporabo mobilnih telefonov kot RFID-bralnikov

Področje uporabe tega tehničnega poročila je raziskati razvoj na področju uporabe mobilnih telefonov kot RFID-bralnikov. Za referenco uporablja komunikacijske protokole, razvite za komunikacijo kratkega dosega, ki imajo določeno raven varnosti. To tehnično poročilo bo raziskalo znan razvoj na področju uporabe mobilnih telefonov kot RFID-bralnikov, vključno z (a ne omejeno na): - razširitvijo zmožnosti komunikacije kratkega obsega v telefonih na branje oznak RFID, ki so v skladu s standardoma ISO/IEC 15693 in ISO/IEC 18000-3 Način 1; - uporabo mobilnih telefonov kot bralnikov za UHF oznake glede na standard ISO/IEC 18000-6 Tip C; - razvojem večprotokolnih bralnikov, ki lahko preklapljajo med visokimi frekvencami in UHF. Namen tega tehničnega poročila je prepoznati posamezne lastnosti, povezane z mobilnimi telefoni, ki se uporabljajo kot bralniki z oznakami, ki so predvsem namenjene drugi uporabi. Določil bo nekaj morebitnih groženj, ki so povezane s tehnologijo. Prav tako bo razkril vrzeli v postopku standardizacije, ki jih je morda treba obravnavati, da se omili take grožnje. Za uravnavanje kakršnih koli negativnih učinkov tehnično poročilo opredeljuje tudi, kako posamezni državljani in organizacije uporabljajo ali bi lahko uporabljali mobilne telefone, ki se uporabljajo kot RFID-bralniki, kar bi lahko vodilo v povečano prevzemanje RFID in interneta stvari.

General Information

• Status: Published
• Publication Date: 03-Jun-2014
• ICS: 33.070.01 - Mobile services in general
• ICS: 35.240.60 - IT applications in transport
• Technical Committee: CEN/TC 225 - AIDC technologies
• Drafting Committee: CEN/TC 225 - AIDC technologies
• Current Stage: 6060 - Definitive text made available (DAV) - Publishing
• Start Date: 04-Jun-2014
• Due Date: 25-Feb-2014
• Completion Date: 04-Jun-2014
• Mandate: M/436 - Standardisation mandate to the European Standardisation Organisation CEN, CENELEC and ETSI in the field of information and communication technologies applied to Radio Frequency Identification (RFID) and systems
• Ref Project: SIST-TP CEN/TR 16671:2014 - Information technology - Authorisation of mobile phones when used as RFID interrogators

Standards Content (Sample)

SLOVENSKI STANDARD
01-september-2014
Informacijska tehnologija - Dovoljenje za uporabo mobilnih telefonov kot RFID-
bralnikov
Information technology - Authorisation of mobile phones when used as RFID
interrogators
Informationstechnik - Autorisierung von Mobilfunkgeräten als RFID-Lesegeräte
Technologie de l’information - Autorisation des téléphones mobiles utilisés comme
interrogateurs RFID
Ta slovenski standard je istoveten z: CEN/TR 16671:2014
ICS:
33.070.01 Mobilni servisi na splošno Mobile services in general
35.020 Informacijska tehnika in Information technology (IT) in
tehnologija na splošno general
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

TECHNICAL REPORT
CEN/TR 16671
RAPPORT TECHNIQUE
TECHNISCHER BERICHT
June 2014
ICS 35.240.60; 33.070.01
English Version
Information technology - Authorization of mobile phones when
used as RFID interrogators
Technologies de l'information - Autorisation des téléphones Informationstechnik - Autorisierung von Mobilfunkgeräten
mobiles utilisés comme lecteurs RFID als RFID-Lesegeräte

This Technical Report was approved by CEN on 20 January 2014. It has been drawn up by the Technical Committee CEN/TC 225.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 16671:2014 E
worldwide for CEN national Members.

