May 08, 2007

RFID Gazette - Tues May 08, 2007

Yet More Anti-RFID Envelope Makers
National Envelope Corporation is the latest company to go after the potentially lucrative anti-RFID envelope and wallet market with their Smart Card Guard products. The envelopes can be used to protect contactless credit cards, ID cards, and e-passports. [via Contactless News]

A Smart RFID Mirror
Paxar is currently showing off its smart mirror at a show in Miami, Florida. The mirror, typically to be used in retail clothing stores, gives customers information about a tagged item of clothing. [via RFID Update]

Free RFID Discovery Service
Affilias is offering a service to companies that want to share RFID EPC data over the Internet. What information is to be shared can be configured on a per subscriber basis. Affilias calls the service ESDS (Extensible Supply-Chain Discovery Services) and hopes it'll become an industry standard. [via RFID Journal]

May 07, 2007

About NFC Cell Phones and the New Digital Wallets

What happens when you lose one? Can the finder/ thief use it to make purchases? Supposedly there are safeguards, but since you can just "tap" your phone at, say, a cashless vending machine, I don't see how that'd stop a thief. I've yet to come across any articles that explain this.

Most people guard their cell phones closely, so it won't be a big issue. Not yet. But since ABI Research predicted back in 2004 that that 50% of phones would have NFC by 2009, it'll become a growing issue. It happens; phones get misplaced or stolen. And if phones become our wallets, isn't that more incentive for some people to steal them? That is, if it's easy to use any stored credits. And will it be easy for a thief to determine what your recent purchases were?

I'm assuming you can have your phone disabled if it gets "misplaced", though you'd have to find a phone elsewhere to make the call. (To whom, exactly? I've not seen any indication that payment credits on NFC phones are handled by credit card issuers or some other organization.)

There's a similar problem for contactless credit cards, since a signature is not required for transactions under $25 for most cards. Sure, these can be easily cancelled, and the transactions removed from a card carrier's credit statement, so the point is moot. But as for a lost NFC phone, I'm guessing that knowledge of what happens is only available to those who have one.

May 04, 2007

NIST Highlights RFID Security Risks

The NIST (National Institute of Standards and Technology) recently released a 150+ page PDF report that details some of the security risks of using RFID in a supply chain. Said Robert C. Cresanti, Under Secretary of Commerce for Technology:

RFID tags, commonly referred to as smart tags, have the ability to improve logistics, profoundly change cost structures for business, and improve the current levels of safety and authenticity of the international pharmaceutical supply chain and many other industries. This important report lays the foundation for addressing potential RFID security risks so that a thoughtful enterprise can launch a smart tag program with confidence.

The report also suggests ways to get around the security risks. Download from NIST issues guidelines for ensuring RFID security. [via Extreme RFID]

April 30, 2007

16 Barriers to RFID Ubiquity

RFID is arguably a very efficient technology, made for multiple purposes, useful for private and public sectors. The benefits of RFID are far too numerous to mention in a single article, as the potential applications are seemingly endless. Many in the industry and elsewhere feel that the technology will become ubiquitous and replace older technologies because of its efficiencies and extra functionality. The problem is, it is also a very controversial technology for many reasons, which are thus a barrier to widespread adoption of RFID.

Continue reading "16 Barriers to RFID Ubiquity" »

April 23, 2007

Steal Data From RFID Passports With $20 In Equipment

[Commentary] Apparently, all you need to do to skim data from a certain type of RFID chip used in e-passports and credit cards is $20 worth of equipment available on eBay and the know how. Except that security researcher Chris Paget isn't allowed to say how the flaw works, due to a claim by a chip maker that he'd be infringing on various rights. They stopped Paget from talking at the Black Hat conference in February, and they're still trying to do so now.

Very interesting way of trying to defeat detractors, but instead helping, those who feel consumers should be aware of such security flaws will probably mistrust the manufacturer now. (I unfortunately do not know who this is - see below.) Alienating more people is not what the RFID industry needs; it's about awareness. It might be time get new lawyers and PR people.

[UPDATE: I mistakenly indicated that IOActive is the chipmaker in the above article. Correction made, and my sincere apologies for the error.]

March 30, 2007

Can RFID Implants Be Subverted?

[editorial] In a series of proto-cyberpunk short stories and novellas that I wrote in 2002, set in an alternate, near-future Earth country called the United States of North America (Canada and the US), a roving, microchipped band of digital rebels escape from a USNA government that is essentially a dictatorship pretending to be patriotic. Paper is outlawed, thinking for yourself is highly frowned upon, and everyone is being microchipped "for their safety." (By which I mean RFID chips, though I never refer to RFID.)

These rebels have "underground" meeting places where chips are either removed or disabled, and from where their "subversive" activities are planned. These are the true patriots for freedom and justice, but they are looked upon as hackers and criminals, particularly because they disable the RFID microchips. From their perspective, they do this because they feel the chips are a threat to their privacy and general well-being, and that control of the chips can be subverted by malicious parties - counter to this fictional government's claim that the chips are safe.

Well, truth may be stranger than fiction. According to a security researcher in the UK, Adam Laurie, implanted RFID chips can be hacked by malicious parties and thus controlled. Laurie cracked codes for an RFID id card, a livestock chip, and a chip that a volunteer from the audience had previously had implanted.

You can argue that these demonstrations are not sufficient to be concerned about RFID implants, but obviously I'm going to disagree. As a "proto-cyberpunk" writer, I make it a point to write fiction that considers worst case scenarios of the use of technology. Most of my proto-cyberpunk stories are strongly influenced by the work of science fiction author Philip K. Dick, long-deceased and the author of the novels that were turned into Blade Runner, Total Recall, Minority Report, and others. They are very dystopian, and not afraid to speculate on the "what might be" aspect of world politics (see The Man In The High Castle) and the misuse of technology.

I'm not saying that my stories equal Dick's, but they are definitely written in the same spirit. That said, I see RFID as both a blessing and a curse. I am of the staunch opinion that just because something sounds like a conspiracy theory does not make it false. RFID is unfortunately an ideal technology for both very good and very evil - quite possibly more so than any technology in history has ever been. In the wrong hands, it will be misused under the guise of self-preservation. And any proof of that possibility is something that we all need to take note of.

March 26, 2007

RFID + Security: Don't Mess With Las Vegas?

A glimpse of the TV show Las Vegas would suggest to you that security for casinos there are high-tech, marvellous operations. Well it just might be true. A surveillance tech company called Third Eye has a new RF-based security system, SATS (Security Alert Tracking System) based on a wristband biosensor (from SPO Medical) that monitors employee's heart rate. If the rate suddenly increases, management is alerted by an RF signal from the wristband.

The premise is that if a casino employee's heart starts suddenly beating rapidly, they are likely under stress. This could be due to some emergency such as a robbery, or possibly because the employee is planning a theft.

