Privacy in the Internet of Things

Jörn-Marc Schmidtjschmidt@iaik.tugraz.at

Social Networks

Computer / Notebook

Localization

Smart Phone

IdentificationTracking

???

RFID

Social Networks

Computer / Notebook

Localization

Smart PhoneRFID

Privacy & Mobile Devices

No Choice &

Consent

RFID - A Threat?Wal-Mart, the nation's largest retailer, has declared war on our privacy. The giant retailer has announced it will begin placing item-level RFID (Radio Frequency IDentification) tracking tags on clothing sold in its stores.

(July, 2010, http://www.spychips.com/)

More than a Bar Code• Requires no line of sight• Readable from a distance• Unique Identifier

RFID in Retail• RFID tag in each product• Used inside the stores• Cheaper than conventional

theft protection• Deactivated at point of sales

Lifecycle of a Tag

Transport

Retail

Trash

Usage

Tag killed

Protection Methods

• Randomized UIDs• (Mutual) Authentication• Configurable Access

• Other Concepts like – Group Signatures (DAA)

Security Requirementsand Costs

VS

BalanceBenefit & Risk