Contents Page
Foreword .4
Introduction .5
1 Scope .6
2 Normative references .6
3 Terms and definitions .6
4 Symbols and abbreviations .7
5 Executive summary and conclusions.8
6 Extending NFC phones capabilities to read RFID tags .8
6.1 Read range impacts due to inclusion of ISO/IEC 15693 .8
6.1.1 Short introduction to NFC .8
6.1.2 NFC Forum and NFC Forum tag types .9
6.1.3 Inclusion of support for ISO/IEC 15693 .9
6.1.4 NFC Forum directive on ISO/IEC 15693 capability extension . 10
6.1.5 Analysis of ISO/IEC 15693 tag type extension . 10
6.2 Extending NFC read range capabilities . 11
6.2.1 General . 11
6.2.2 Theoretical analysis of read range extension for NFC phones . 11
6.2.3 Extending existing hardware . 14
6.2.4 Extending with the use of a booster . 15
6.2.5 Conclusion . 16
6.3 Security features in the NFC phones . 16
7 Mobile phones enhanced with UHF RFID readers . 17
7.1 Introduction . 17
7.2 Internet research . 17
7.3 Republic of Korea . 18
7.4 Conclusion . 18
8 Development of multi-protocol readers. 19
8.1 HF multi-protocol readers . 19
8.2 UHF multi-protocol readers . 19
8.3 Combined HF and UHF multi-protocol readers . 19
9 Mobile phones as access portal for Internet of Things . 20
9.1 Application of NFC phones in homecare industry . 20
9.1.1 General . 20
9.1.2 Concept in a nutshell . 20
9.1.3 Dutch home care in practice . 21
9.2 Application of NFC phones in library automation applications . 22
9.3 Application of NFC phones in museums and shows applications . 22
Annex A (informative) ISO/IEC 14443 Eavesdropping and Activation Distance . 23
A.1 Introduction . 23
A.1.1 General . 23
A.1.2 Abbreviations and symbols . 23
A.2 Signal and Noise Power . 24
A.2.1 Bit Error Rate . 24
A.2.2 Signal Power and Density. 25
A.2.3 Magnetic field strength . 26
A.2.4 Noise Power and Density. 26
A.3 Eavesdropping distance . 28
A.3.1 General . 28
A.3.2 Near Field Distance . 28
A.3.3 Far Field Distance . 31
A.4 Activation distance . 33
A.4.1 General . 33
A.4.2 Power Transfer . 33
A.4.3 Data Transmission . 35
A.5 Interpretation of existing measurement results . 38
A.6 Conclusion . 40
A.6.1 General . 40
A.6.2 Real application impacts . 40
Bibliography . 42

Foreword
This document (CEN/TR 16671:2014) has been prepared by Technical Committee CEN/TC 225 “AIDC
technologies”, the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This Technical Report is one of a series of related deliverables, which comprise mandate 436 Phase 2. The
other deliverables are:
— EN 16570, Information technology — Notification of RFID — The information sign and additional
information to be provided by operators of RFID application systems
— EN 16571, Information technology — RFID privacy impact assessment process
— EN 16656, Information technology - Radio frequency identification for item management - RFID Emblem
(ISO/IEC 29160:2012, modified)
— CEN/TR 16684, Information technology — Notification of RFID — Additional information to be provided
by operators
— CEN/TS 16685, Information technology — Notification of RFID — The information sign to be displayed in
areas where RFID interrogators are deployed
— CEN/TR 16669, Information technology — Device interface to support ISO/IEC 18000-3 Mode 1
— CEN/TR 16670, Information technology — RFID threat and vulnerability analysis
— CEN/TR 16672, Information technology — Privacy capability features of current RFID technologies
— CEN/TR 16673, Information technology — RFID privacy impact assessment analysis for specific sectors
— CEN/TR 16674, Information technology — Analysis of privacy impact assessment methodologies relevant
to RFID
Introduction
In response to the growing deployment of RFID systems in Europe, the European Commission published in
2007 the Communication COM(2007) 96 ‘RFID in Europe: steps towards a policy framework’. This
Communication proposed steps which needed to be taken to reduce barriers to adoption of RFID whilst
respecting the basic legal framework safeguarding fundamental values such as health, environment, data
protection, privacy and security.
In December 2008, the European Commission addressed Mandate M/436 to CEN, CENELEC and ETSI in the
field of ICT as applied to RFID systems. The Mandate M/436 was accepted by the ESOs in the first months of
2009. The Mandate addresses the data protection, privacy and information aspects of RFID, and is being
executed in two phases. Phase 1, completed in May 2011, identified the work needed to produce a complete
framework of future RFID standards. The Phase 1 results are contained in the ETSI Technical Report TR 187
020, which was published in May 2011.
Phase 2 is concerned with the execution of the standardisation work programme identified in the first phase.
This Technical Report explores developments in the use of mobile phones as RFID interrogators. The
integration of Near Field Communication (NFC) in mobile phones, many years ago, has enabled mobile
phones for use as RFID interrogators. NFC is generally considered to be a close-coupled mechanism with a
defined operating distance of maximum 10 cm. Recently the NFC Forum, amongst other things formed to
advance the use of NFC technology by developing specifications, has started developments to extend the
support for NFC tag types in the phones to also support tags that are compliant to ISO/IEC 15693 and
ISO/IEC 18000-3 Mode 1.
Another recent development is the integration of Ultra High Frequency (UHF) reader chips into mobile phones.
That allows using mobile phones as interrogators to read UHF tags, for exa
...

