It's not new; but RFID's are becoming more prevalent on many consumer purchased items. The passport I just received last month has one embedded in it.
Is RFID tracking you?
By Daniel Sieberg~CNN
(CNN) -- Radio frequency identification has been heralded as a breakthrough in tracking technology, and denounced as the next Big Brother surveillance tool.
RFID sounds futuristic: A transmitter smaller than a dime embedded in everything from a T-shirt to human skin, communicating data over a short distance to a reading device.
The technology has been around for decades -- the British used it to identify aircraft as friend or foe during World War II, and factory warehouses have used it more recently to make shipping more efficient.
So why is it getting so much attention now? The short answer is that RFID has moved into more common corners of society.
Today, it can be used to identify missing pets, monitor vehicle traffic, track livestock to help prevent disease outbreaks, and follow pharmaceuticals to fight counterfeit drugs. Many of us start our cars using RFID chips embedded in the ignition key.
RFID chips, injected under the skin, can store a medical history or be used to control access to secure areas. The next generation of passports and credit cards are hotbeds for RFID. It could make bar codes obsolete.
However, hackers and analysts are exposing potentially serious problems. Hackers could disable a car's RFID anti-theft feature, swap a product's price for a lower one, or copy medical information from an RFID chip.
"The dark side of RFID is surreptitious access," said Bruce Schneier, a security expert with Counterpane Internet Security Inc.
"When RFID chips are embedded in your ID cards, your clothes, your possessions, you are effectively broadcasting who you are to anyone within range," he said. "The level of surveillance possible, not only by the government but by corporations and criminals as well, will be unprecedented. There simply will be no place to hide."
But Mark Roberti, editor of RFID Journal, a trade publication that claims independence from the RFID industry, said the long-term convenience and cost-savings outweighs the potential pitfalls.
"Technology is neither good nor evil," Roberti wrote in an e-mail responding to questions from CNN. "Technology is a tool. All technologies can be used in positive or negative ways
"The Internet is a great boon to businesses and consumers, but some use it [unscrupulously]. RFID is no different. It will be bring tremendous benefits to consumers and businesses. The key is to find ways to maximize the benefits and try to limit any potential abuses."
Can an identity be stolen?
Most RFID chips or tags are passive, meaning they contain no battery power and can transmit data only when zapped with a reader. Active tags, which are more expensive, can carry some battery power
Prices for the chips can range from several cents to a couple of dollars apiece, depending on the application and whether they are ordered in bulk. The cost has limited RFID's appeal. To compete with barcodes, RFID chips need to be priced at under a penny each. The cost is gradually coming down, though
The storage space is extremely small, typically about 2KB, and the data on the tags can be read by equipment from a few inches to several feet away -- and sometimes a bit farther.
A group of hackers at the 2005 DefCon technology convention in Las Vegas, Nevada, used an antenna attached to an RFID reader to scan the information on a tag nearly 70 feet away. RFID proponents downplayed the demonstration, saying the apparatus was impractical and wouldn't work if the information on the RFID tag were encrypted, which is more often the case.
"The kind of RFID that is becoming widely used has no power source, and can send information over tens of feet. Compared to, say, a cell phone, which transmits personal identity and location information for miles, RFID's potential for misuse and abuse is quite trivial," Kevin Ashton, vice president at ThingMagic LLC, a manufacturer of RFID readers, wrote in an e-mail responding to CNN's questions.
"That said, companies that make and use RFID have a responsibility to make sure the technology is developed and adopted in ways that make it secure and useful."
That responsibility was recently addressed by a best-practices manifesto composed by the RFID industry. Participating companies included Microsoft, IBM, Intel, Visa U.S.A. and Proctor & Gamble.
The manifesto is meant to assuage consumer fears about how data could be collected, shared and stored. Key parts of the document include an agreement to notify consumers about RFID data collection and give them a choice when it comes to gathering personal information. But the manifesto doesn't suggest any penalties for not complying, and the onus would likely fall to the Federal Trade Commission to investigate any claims of harm or wrongdoing.
"Credit card companies have huge incentives to secure the transaction: They need to avoid customer complaints, counterfeiting and billing disputes, so it seems reasonable to assume high levels of security will have to be built in before such a system would be widely accepted," wrote ThingMagic's Ashton.
RFID near you
Despite these concerns, others say there are huge benefits to using RFID.
"At least 30 million people carry an RFID tag on them every day in their car keys or in their access control card to get into their office building or to buy gas or to pay a toll," wrote RFID Journal's Roberti. "Everywhere RFID has been rolled out in the consumer environment, consumers have overwhelmingly embraced it."
One new consumer application is in credit cards. Consumers could simply wave a credit card containing a passive chip at an RFID reader to pay for their purchases.
While there is concern that hackers could remotely read the card information, supporters argue it would be easier for merchants, and the speed of the processing time could shave off more than a dozen seconds per transaction, which would add up. They also say transactions would be no more or less secure than they are today.
"That is, if you buy stuff today with a credit card, that information is stored in a database," Roberti wrote. "When or if RFID is used to record sales, data will go in a database, the same one in fact. If the government wants access to the RFID data or the bar code data, it's essentially the same thing."
The controversy and discussion about RFID technology will not end anytime soon. But both sides agree that a sizable dose of debate is needed to hammer out the kinks. Meanwhile, the technology is appearing in an increasing number of places -- though even if you look around, you still might miss it.
