How to Cheat at Deploying and Securing RFID

By nature, RFID tags are dumb devices. Upon query from a reader, they reply with an identifier, usually a number or short string that is used to uniquely identify the tag and the item it is attached to. The real brains of any RFID deployment is in the middleware and backend systems.
In most given deployments, the backend is usually a database that provides an interface for users to obtain meaningful data.
The system will not work without middleware, and the database application will not be functional if it cannot place data into it. A reader spits out numbers or strings with no real form; therefore, a database needs a piece of middleware to translate between the reader and the database, which is usually done through an application that interacts with the tag. The middleware application then plays fill in the blank when talking to the database, creating SQL statements and inserting the relevant information into the right place.
If an RFID deployment is for an airline baggage tracking system, the name of the owner of the bag (or an ID number referencing the owner), the flight number, and the destination airport code may be written to the tag at check in. As the luggage moves through the airport s baggage system, RFID readers track its position to make sure it gets where it is supposed to go. The reader queries the tag as it goes by, essentially starting a conversation between the tag, the...