RFID has some very important applications in health care, and this biosensor is no exception. But the idea that every casino employee would have to wear these wristbands, in case they just might be planning a theft, could turn into a Minority Report-like situation. The movie stars Tom Cruise and is based on the Philip K. Dick novel of the same name. The idea is that law enforcement officers can stop crimes before they start by arresting future perpetrators, based on technology that can read the latter's thoughts and determine that will/may commit a crime.

The SPO Medical wristband in and of itself is not my issue but rather Third Eye's intended use of it by casino clients. It seems to move life into the realm of guilty until proven innocent. An odd thing for a company whose name is borrowed from a spiritual concept of the inward eye of self-enlightenment.

March 23, 2007

RFID: To Regulate Or Not To Regulate?

Law makers in the US and EU have been considering regulating the use of RFID in their respective districts. The European Union commissioner backed off, deciding to let the technology mature before imposing regulations.

In Washington state, RFID legislation didn't make the Floor. It sought to impose rules on how RFID would be deployed and used to collect personal data. In Wisconsin, a new bill was just passed that prohibits US currency and documents to be embedded with chips. Previously, the state passed legislation banning forced chip implants.

Implants in particular are going to be a hot law issue in the years to come, Companies like VeriChip have been trying persuade anyone and everyone to implant, including soldiers, and diabetics, and have used them on corpses during disaster recovery.

March 13, 2007

RFID Gazette - Tues Mar 13, 2007

Mobile Payments Initiative
Two organizations have launched a joint initiative for the financial services industry to enable mobile payments. They are looking at two types of payment. One would be for purchases via NFC and other contactless technology. The other would be transfer of funds between the accounts of two consumers. It should be noted that PayPal, the payments processor owned by eBay (who also own the Skype VoIP software company) already allows mobile payments through SMS text messaging.

Apple Into RFID?
Not quite. However, they have filed a patent for a wireless home networking system that uses an RFID reader. The system would assume that a variety of devices (laptop, PDA, iPod) would have an RFID tag and the network would automatically configure a network connection for it. [via RFID Update; they have a link to the patent.]

Very exciting application. I heard nothing about this until now. The drawback is that Apple technology has traditionally been very singular, with the company typically not licensing/ authorizing clones. This sounds like a fascinating application, but it might only ever be used for Apple products.

If You Can't Beat'em, Confuse'em:
So IOActive's researcher Chris Paget was told to put off his "clone RFID cards" talk at the Black Hat conference recently, based on the charge that the demonstration would violate HID Global's patents in card readers. Huh? Defeat "enemies" with confusion? I don't even know where to start with this one. The validity of this claim is questionable. Other RFID presentations did continue, however. Still, this is a bad precedent and stinks of bullying.

March 05, 2007

RFID Applications: Tiny Chips For Currency?

The tiny powder RFID chips that Hitachi recently debuted are small enough to be embedded in paper. Reading that in the York Dispatch, it triggered a thought: the US government (collectively) has long desired a way to track paper currency. Some or all American bills have had a thin strip of metal for at least a decade. (My apologies: I don't know which denominations.) But now they may have the means of embedding RFID chips into paper currency.

If you watch enough police dramas on TV like I do, you start thinking of all the times monitoring the literal flow of ransom money would have been helpful. Then there's the other side of the coin, so to speak: the Big Brother scenario, which RFID more than any other technology could support, especially if it becomes as ubiquitous as being in currency. And with RFID in powder form, the potential for abuse grows. Hopefully, that's not the case.

February 23, 2007

VeriChip Implant Creepy?

Finally, someone with a lot more influence in the RFID industry than I said it: VeriChip implant unnecessary and a little creepy [Spychips]

Thanks to RFID Journal's Editor and Founder Mark Roberti for saying what had to be said. I've been pretty vocal about the questionable use of implanted RFID chips, a la VeriChip, and have repeatedly said that some wearable object with an RFID chip is just as good. Which is what Mark Roberti says as well.

On the other hand, Roberti also criticizes media for bad press regarding implants. I assume I am such a person. Or maybe not. Regardless, I see absolutely nothing wrong with making people aware of useless or offensive applications of RFID.

I could be misunderstanding, though Roberti didn't say he's against monitoring people with RFID, as Liz McIntyre points out at SpyChips. In fact, you have to read his article and decide for yourself. Nothing against him personally, but while he says it's creepy and isn't a big fan of implanting people, there could be some benefits of doing so.

From my viewpoint, all power to anyone who wants to willingly have an RFID chip implanted in themselves, but I'll continue to maintain that no one has any right to force an implant on anyone for any reason.

VeriChip's recent poor IPO performance would suggest that not many people think there's much of a market for living human implants. (VeriChips were used to identify the dead during disaster recovery in New Orleans, after Hurricane Katrina.)

February 16, 2007

Implant Thyself, VeriChip

In one of my random updates about VeriChip, I'm unpleased to report that the chairman of VeriChip's parent company still hasn't had himself implanted with an RFID chip - as far as I know - despite claiming he would do so, what, about two years ago? Now, if you've kept up with the RFID industry, you might know that VeriChip is planning an IPO (which they filed for a year ago). And this in the midst of poor performance for some companies in the industry and the generally accepted view that most human beings would never willingly allow themselves to be implanted. Feel free to disagree, but in my opinion, forced implanting is one of the worst applications of RFID, not to mention a travesty of personal privacy, regardless of the political BS being fed to us. Besides, there are so many useful, legitimate, non-infringing applications.

I haven't followed the IPO but I'm thinking they'll have a very hard time with it. (Even VeriChip, in their SEC filing, stated that many patients would be unwilling. Apparently a lot of doctors are uncomfortable with implanting their patients - thank goodness.) Nevertheless, they don't seem to be having any problem implanting 222 people in total with RFID chips, for a sales total of about US$100K. [Speaking of implanting, one of the character's in this week's episode of Smallville is abducted and has a tiny GPS chip implanted in his/her shoulder (don't want to spoil it). Though at first, I thought it might be an RFID chip.]

February 08, 2007

RFID On CSI:NY TV Show

Singer Nelly Furtado appeared on last night's CSI:NY franchise as an amazingly successful shoplifter at high-priced New York boutiques. Towards the very end of the episode, one of the CSIs found a device in a purse they confiscated from Furtado's character. And guess what? It was a "credit card scanner" which, according to two other CSI characters is "based on RFID", "works remotely" and "from three feet".

I'm guessing that the writing team read that New York Times article about the inherent security flaws in RFID-based credit cards, which I've discussed a few times. No doubt the episode was shot months ago. Since the NY Times article, credit card companies have skirted around the issues or outright denied them, but have said that their cards (meaning the new generation) are secure and have new security features.

Still, that's not going to stop speculation from TV shows and movies. RFID tech was also mentioned in Law + Order: SVU a few months back.