SLOVENSKI STANDARD
01-september-2014
Informacijska tehnologija - Dovoljenje za uporabo mobilnih telefonov kot RFID-
bralnikov
Information technology - Authorisation of mobile phones when used as RFID
interrogators
Informationstechnik - Autorisierung von Mobilfunkgeräten als RFID-Lesegeräte
Technologie de l’information - Autorisation des téléphones mobiles utilisés comme
interrogateurs RFID
Ta slovenski standard je istoveten z: CEN/TR 16671:2014
ICS:
33.070.01 Mobilni servisi na splošno Mobile services in general
35.040.50 Tehnike za samodejno Automatic identification and
razpoznavanje in zajem data capture techniques
podatkov
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

TECHNICAL REPORT
CEN/TR 16671
RAPPORT TECHNIQUE
TECHNISCHER BERICHT
June 2014
ICS 35.240.60; 33.070.01
English Version
Information technology - Authorization of mobile phones when
used as RFID interrogators
Technologies de l'information - Autorisation des téléphones Informationstechnik - Autorisierung von Mobilfunkgeräten
mobiles utilisés comme lecteurs RFID als RFID-Lesegeräte

This Technical Report was approved by CEN on 20 January 2014. It has been drawn up by the Technical Committee CEN/TC 225.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 16671:2014 E
worldwide for CEN national Members.

Contents Page
Foreword .4
Introduction .5
1 Scope .6
2 Normative references .6
3 Terms and definitions .6
4 Symbols and abbreviations .7
5 Executive summary and conclusions.8
6 Extending NFC phones capabilities to read RFID tags .8
6.1 Read range impacts due to inclusion of ISO/IEC 15693 .8
6.1.1 Short introduction to NFC .8
6.1.2 NFC Forum and NFC Forum tag types .9
6.1.3 Inclusion of support for ISO/IEC 15693 .9
6.1.4 NFC Forum directive on ISO/IEC 15693 capability extension . 10
6.1.5 Analysis of ISO/IEC 15693 tag type extension . 10
6.2 Extending NFC read range capabilities . 11
6.2.1 General . 11
6.2.2 Theoretical analysis of read range extension for NFC phones . 11
6.2.3 Extending existing hardware . 14
6.2.4 Extending with the use of a booster . 15
6.2.5 Conclusion . 16
6.3 Security features in the NFC phones . 16
7 Mobile phones enhanced with UHF RFID readers . 17
7.1 Introduction . 17
7.2 Internet research . 17
7.3 Republic of Korea . 18
7.4 Conclusion . 18
8 Development of multi-protocol readers. 19
8.1 HF multi-protocol readers . 19
8.2 UHF multi-protocol readers . 19
8.3 Combined HF and UHF multi-protocol readers . 19
9 Mobile phones as access portal for Internet of Things . 20
9.1 Application of NFC phones in homecare industry . 20
9.1.1 General . 20
9.1.2 Concept in a nutshell . 20
9.1.3 Dutch home care in practice . 21
9.2 Application of NFC phones in library automation applications . 22
9.3 Application of NFC phones in museums and shows applications . 22
Annex A (informative) ISO/IEC 14443 Eavesdropping and Activation Distance . 23
A.1 Introduction . 23
A.1.1 General . 23
A.1.2 Abbreviations and symbols . 23
A.2 Signal and Noise Power . 24
A.2.1 Bit Error Rate . 24
A.2.2 Signal Power and Density. 25
A.2.3 Magnetic field strength . 26
A.2.4 Noise Power and Density. 26
A.3 Eavesdropping distance . 28
A.3.1 General . 28
A.3.2 Near Field Distance . 28
A.3.3 Far Field Distance . 31
A.4 Activation distance . 33
A.4.1 General . 33
A.4.2 Power Transfer . 33
A.4.3 Data Transmission . 35
A.5 Interpretation of existing measurement results . 38
A.6 Conclusion . 40
A.6.1 General . 40
A.6.2 Real application impacts . 40
Bibliography . 42

