Concerns for RFID

Hyun Joon Kim

RFID

• Radio-frequency identification (RFID) is the use of a wireless non-contact system that uses radio-frequency electromagnetic fields to transfer data from a tag attached to an object

How RFID works

• Reader unit sends the signal• RFID tag receives the signal and turns on

by the power provided from the signal (No external power needed!)

• RFID tag does its job and sends response back

RFID tag

Barcodes?

• Can identify things (Prod-ucts, ID, post office)

• Just scan the item through scanner! Much faster than typing numbers.

• Database is required : Barcode itself doesn’t contain any data about the item

• Scanner must directly shine the barcodes to read

RFID?

• No need for a database : data can be stored inside the chip

• Communication doesn’t require the reader device’s direct sight and it works through materials

• Can be implanted• Tag itself is a circuit

We can run programs!

Usages of RFID

Payment SystemPatient Management

Usages of RFID

Problems with RFID

Security Problems with RFID

• No physical contact needed – Crack-ers can easily have access to RFID chips without physical contact

• MIFARE Classic – 48 bit key, broken by Henryk Plötz and Karsten Nohl in 2007

Privacy Problems with RFID• Entry system – Companies know

what places you went and how much time you spent

• Payment system – Information about what you buy can be tracked

• If GPS is embedded?

Case of Korea• Deployed RFID systems for subway

and buses on 1998.• Automatically charges distance that

person traveled and calculates the price (Scan the tag before getting off)

• Free transfer

Case of Korea• Free transfer system to other buses

and subway only for RFID chip users• For subway system, cash payers use

disposable RFID card but still no free transfer

• Pay about 10 cents more if you pay by cash

Case of Korea

• Fast food• Convenience store

Questions

• What concerns can arise if govern-ment decides to abolish cash and use only electronic cash?

• Security measures for current RFID system is too weak, so should we just abandon it to keep out hackers?

• Is it right for public transportation companies to charge more for cash payers like the case of Korea?

Sources

http://en.wikipedia.org/wiki/File:Microchip_rfid_rice.jpghttp://www.barcode1.co.uk/images/samplejplarge.jpghttp://

www.rotil.nl/communications/products/images/rfid_globaal.png

http://webpages.scu.edu/ftp/DGreen/rfid_cypak_400q.jpghttp://www.rfidjournal.com/ezimagecatalogue/catalogue/phpNWvwbT.jpghttp://www.rfidinfotek.com/dynamic_images/1230563462.jpg