February 06, 2007

State Opposition To RFID-Based National Driver's License Spreads

Privacy advocates are no doubt beaming as the opposition to a US National Driver's License spreads to at least seven states, sparked by Maine's initial opposition. Issuance of the RFID-based licenses is part of the Real I.D. Act of 2005, which was backed by the House of Representatives, and is to be implemented in 2008.

While Maine is being credited for triggering the new revolt against the National Driver's License, New Hampshire objected back in April of 2006. State legislators voted against it, despite N.H. being a Republican-run state. Maine's legislature voted against it last month, followed by Georgia and several western states expected to pass laws soon.

Talk is of as many as fourteen states objecting in the form of legislation against Real ID. However, I'm wondering if this would have happened had Democrats not gained their victory in Washington recently. If a Democrat takes the Oval Office in 2008, will the whole project be scrapped? Under it's strict guidelines, citizens of states that don't use it may not be able to travel or even open bank accounts. It's general stance seemingly goes against American tradition, which is to let each decide on certain matters.

December 30, 2006

RFID Roundup - Sat Dec 30, 2006

Walgreen's Expanding RFID Use
Drugstore chain Walgreen's started an RFID trial project in late 2005, in which 50 of their 5500+ stores took part in. They are now deploying another RFID system, Wireless Asset Net from I.D. Systems, for materials handling vechicles. The system will help control access to these vehicles, which is a requirement of OSHA (Occupational Safety and Health Administration).

RFID Aids Process Improvement
Managing Automation reports on a ChainLink Research survey finding of 275 manufacturers that RFID use is tending towards operational efficiencies. Another important finding of the survey is that many of the companies plan to spend twice as much on RFID in 2007 compared to 2006.

RFID 2007: NFC Contactless Payment Use To Grow
Mohammad Khan, President and founder of ViVOtech, Inc., says that contactless payment has become a worldwide phenomenon, with North America leading. There have been over 18M cards issued in the US and Canada, and over 250,00 POS (Point of Sale) systems accepting those cards. By the end of 2007, there is expected to be 40-50M cards and 400,000 POS systems. Then there's the rest of the world, with several dozen countries already in the middle of trials, and many more millions of cards lauched.

Options For Disabling Your E-Passport's Chip?

A couple of weeks ago, there were a couple of articles around the blogosphere talking about how to disable the RFID chip in your new e-passport. Engadget has a great photograph of a simple, low-tech option. Now, while one article said that a passport is still valid even with a disabled chip, The Inquirer says that a tampered passport might get you "25 years in prison and a special customs search with rubber gloves.

Damned if you do and damned if you don't. The security issues have yet to be resolved and might be worse than formerly thought. Two European tech consultants found that cloned e-passport data can be purchased on the Internet. Not only that, the RFID reader they bought on eBay had a blank chip and software for cloning and copying the data onto the chip.

RFID For Predictive Maintenance

For the most part, many industries such as aerospace fix things when they need fixing (beyond any scheduled maintenance). That's mostly out of a lack of options. However, RFID's use in MRO (maintenance, repair and overhaul) is growing, and the technology can be used for predictive maintenance. This means that costly, even deadly, maintenance problems can be caught before they happen, simply by allowing easier data collection of maintenance checks and equipment status. Boeing is employing RFID in a similar fashion on their new 787 Dreamliners, each of which will have around 2,000 high-memory passive tags.

December 29, 2006

Now Here's How To Track People With RFID

Wired's Quinn Norton writes about the Chaos Communication Congress (CCC) in Berlin, Germany, and how attendees are paying 10 euros each for an RFID badge that reports their location. There's an array of 35 monitoring stations that pick up badge locations and produce a constantly updated public XML feed.

The badges are part of an experiment and are voluntary, but it reflects exactly what I've been saying as to how RFID could be used to track people, given the right technical environment. There have been vocal naysayers here on this blog, but the CCC is proving exactly that it's possible. If you doubt me, consider that electronic civil liberties pioneer John Perry Barlow, one of the founders of EFF (Electronic Frontier Founddation), is talking at the CCC. One of this badge project's leaders also openly states:

The idea was most of this surveillance technology slowly faded into your lives, and we accepted them.... [we want to] make it possible to bring it into people's heads.

Meaning, if I've interpreted everything correctly, they want the general populace to be aware of what's going on and the potential misuse of RFID. Before you get your knickers in a knot, noticed I said potential, not actual. And that's all I've really been trying to do. Embrace the good, legit uses of RFID. Beware the questionable. You'll have to define the latter for yourself, but I partially define it as anything that violates a citizen's privacy and gives them no benefit whatsover.

December 26, 2006

RFID SurvivalTags For EMS Workers

RFID, Ltd., is completing the design of uniforms embedded with RFID tags. The uniforms would be worn by firefighters, EMTs, and police. In the event of a high-risk situation, the tags can be used to pinpoint the wearer's location, making rescue easier. The design was spurred on by fire chiefs, whose squads are typically at high risk. Said Nicholas Chavez, president of RFID, Ltd.

...not only monitor locations of their squads but also their heart rates, respiratory developments, and skin temperatures.

This could in fact be an incredibly groundbreaking application of RFID, if it saves even one life. The uniforms are been targeted at the one million US firefighters.

source: Biz Yahoo.

December 25, 2006

British ID Database Dropped

Silicon wrote earlier in the week that the UK ID card database, NIR (National Identity Register), has been ditched. This includes dropping the plan for iris-scan biometrics. There are still three systems sharing the same information; it just won't be one big database. Fingerprint and facial biometrics are also still part of the national ID plan, which will see the first cards being issued in 2009, with mass issuance in 2010.

This is an interesting turn for the UK, which some civil liberties group Privacy International has ranked as being as bad as China in Russia in terms of surveillance. Though this turnabout is still in risk of failure. I'm speculating here and am somewhat uninformed, but I'm wondering if this change of direction has anything to do with the fact the current Prime Minister Tony Blair's term is ending soon. Despite being a Labour Party leader, he took a very right-wing leaning.

December 23, 2006

Nokia RFID Phones To Monitor Security Guards

Here's watching the detectives. Well, security guards at any rate. (Anyone else remember that old British TV show, which pseudo-nebbish angry young intellectual punk Elvis Costello immortalized in his 1970s new-wave song Watching The Detectives?) It seems Nokia   feels the need to watch their secruity guards, so they're issuing them RFID phones to  keep track of assigned work within some of their US premises.

Each Nokia handset has an embedded 13.56 MHz RFID tag and a reader. As soon as a guard enters the work premises, s/he waves an RFID-enabled employee id in front of the provided Nokia handset. This enables guards to log their in-time/ out-time.

The phone is carried in the open position while guards patrol the Nokia premises. This allows the embedded reader to pick up information in RFID tags installed at various locations on the premises, which will stand as a record of the posts the guard has supervised on that day.