Is RFID tracking you?
By Daniel Sieberg~CNN
(CNN) -- Radio frequency identification has been heralded as a breakthrough in tracking technology, and denounced as the next Big Brother surveillance tool.
RFID sounds futuristic: A transmitter smaller than a dime embedded in everything from a T-shirt to human skin, communicating data over a short distance to a reading device.
The technology has been around for decades -- the British used it to identify aircraft as friend or foe during World War II, and factory warehouses have used it more recently to make shipping more efficient.
So why is it getting so much attention now? The short answer is that RFID has moved into more common corners of society.
Today, it can be used to identify missing pets, monitor vehicle traffic, track livestock to help prevent disease outbreaks, and follow pharmaceuticals to fight counterfeit drugs. Many of us start our cars using RFID chips embedded in the ignition key.
RFID chips, injected under the skin, can store a medical history or be used to control access to secure areas. The next generation of passports and credit cards are hotbeds for RFID. It could make bar codes obsolete.
However, hackers and analysts are exposing potentially serious problems. Hackers could disable a car's RFID anti-theft feature, swap a product's price for a lower one, or copy medical information from an RFID chip.
"The dark side of RFID is surreptitious access," said Bruce Schneier, a security expert with Counterpane Internet Security Inc.
"When RFID chips are embedded in your ID cards, your clothes, your possessions, you are effectively broadcasting who you are to anyone within range," he said. "The level of surveillance possible, not only by the government but by corporations and criminals as well, will be unprecedented. There simply will be no place to hide."
But Mark Roberti, editor of RFID Journal, a trade publication that claims independence from the RFID industry, said the long-term convenience and cost-savings outweighs the potential pitfalls.
"Technology is neither good nor evil," Roberti wrote in an e-mail responding to questions from CNN. "Technology is a tool. All technologies can be used in positive or negative ways
"The Internet is a great boon to businesses and consumers, but some use it [unscrupulously]. RFID is no different. It will be bring tremendous benefits to consumers and businesses. The key is to find ways to maximize the benefits and try to limit any potential abuses."
Can an identity be stolen?
Most RFID chips or tags are passive, meaning they contain no battery power and can transmit data only when zapped with a reader. Active tags, which are more expensive, can carry some battery power
Prices for the chips can range from several cents to a couple of dollars apiece, depending on the application and whether they are ordered in bulk. The cost has limited RFID's appeal. To compete with barcodes, RFID chips need to be priced at under a penny each. The cost is gradually coming down, though
The storage space is extremely small, typically about 2KB, and the data on the tags can be read by equipment from a few inches to several feet away -- and sometimes a bit farther.
A group of hackers at the 2005 DefCon technology convention in Las Vegas, Nevada, used an antenna attached to an RFID reader to scan the information on a tag nearly 70 feet away. RFID proponents downplayed the demonstration, saying the apparatus was impractical and wouldn't work if the information on the RFID tag were encrypted, which is more often the case.
"The kind of RFID that is becoming widely used has no power source, and can send information over tens of feet. Compared to, say, a cell phone, which transmits personal identity and location information for miles, RFID's potential for misuse and abuse is quite trivial," Kevin Ashton, vice president at ThingMagic LLC, a manufacturer of RFID readers, wrote in an e-mail responding to CNN's questions.
"That said, companies that make and use RFID have a responsibility to make sure the technology is developed and adopted in ways that make it secure and useful."
That responsibility was recently addressed by a best-practices manifesto composed by the RFID industry. Participating companies included Microsoft, IBM, Intel, Visa U.S.A. and Proctor & Gamble.
The manifesto is meant to assuage consumer fears about how data could be collected, shared and stored. Key parts of the document include an agreement to notify consumers about RFID data collection and give them a choice when it comes to gathering personal information. But the manifesto doesn't suggest any penalties for not complying, and the onus would likely fall to the Federal Trade Commission to investigate any claims of harm or wrongdoing.
"Credit card companies have huge incentives to secure the transaction: They need to avoid customer complaints, counterfeiting and billing disputes, so it seems reasonable to assume high levels of security will have to be built in before such a system would be widely accepted," wrote ThingMagic's Ashton.
RFID near you
Despite these concerns, others say there are huge benefits to using RFID.
"At least 30 million people carry an RFID tag on them every day in their car keys or in their access control card to get into their office building or to buy gas or to pay a toll," wrote RFID Journal's Roberti. "Everywhere RFID has been rolled out in the consumer environment, consumers have overwhelmingly embraced it."
One new consumer application is in credit cards. Consumers could simply wave a credit card containing a passive chip at an RFID reader to pay for their purchases.
While there is concern that hackers could remotely read the card information, supporters argue it would be easier for merchants, and the speed of the processing time could shave off more than a dozen seconds per transaction, which would add up. They also say transactions would be no more or less secure than they are today.
"That is, if you buy stuff today with a credit card, that information is stored in a database," Roberti wrote. "When or if RFID is used to record sales, data will go in a database, the same one in fact. If the government wants access to the RFID data or the bar code data, it's essentially the same thing."
The controversy and discussion about RFID technology will not end anytime soon. But both sides agree that a sizable dose of debate is needed to hammer out the kinks. Meanwhile, the technology is appearing in an increasing number of places -- though even if you look around, you still might miss it.
