RFID Skimming and Cloning Attacks on Presto Cards

These days RFID chips are being implemented in everything within our daily lives whether it be in items which we buy in store, our cell phones, credit cards and transit cards and everything else in between. With this widespread implementation comes another avenue for hackers to potentially gain access in to our lives. This paper explores RFID skimming and cloning attacks related to the Presto transit card. We take a look at the RFID chip implemented within the presto card and the potential for a malicious user to skim data from this card using an RFID reader. We also look at the potential of said attacker to be able to clone our Presto card if they did obtain information from our card. Finally we propose a couple of solutions to the findings of these security vulnerabilities including the use of a PKI system with the Presto cards. KeywordsRFID, skimming, cloning, Presto