At the end of the work shift, the handset is closed and data on the phone's RFID tag is transferred via the cellular network to a web-based application termed the Service Manager. Supervisors can retrieve the records in the Service Manager to get information about any guard's assigned and actual work.

RFIDJournal  reports:

The RFID system has been in use for just four months at Nokia's U.S. facilities in Atlanta, Dallas, New York and Seattle. Thus far [...] ithas collected well over 5,000 reads on the guards' activities.

Nokia, who not long ago bought RFID manufacturer Symbol Technologies, is pushing the technology into other applications, including a collaboration with JCDecaux  Finland. The latter provides billboards and other marketing materials. Nokia RFID-enabled phones will be used to track the installation and removal of billboards and posters.

[UPDATE: It was Motorola, not Nokia, that bought Symbol. Apologies for the error.]

December 22, 2006

If These Walls Could Talk: RFID + Smart Concrete

And now they can. It sounds like something out of science fiction. Imagine if your walls could store infomation and then, with the help of a suitable scanner, speak its data. Pink Tentacle has an illustration of a room made of cyber-concrete. The concrete, developed by researchers at a cement company in Japan, is "smart" in that it has embedded RFID tags in it. Their chips are endowed with more memory than usual.

Applications being touted are for monitoring of structural integrity. Data that could be stored includes safety inspection dates, etc. Now, if these tags were combined with environmental sensors like some newer RFID chips have, they could also record information about heat or moisture, which could prove very valuable for structural integrity monitoring. They could also components of fire monitoring systems or for detecting chemicals.

December 12, 2006

I Am Not A Number: Scaring People Into RFID Implant Submission

[commentary] Way back when, noted actor Orson Welles was a radio personality. Quite possibly his most famous radio performance was a reading of "War of the Worlds" (which was made into a Steven Spielberg movie starring Tom Cruise just a few years ago), which gave the impression of an invasion from Mars. Except some hapless Americans didn't know it was just a radio play, despite station breaks. And as some people tend to overreact, several families met their demise at their own hands, in family pacts, rather than be captured by these Martians. It gives me chills right now thinking about how people buy into fiction.

And I get the exact same chills when I read about insane press releases from companies like LimbID System suggesting that everyone not only implant themselves with RFID, but do it multiple times, for each limb of your body, so that you can be identified should the worst happen. And the worst, of course, is easy to guess at given the current climate of fear we live in.

What's really tacky is the home page, which has a banner of a smiling woman with wind-blown hair beside a picture of four men carrying coffin. Sickening that they would prey on the the fears of Americans like this, and have the gall to include a "testimonials" section. If you decide to buy into nonsense like this, you could get their Deluxe Option, which supplements the Standard Package (forehead, solar plexus, inside elbows, shins) by adding 8 more RFID tags, for a total of 14 tags in your body.

I'm hoping that, as RFID Buzz suggests, that this might just be some sort of kooky joke.

December 07, 2006

Nike + iPod Sport Kit RFID Flaw

You've no doubt seen them: those fitness buffs jogging in the neighborhood or park with their Nike shoes and the tell-tale white iPod earwires, listening to music while getting healthier. They might just be the owner of the RFID-enabled Nike / iPod Sport Kit, which lets runners monitor their efforts.

But researchers from the University of Washington think that a security flaw in the Sport Kit (which uses an active RFID tag) lets stalkers also monitor runners. They claim that someone with a scanner can track a jogger's regimen from a distance of up to 60 feet, even from a car. They could go as far as  skimming RFID data and recording jogging times and even plotting routes on Google Maps for later use. [Info Shop via RFID News]

While this potential threat shouldn't be taken lightly, one thought comes to my mind. The average human being isn't going to go to such lengths. Anyone who does go to all that effort to stalk someone doesn't need to utilize the Sport Kit flaw to do so. Their sickness would prompt them into doing it by other methods. In this scenario, I think, it's the person and not the technology that's to blame. On the other hand, this flaw can be exploited by more than just stalkers, possibly encouraging borderline personalities into surveillance activities that they might not otherwise bother with.

December 05, 2006

SMARTRAC Gains US e-Passport Contract

Despite concerns over the security of the new e-passports, the US and other countries are forging ahead with their issuance. And SMARTRAC has gained from that, with an order from Infineon Technologies for millions of RFID contactless inlays. The inlays will supply 70 of 95 e-passport projects. SMARTRAC has opened a fourth factory in Thailand to handle the demand. The US project alone could mean 13-18M inlays per year for SMARTRAC. Said CFO Dr. Christian Fischer

The US order allows us clear capacity planning. By the end
of 2006, we want to achieve a production capacity of approx. 13 million
high-frequency inlays per month.

[via Contactless News]

December 02, 2006

RFID Implant Undetectable?

Earlier in the week, I wrote about a Law + Order TV episode in which one character unwittingly has an RFID chip implanted into her (on the back of the neck, I believe). I argued that this isn't possible, especially since the character is "septic", meaning susceptible to infection. That means she should have known right away that her husband tagged her.

Mark Roberti, Editor of the RFID Journal backs up my claim, indicating that it's very difficult to get away with a secret implant. Generally speaking, my observation over a decade (?!) of Law + Order viewing is that the scriptwriters do due diligence in understanding new technology. But in the case of RFID, they did not get it right/write. And planting the chip deep into the body so it's not detectable (except with an X-ray) would be useless since it would generally cease to function. (So vague references in the X-Files show were also quite fictionalized.)

[via RFID Weblog]

November 26, 2006

RFID Trailer Seals

A large UK grocery distributor, Nisa-Today's, is using RFID-enabled resuable electronic seals on their trailers as an increased security measure. The seals, whenever they're closed, record a random four-digit number as well as the date and time. The use of a random number ensures that, should a seal be opened and re-closed, there will be evidence of it. That is, if a trailer comes into the holding yard and the seal is closed, tampering will generate new random numbers, which obviously will not match the initial number stored. Yard operators can retrieve this information via an interrogator at the gatehouse or around the yard.

While there are other companies, such CN Railways, using RFID to manage shipping trailers (train or truck), only a few are likely using electronic seals. Though this is such an innovative use of raadio frequency technology, and the resulting ROI (return on investment) is high enough that we're likely to see more use of such systems.

The Cell Phone As A Consumer Tool

The versatility of smartphones as a consumer tool might escape you consciously until someone spells it out. The fact is that with the right modules (sometimes native, sometimes plug-in), a smart phone or PDA can read barcodes, download video + audio clips from a Bluetooth enabled movie poster, be used to renew special parking meters, secure a hotel room and store a digital room key, function as a loyalty card + coupon generator, pay for movie tickets, buy items from a vending machine, function as a POS (point of sale) unit and, as a result a CRM (consumer relationship management) device.

And there's more functionality, most of which is enabled by radio frequency technology. Storefront Backtalk has a write up about actual case studies. ZDNet UK talks about how mobile operators are pushing for RFID in phones, to the point of willing to work together to achieve this goal. As such, the mobile RFID solutions market is expected to heat up.

