RFID Security/Privacy

From RFID Wiki

"You have zero privacy anyway. Get over it." 

                                __ Scott McNealy,  1999
                                   CEO, Sun Microsystems

As people start to rely on RFID technology, it will become easy to infer information about their behavior and personal tastes, by observing their use of the technology. To make matters worse, RFID transponders are also too computationally limited to support traditional security and privacy enhancing technologies. This lack of information regulation between RFID tags and RFID readers may lead to undesirable situations. One such situation is unauthorized data collection, where attackers gather illicit information by either actively issuing queries to tags or passively eavesdropping on existing tag-reader communications.


Other attacks include the unwanted location tracking of people and objects (by correlating RFID tag "sightings" from different RFID readers), and RFID tag traffic analysis (e.g. terrorist operatives could build a landmine that explodes upon detecting the presence of any RFID tag).


Here are some links to a few papers providing an overview of RFID security/privacy issues:


1. "RFID Security and Privacy" by Simson L. Garfinkel, Center for Reserach on Computation and Society,Harvard University.[1]


2. "A RFID Security and Privacy : A Research Survey" by Ari Juels, RSA Laboratories[2]

[edit] RFID Protecting Devices

Retrieved from "http://www.rfidguardian.org/index.php/RFID_Security/Privacy"