Foreword
This document (CEN/TR 16671:2014) has been prepared by Technical Committee CEN/TC 225 “AIDC
technologies”, the secretariat of which is held by NEN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This Technical Report is one of a series of related deliverables, which comprise mandate 436 Phase 2. The
other deliverables are:
— EN 16570, Information technology — Notification of RFID — The information sign and additional
information to be provided by operators of RFID application systems
— EN 16571, Information technology — RFID privacy impact assessment process
— EN 16656, Information technology - Radio frequency identification for item management - RFID Emblem
(ISO/IEC 29160:2012, modified)
— CEN/TR 16684, Information technology — Notification of RFID — Additional information to be provided
by operators
— CEN/TS 16685, Information technology — Notification of RFID — The information sign to be displayed in
areas where RFID interrogators are deployed
— CEN/TR 16669, Information technology — Device interface to support ISO/IEC 18000-3 Mode 1
— CEN/TR 16670, Information technology — RFID threat and vulnerability analysis
— CEN/TR 16672, Information technology — Privacy capability features of current RFID technologies
— CEN/TR 16673, Information technology — RFID privacy impact assessment analysis for specific sectors
— CEN/TR 16674, Information technology — Analysis of privacy impact assessment methodologies relevant
to RFID
Introduction
In response to the growing deployment of RFID systems in Europe, the European Commission published in
2007 the Communication COM(2007) 96 ‘RFID in Europe: steps towards a policy framework’. This
Communication proposed steps which needed to be taken to reduce barriers to adoption of RFID whilst
respecting the basic legal framework safeguarding fundamental values such as health, environment, data
protection, privacy and security.
In December 2008, the European Commission addressed Mandate M/436 to CEN, CENELEC and ETSI in the
field of ICT as applied to RFID systems. The Mandate M/436 was accepted by the ESOs in the first months of
2009. The Mandate addresses the data protection, privacy and information aspects of RFID, and is being
executed in two phases. Phase 1, completed in May 2011, identified the work needed to produce a complete
framework of future RFID standards. The Phase 1 results are contained in the ETSI Technical Report TR 187
020, which was published in May 2011.
Phase 2 is concerned with the execution of the standardisation work programme identified in the first phase.
This Technical Report explores developments in the use of mobile phones as RFID interrogators. The
integration of Near Field Communication (NFC) in mobile phones, many years ago, has enabled mobile
phones for use as RFID interrogators. NFC is generally considered to be a close-coupled mechanism with a
defined operating distance of maximum 10 cm. Recently the NFC Forum, amongst other things formed to
advance the use of NFC technology by developing specifications, has started developments to extend the
support for NFC tag types in the phones to also support tags that are compliant to ISO/IEC 15693 and
ISO/IEC 18000-3 Mode 1.
Another recent development is the integration of Ultra High Frequency (UHF) reader chips into mobile phones.
That allows using mobile phones as interrogators to read UHF ta
...