RFID Roundup - Sun Nov 26/06

Ireland's 18M Euro Fingerprint System
The Irish Naturalisation and Immigration Service are spending 18M euros for an electronic fingerprint system. Called AFIS, the system will take nearly 18 months to be developed. Biometrics techniques will be used on asylum seekers and non-EEA (European Economic Area) nationals to ensure that they are not lawbreakers elsewhere. [via Silicon Republic]

Online RFID E-learning Program
Abhisam Software offers an online RFID training program for a cost of US$99. This is a supplement to their US$399 CD-based program. The course outline contains discussions of basic concepts, the physics of RFID, RFID systems, middleware, applications, security, and privacy. More details about the course's contents here. [via Processing Talk]

Active RFID Summit
Lost or stolen product costs European distribution centers as much as US$24B annually. Active RFID has the potential to help reduce such undesirable operating costs. This was the focus of the Active RFID Summit in Atlanta, Georgia, recently - an event hosted by IDTechEx. Circuits Assembly has a synopsis of the event.

November 23, 2006

RFID Roundup - Thur Nov 23/06

RFID In The Beef Industry
A Canadian beef producer is using RFID to track product through their processing plant. The intent is to be able to any part of any butchered animal, should the Canadian Food Inspection Agency wish it. The system they are using, which has both supply chain and cold chain management features, was designed and installed by Merit-Trax Technologies and Psion Teklogix. [via RFID Journal]

MicroTRAKgps JaguarWatch
The classic Jaguar automobile is one of those commands a high-price, whether sold legitimately or on the "street". To prevent the latter, MicroTRAKgps has introduced its JaguarWatch Auto Theft Recovery System. MicroTRAKgps is a division of The Tracking Corporation, who make GPS and RFID
products. MicroTRAKgps was awarded a patent for their hybrid technology. Jaguar cargo containers are also tracked with hybrid RFID and GPS tech from Savi Networks.

RFID Is Red Hot: Top 10 Countries
IDTechEx has reported their findings about the top 10 hot countries for RFID. Number 1 is the US, in terms of adoption of the technology, followed by the UK, Japan, German, China. Canada is the last of the top 10.

Big Brother and RFID

During American Thanksgiving today, CNBC TV is running a long segment on "Big Brother" and surveillance societies. If you haven't seen it, there may be reruns later. Or check their website.

What I'm watching right now is a segment on the implanting of RFID chips into humans. One small company in the US supposedly made their employees get microchip implants. The representative that CNBC interviewed said, and I quote, "It's not Big Brotherish." No, of course not. Thank goodness that some US states such as Wisconsin have signed a law banning forced microchipping.

And of course what would a segment about RFID be without interviewing Scott Silverman, CEO of VeriChip's parent company. My interpretation of what he said was a skirt around the answer he should have given and instead said there was no tracking ability, or some such - using his hands to make "quote marks".

I don't know whether to laugh or cry. You can feel free to blast me, but I will never be convinced that implanted RFID is anything but Big Brotherish, despite my respect for RFID for "legitimate" uses. I've highlighted my reasoning, with facts, many times here. The people who've willingly implanted themselves have their own reasoning, and that's fine with me. In that sense, it's no different than a tattoo or a piercing (of which I have both) or other willing body modifications. My beef is with people like Silverman who are trying to force implantation on certain groups of people and then suggesting there's nothing wrong with it, and that privacy is not being violated.

November 18, 2006

RTLS: RFID For Personnel Safety

Contractors and employees for Occidental Petroleum will be receiving dual-active RFID identity badges that are part of an RTLS (Real-Time Location System). The badges, issued to 2,700 personnel, would be used in a closed system of 75 sq miles as a means to determine where workers are in the event of an emergency. [PRNewswire via Yahoo Biz]

The RTLS market is split in two categories: 802.11 Wi-Fi components and unlicensed spectrum.  Some other environments for RTLS applications include correctional facilities, mines, and theme parks. The market is budding and expected to have a 30% yearly growth up through 2011, with companies like Ekahau recently receiving US16M in funding.

November 17, 2006

Consumers Want Fingerprint Verification?

According to a Harris Interactive survey, 72% of 2000 people surveyed seem to indicate that fingerprint scans at ATM/ debit machines would make them feel more secure. I have a hard time believing this, and Evan Schuman at Storefront Backtalk says there are reasons to be suspicious of such data because of the way that a question about biometrics was worded.

Fingerprinting still and probably always will have connotations of being arrested, despite the fact that some employers expect it. I still believe that if biometric authentication has to be used for various reasons, with or without RFID, that consumers would rather it be something like voice recognition. Though that has a number of technical issues that need to be resolved, including its usability in public. On the other hand, other recent surveys in other countries suggest that younger people would be all for identification via palm vein scans and even from implanted radio frequency chips.

November 16, 2006

RFID Roundup - Thur Nov 16/06

Railway Sees RFID Return
Canadian National Railway (CN) moved to [RFID Journal] an RFID-based chassis-rental system for their trailers last year and have already seen a return of Cdn$500,000 as a result. Traffic at their cargo-container storage area has also reduced as a result, by allowing the efficient transfer of cargo containers to the appropriate chassis.

Open Standard Pet Microchip Reader Project
MaxMicrochip.com has a detailed, step-by-step tutorial, complete with pictures and screenshots, on building a pet id microchip reader to read all types of these chips. The project consists of parts that can be purchased at Radio Shack/ The Source, and doesn't even require a soldering iron.

RFID Door Locks
Coolest Gadgets has some pictures of a very slick looking RFID door lock. The lock has the option of a numeric keypad for PIN-based access as well as contactless key fobs, cards, and tags. Of course, you could also have a chip implanted in your hand.

November 10, 2006

Contactless Credit Card Confusion: Biometric Authentication

The ability to skim information discreetly off of the RFID chip in contactless credit cards is causing a stink, thanks to a big NY Times article recently, and eliciting questions that either credit card companies either have ignored or never asked themselves during the design phase. One important issue is secure use, another is credit card selection when a consumer is carrying more than one contactless card.

Of course, there is a way that these cards could be made more secure, but it would require more technology and another generation of cards before they're widely available. Biometric techniques are already being used for access control and identity verification, such as in e-passports. Several forms are in use, including fingerprints,  palm vein scans, retinal scans, and voice recordings. (DNA biometrics is infeasible, at least at present.) From a consumer perspective, most of these techniques are invasive, with maybe the exception of voice recordings.

People are used to recording their voice, so voice biometrics may be a method for solving both issues: secure use and card selection. During a transaction, the customer would be prompted to select the card they'd like to use and recite their name.

Problem is, this isn't a guaranteed solution, as there are technical issues that might hamper its use. For example, if you are in a very noisy shopping mall during Xmas holiday rush, voice authentication may not work unless your mouth is close to the merchant scanner's microphone - which leads to issues of hygiene. The other problem, and more serious, is what if someone uses a recording of someone's voice? Ambient background noise would be expected during a purchase (except online), but with cheap/ free audio editors, that's not difficult to add. And if there is no cashier to verify that a person using a card is actually speaking instead of replaying a recording, then security isstill an issue.

This is, of course, something that all voice biometrics systems will have to deal with, but biometrics tech is costly, and if a merchant is "forced" to use it, there's another source of inflation for our cost of living. But what really worries me, though, is whether these sorts of flaws will lead to the thinking that we "have to" use something more invasive such as retinal scans or palm vein scans just to buy our groceries. Because if cold, hard cash and notes are eliminated, that's the direction we'll have to head down to "protect" consumers from security issues of contactless credit cards. Even if it's as simple as the idea that your contactless credit card requires your fingerprint to be recorded.

Contactless Credit Card Confusion: Wrap That Rascal

Bruce Schneier, a writer for Wired Magazine, has his own blog that has a short post about the ability to skim information off the RFID chip on new contactless credit cards. This is a post worth reading for the comments by readers. Many of the commenters echo my feelings about contactless credit cards and the supposed time-savings they offer, not to mention their security flaws. One commenter, Nicholas, says that you gain almost nothing since while you don't have to take your credit card out of your wallet, you do have to take your wallet out of your pocket. In other words - whoop-de-do. And even that little bit of time savings may not last. A bit further down the post, reader Daniel asks what happens when people start carry two or more of these cards. How will store scanners know which card to charge?

These contactless credit cards are expected to become popular for small transactions, so security issues aside, the likelihood that consumers will carry more than one, is increased. A merchant's RFID reader would thus detect more than one card in your pocket, unless you use an anti-RF sleeeve or wallet.

If you don't use a sleeve (but you should - always use protection), that means you have to remove the desired card from your wallet/ purse. If you do use sleeves, then you still have to remove the right card - not just from your wallet but also from its sleeve. Where exactly is the time saving in that?

These are more reasons why I've said for some time that contactless credit cards are stupid idea that only benefit the issuing companies and the merchants, not the consumer. And they're presently more of a risk to carry than regular credit cards. But since they're probably here to stay, wrap that rascally card with an anti-RF sleeve - something issuing companies should already be doing for you.

November 08, 2006

Mobile NFC RFID Modules

Last year, Wireless Dynamics Inc. (WDI) introduced their SDiD cards, which provide NFC (Near Field Communication)  RFID capabilities in an SD (Secure Digital) card form factor. These standard sized SD cards can be used in the SD memory/ module slots of various smartphones, PDAs and other mobile devices for contactless payments. ACG Identification Technologies, also a player in the NFC RFID market, has signed a deal to distribute WDI's SDiD card. WDI also offers NFC reader/ writers in mini-SD card form. Both types of SD cards operate on HF (High Frequency) protocols and are targeted to "public transport, financial transactions, and access control," amongst other uses.

[additional sources: More RFID]

November 07, 2006

Fake e-Passports? What About Fake Boarding Passes?

Bruce Schneier of Wired News writes about Christopher Soghoian, whose home was visited by the FBI, his door smashed in and his computers and other items seized. Seems Christopher wanted to revisit a known flaw for Northwest Airlines - the ability to create fake boarding passes - by creating a website that lets people create and print their own. A bit extreme, and I'm not sure he got his point across. And here we are worrying about security flaws and cloned e-Passports. Schneier then continues on to explain how fake boarding passes can, unfortunately, be used for nefarious purposes. You'd think that someone would have plugged this problem by now. The printing of boarding passes from home computers has been available since 1999, was apparently halted after 9/11, and then brought back.

October 31, 2006

Countries Miss e-Passport Deadline

This should prove interesting. ComputerWeekly reports that 3 of 27 countries participating in the US Visa Waiver Program missed the deadline to introduce the new RFID-enabled e-Passports, which security experts question the safety of. The countries, however, are very small (Andorra, Brunei, Liechtenstein).

According to Wikipedia, Andorra is known as a tax haven and has the highest life expectancy in the world (83.51 years). Brunei is officially the Sultanate of Brunei, once very powerful. Liechtenstein is doubly landlocked - it and Uzbekistan are the only two countries that are - and is a winter sports resort, so it lacks in heavy urban areas.

The deadline was Oct 26, 2006. Due to this missed deadline, citizens from these countries can only visit the US if the apply for and receive a visa.

More About Tracking People With RFID

In my post Can RFID track people?, I talked about "after the fact trail analysis", where companies can at least see where their employees have been - if not track them - using contactless employee pass cards. It isn't a real-time location system (RTLS). To do that with RFID, without using GPS technology. Or at least specialized hybrid RFID and Wi-Fi technology.

Now contactless cards generally have too short a read range, but I'm hypothesizing that you can track a society's inhabitants using RFID and Wi-Fi. Let's ignore the logistics of programming, the cost of technology, and the sheer computing power needed. Say we want to focus on a tracking a single person. Here's the hypothetical scenario. The fictional society in question has a tight-knit grid of RFID scanners, and everyone wears an RFID wristband/ watch with Wi-Fi communication as well. Each wristwatch is coded with a unique value that identifies the person wearing it. It could be government tax id, such as the SSN - Social Security Number - or what have you.

Think that there would be too many wristwatches to track simultaneously? Some of the new RFID tech being used to handle bins of drugs or other product can read thousands of tags per minute. But in this case, you are trying to track a single person, a single code. Anything else can be ignored. So, continuing with the scenario, you have a person passing a scanner every few feet. Somewhere in some control room, that information can be filtered for one person/ code.

What results is a near real-time "trail" of where that person has been. From this, relatively simply mathematics can be used to study the person's "trail vector(s)" and determine where they might be going. Then a force of "robo cops" outfitted with wireless technology, HUD (Heads-Up Display) goggles, wearable computers, Bluetooth earpieces, etc., could be notified and move to intercept the person.

Now of course, I took a lot of liberties assuming this and that above. And since the devil is in the details, it's those assumptions that have to be resolved for such a science fictional scenario. But I stand by my position that radio frequency technology CAN be used to track a single someone provided the technical and financial conditions are satisified. And it's the ability, not necesarily the actuality, that is frightening.

October 30, 2006

MasterCard Contactless Payment Tech Wins Award

MasterCard was awarded the honors of 2006 Frost & Sullivan Company of the Year for its PayPass contactless payment technology. The technology is being used in the new contactless credits cards from Mastercard. [via Contactless News]

MasterCard was one of the companies listed in a recent NY Times article about the findings of two US researchers regarding the security flaws in 20 contactless credit cards tested. The researchers found that not only could they "skim" important information off the cards while they were still in their envelopes, they could do so with a homemade reader, which cost US$150 to make. They also determined that a smaller reader could be made for only $50 and read information through a mailbox, from a distance of a few feet.

Several credit card companies have claimed that any information skimmed off the cards tested cannot be used successfully to make purchases. Although the whole issue begs the question of why the cards are not mailed with an anti-RF sleeve to at least give them impression that they are protecting consumers from all possibilities of fraud.

October 28, 2006

Can RFID Track People?

This is a debate that I cannot possibly settle, certainly not in a few paragraphs. But let me try. Some of my previous posts have "suggested" the possibility of tracking employees. They've drawn some heated comments as a result. I feel it's important to explain myself, not to save face but to explain exactly what I mean, and to prove, hypothetically, that is in fact possible to track people. However, I am talking of a very general form of tracking, which not only might not be in real-time, but would also be very rough.

To wit, consider this hypothetical scenario. Assume you have a closed environment, such as a large company that has RFID readers installed at doorway access points at regular intervals. Every employee is issued a contactless card that has an unique code. An employee leaves his cubicle to go somewhere, say lunch. The choices are the cafeteria at the far end of the giant complex, or out somewhere. In either case, the employee passes through two or three access points before his path diverges, depending on his destination. Each time through an access point, the time and the id of the card is logged. If the employee goes through more than one access point, which is likely, there is a log of his "trail". A very sparse log, but a log nonetheless. With that log, his boss can tell how long he took for lunch, whether he ate at the cafeteria, whether he stopped off at some lab along the way, etc., etc.

True, this isn't a real-time location system (RTLS), but it offers after-the-fact tracking of sorts, an employee trail, if you will. Guy J Kewney has a well-written post from March which says RFID is hard to get right, so don't worry about "imaginary Sci-Fi scenarios with Big Brother spies..." I respectfully say that while that may be true, it misses the point. RFID/ contactless technology does have the ability to give its controllers more information about you than maybe you want them to have. The question is, how will the information be used? Hopefully end users will be respectful with information they collect.

October 27, 2006

The Effect Of RFID Passports On Hollywood

As I write this, I'm watching the season premiere of the T&A jiggle show Las Vegas, which has a healthy dose of drama thrown in. It suddenly struck me that had this episode been written a few months from now, how different it might have been. One of the main characters, Ed Deline - played by James Caan - is a casino boss. He's also a former CIA operative , or something to that effect.

Shortly after being shot and having a heart attack scare only a few hours before his daughter's wedding, he's visited in the hospital by two members of the CIA. In his normal bullheadedness, he takes off to London. Fast forward to a scene of him in a bank, where he's greeted by a different name. He then opens a safe-deposit box that has a couple of stacks of British Pounds and what appears to be a couple of dozen passports. Tossing his passport into the box, he pulls out another one. Fast forward. He gets off a plane, hands over a passport. The uniformed customs agent opens it to reveal a picture of Deline, but greets him with a different name.

Now if you haven't already figured out what I'm getting at, here it is. If e-passports get implemented worldwide, or at least in the countries that are trading partners of the United States, as the current administration wants, then scriptwriters need a whole new education in e-passports. Most spy stories would cease to make sense to anyone who knows about an e-passport. Granted, having a passport does not mean that you would be visiting a country where they can actually read the RFID chip. As well, when you are a former military operative, you probably have ways to get fake passports with fake data on the RFID chip. At least in fiction.

The oddest thing about this episode, however, is that the show has an extremely high-tech bent, and yet they completely ignored the concept of an e-passport. Maybe scriptwriters are amongst those who are hoping the e-passport doesn't go through - despite the unlikelihood of that, even with all the supposed evidence that there are some serious privacy and security flaws.

October 26, 2006

Video Demonstration Of Contactless Credit Card Flaws

Payments News has an embedded YouTube video demonstrating the privacy holes in contactless credit cards. The video is by the same researchers that found that they could read credit card numbers and expiration dates off of the RFID tags on 20 contactless credit cards directly through their mailer envelopes. Their research was covered in the New York Times a few days ago. Note that it's rather difficult to tell what's going on in the video.

Earlier this year, other security researchers in Europe and elsewhere found that they could also skim information from an RFID tag in an e-passport and use them to trigger an explosive. The US and several countries in Europe started issuing ICAO-compliant e-passports in August. Both the credit cards and the passports have spawned a mini-industry in protective sleeves and wallets, which work on the principle of a Faraday Cage that blocks RF signals.

October 16, 2006

RFID Applications: Shopping Carts

How many times have you seen a shopping cart left abandoned far away from it's rightful place? Personally, I find it annoying when people are too lazy or immature to return them. A prank's a prank, but leaving them around amounts to a sort of pollution. Not to mention, costs owners between $150-200 per cart, if they cannot be recovered. Well, a new tracking system from Intelligentz could stop the cart pranks of drunken college kids. It's kind of a combination RFID application: security and retail, with a bit of consumer use thrown in: asset tracking.

The problem is that there are people, say the elderly, who need the carts to take home their purchases. So the solution that Intelligentz has devised allows carts to be removed from a premises up to a certain distance - in this case a mile - by using long range antennas in light poles in the parking lot. This distance limitation allows management companies to more easily round up carts.

[via RFID Journal]

October 13, 2006

Biometric Passports

No word if it uses RFID, but the new Manx (Isle of Man) passports do use biometrics. Identifying facial data is stored on a chip. Faces are presumably scanned and compared to stored data wherever a passport would be checked. The cost of the new passports is 30% over previous costs. This is a deviation from the ICAO -compliant e-passports being used in most of the European Union, the USA, and other places.

An alternative method might be voice biometrics. This method is expected to be less expensive than iris or fingerprint scanning because of a reduction of necessary hardware. As the general populace of the world is fairly comfortable with recording their voice, it's also likely to achieve more widespread acceptance than other methods - which have been labelled invasive of privacy.

The only thing that probably remains is to convince people that each person's voice is unique. But voice biometrics coupled with a picture and combined with RFID to store other information, it may be a sufficient method for most situations, whether for banking for passports. (Except maybe identical twins?)

[original links from Contactless News]

October 12, 2006

With RFID Your Phone Is Your Key

A number of European hotels are running an NFC (Near Field Communications) trial that allows guests to carry room number and key in an RFID chip in their cell phones. This allows them to open their room door by waving their phone close to the reader. Guests who do not have an RFID-enabled phone are issued a contactless key card. In France, Hertz Rent-a-Car is issuing contactless cards as a replacement to car door keys. The engine is started by a push-button.

RFID chips from NXP (formerly Philips Semiconductors) are used in both trials. Similar American trials are expected in the near future. It should be noted, however, that contactless RFID smart cards have been used by employees of large corporations in North America for nearly 20 years. While their use may not be widespread, many large corporations already use them for all employees.

October 06, 2006

Inspiration For California RFID Senate Bill 768

Despite California Governor Arnold Schwarzenegger's vetoing of California SB 768 RFID bill, it's expected that state Senator Joe Simitian (Dem) will try to reintroduce rfid legislation in another form. Previous to 768, he had introduced Senate Bill 682, which would have prohibited RFID being used in personal identity cards and documents in California. SB 682 was amended to be the less restrictive SB 768, which would have protected the privacy of citizens against misuse of RFID. The RFID industry was neutral in their response to the second bill, but vocal about the first. [via Card Technology]

It's noted that Simitian was inspired to draft the legislation due to a school in his district enforcing RFID badges on all students. Given that that's the case, he is probably going to continue reintroducing legislation until he succeeds, or at least comes to a compromise.

October 05, 2006

SB 768 RFID Bill Not Dead Yet

Even though Governor Arnold Schwarzenegger vetoed California Senate Bill 768, that would have limited the use of RFID technology in terms of protecting citizen privacy, the bill is not dead yet. The bill, drafted by Senator Joe Simitian (Dem, Calif), can be brought back (probably in another form), but not during the rest of the current two-year Senate session. Simitian said that he was in the middle of his first four-year term - suggesting that he would continue to work on the bill. (Simitian also drafted California SB 682 which, had it passed, would have prevented RFID from being used in personal identity cards and documents in California.

Schwarnegger's response, when he vetoed the bill, was that it was premature, overbroad, and that it may hinder "beneficial new applications of contactless technology." It may be the cynic in me, but he seems to be favoring not so much state interests as federal interests by suggesting the bill may clash federal mandates about radio frequency technology due soon.

[sources: Baseline]

October 03, 2006

Wi-Fi RFID Hybrid Location System

Hitachi is working on a version of their Air Location positioning system which will use Wi-Fi RFID tags. The system would be used to monitor the location of people in buildings and possibly be used for emergency use such as disaster relief. [via RFID in Japan]

This system is a form of RTLS, Real-Time Location Systems, which are a growing niche of RFID suitable for both inanimate objects and people using wearable RFID wristbands or badges. Several water parks are using them, including Great Wolf Lodge, or planning to. In fact, PDC, Precision Dynamics Corporation, is planning to demo their Smart Band RFID Wristband at a waterpark symposium in late October.

Pass The (RFID) Chips

I don't know if this is a joke by PC Magazine, but in the Sep 5/06 print edition, they have an article suggesting that people should embed an RFID chip into their hand, since "dogs do it, cats do it". [via Spychips]

For a different perspective on implanting RFID into humans, read my 10 types of people who should be RFID-tagged (and 5 not), which was actually a dark humor piece that some people just didn't get. There's also 10 people or groups who have been microchipped, which lists some people who have willingly or voluntarily had RFID chips implanted into them - in one case, twice.

October 02, 2006

RFID Roundup - Mon Oct 2/ 06

Unusual Uses of RFID: To Bee Or Not Bee
Bees are needed to pollinate a variety of commercially-grown flowers and trees, and with a decline American bee population, hive-stealing seems to be on the increase. To combat this, Bee Alert and Integral RFID have come up with something called Hive Sentry, an RFID-based system that alerts owners if hives are moved. Communication is via Bluetooth, to a PDA phone. [via RFID Journal]

Forget Smartcards, Here Are Smart Dummies
Judi Henderson-Townsend, who owns and operates Mannequin Madness, uses RFID to manage inventory of mannequins and parts, and to speed up the process for putting together a custom mannequin for clients. Her system allows her to quickly find limbs and heads that match with a given torso. [via RFID journal]

Dog-gone: Woman's Best Friend
Crazy but supposedly true, sourced from the BBC, a paragon of news truth: A dog swallowed the RFID chip from a car key, but the car started anyway, with the key in the ignition and the dog near the steering column. [BBC via Spychips blog]

September 29, 2006

Why Promote RFID?

No doubt the above question has been asked many times by many people: why promote a technology that we've done without for so long, and that seems to scare a lot of people? Do we really need it? Is there a political agenda? Something else? Mark Roberti, founder and editor of RFID Journal weighs on why he promotes RFID, and highlights some of the abuse he takes because of it, mostly by email.

His main statement that seems to get a lot of not so delightful email is his belief that consumer concerns of a future Big Brother-like society based on RFID is overblown. His other statement that gets negative response is in saying that some people - namely Katherine Albrecht, founder of CASPIAN - are hyping the concerns for their own agendas, some of which may be religious. On the other hand, there are respected doctors, like Dr. John Halamka, CIO of Harvard Medical School, who willingly allowed himself to be implanted with an RFID chip to prove a point as well as to get a perspective for standards and privacy.

Roberti points out that he has often brought up legitimate privacy and security issues related to RFID, at the RFID Journal website, and thus feels he has not downplayed the concerns. But he believes that the industry would suffer greatly were any company, particularly retailers, were found to be abusing privacy rights. His own business, the magazine, would suffer as well.

While that may be true - and note that this is the first time I am disagreeing with him - that stance in itself is hardly proof that RFID is not being abused or that will not be abused. VeriChip Corp. wants to implant RFID chips into people and has even recommended it for US soliders, the terminally ill, migrant/ visiting workers, etc. I've been writing about privacy and technologies like RFID and smartcards since 1991. Rational, professional, well-respected - and somewhat powerful - people in the know have indicated to me that there has been agenda to tag humans for at least 20 years, emanating from a group in - of all places - California - a state that recently has had a lot of discussions in state Senate about RFID, and have decided to encrypt RFID data on smart id cards.

I like to live by the principle of Occam's Razor. It's something I've learned to do over time. But both my logic and intuition tell me that there really are people who want to tag all of us, though not necessarily for control purposes, just commerce. My science background says that it's possible, and my imagination unfortunately agrees. (There's a saying someone taught me a long time ago: If something is possible, it's probably, given enough time. If something is probably, it's likely, given enough time.)

Think of the fortune you would make if you were one of a handful of companies who could concoct "legitimate" ways of persuading, forcing or even scaring people - all of humanity - into being tagged. And while these people may not want to control you per se, there are others without the means of implementation who might just want to use the technology that way. These two groups are not necessarily mutually exclusive, but probably are. And of course there's the rest, who break down to into several other groups, non of which have negative intentions for RFID.

I'm a middle grounder. I think that RF technology is brilliant, with loads of incredible applications that improve efficiency and potentially reduce operating costs for businesses. But I also think that we have a Pandora's box here, and not because of any religious affiliation. I do not want that box opened, but I also don't want radio frequency technology to go away. Thus, my own purpose for promoting the technology is to make people aware of the parameters, to point out that if there is a conspiracy, there is likely more than one, with different, maybe even cross purposes. But mostly, I'm writing to promote all the good, positive, useful applications of RFID. And there really are a lot of them.

September 28, 2006

RFID and Internet-Controlled