Author
lynn-wiley
View
217
Download
1
Embed Size (px)
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 1/27
SPYCHIPS:Item-Level RFID andConsumer Privacy
Katherine Albrecht, Ed.D.
CASPIAN (Consumers Against Supermarket Privacy Invasion and Numbering)
www.spychips.com
Copyright © Katherine Albrecht 2007 All rights reserved
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 2/27
RFID Tag:
A tiny chip connected to an antenna
Hitachi¶s 0.3 mm mu chip RFID tags in use at Extra ³FutureStore´ in Rheinberg, Germany
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 3/27
RFID Reader:
Sends a signal to a tag, reads the response
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 4/27
EPC: Unique identifiers for
all objects worldwide
³«the EPC network [is] a new global standard for
immediate, automatic identification of any itemin the supply chain of any company, in any industry,in the world.´
- EPCglobal
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 5/27
THREAT #1
Hidden tags
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 6/27
Hidden Tags
(But isn¶t a 6´ tag hard to hide?)
Alien/RAFSEC ³C´ tag
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 7/27
6´ Alien/RAFSEC ³C´ tag inside a box
Not if it¶s sandwiched
in cardboard
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 8/27
Embedded in Shoes
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 9/27
Hidden in fabric labels
(Checkpoint prototype)
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 10/27
RFID tag inCheckpoint label
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 11/27
Tags are appearing in
credit cards
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 12/27
THREAT #2
Ubiquitous
readers
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 13/27
Texas Instruments advises retailers to scan customers¶ loyalty cards right through their purse or walletSource: http://www.ti.com/tiris/docs/solutions/pos/loyalty.shtml
Doorway readers planned
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 14/27
³Conductive threads interwoven with thefabric«[could create an RFID tag that is]flexible and pliant, thereby lending itself
to taking on and conforming to the[item¶s] shape.´
³The placement of [the RFID tag] in [the]shoe may be particularly advantageouswhere the [RFID] interrogator is located
in a floor.́
- Philips Electronics
US Patent # 6677917
"Fabric antenna for tags"
Shoe tags and
floor readers
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 15/27
Anywhere in the environment
"We will not force the bracelets onto people and
the cameras will be unobtrusive, so they will not
feel like they are being watched."
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 16/27
THREAT #3
Abuse by
"The Authorized Parties"
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 17/27
³Previous purchase records of persons who shop at a store are collected
by POS terminals and stored in a transaction database.When a personcarrying or wearing items having RFID tags enters the store or other designated area, a RFID tag scanner scans the RFID tags onthat person and reads the RFID tag information [to] determine the exactidentity of the person... Then, as that person moves around the store,different RFID tag scanners located throughout the store can pick upradio signals from the RFID tags...and the movement of that person is
tracked based on these detections.´
-IBM patent application 20020165758
³Tracking and Identification of persons using RFID-tagged items´
IBM describes its patented
³Person Tracking Unit´
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 18/27
In addition to stores, RFID tracking ³can be applied to other locations havingroaming areas, such as shopping malls, airports, train stations, busstations, elevators, trains, airplanes, restrooms, sports arenas, libraries,theaters, museums, etc.´
-IBM patent application 20020165758
Libraries
Elevators
Public restrooms
IBM suggests tracking people in public spaces
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 19/27
The tracking information can be used in any application where it is useful. For example, if the person is carrying a baby bottle, a store advertisement systemmay be configured to advertise diapers.
-IBM patent application 20020165758
«and silent scanning for marketing purposes
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 20/27
³By combining captured pre-consumer [RFID tag]information with post-consumption information, theentire life cycle of an item may be tracked. Thisinformation may be useful to«retailers, manufacturers,distributors and the like«.The collected and processeddata may be helpful to track consumer purchase [and]use patterns.´
- US Patent Application # 20040129781
Assigned to BellSouth³System and method for utilizing RF tags to collect dataconcerning post-consumer resources´
GarbageScanning
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 21/27
³Instead of having to redesign the entire store« a store manager simply«places wireless sensor motes on the different shelves to
track customers«.RFID-enabled loyalty cards aredistributed to customers [that] carry a unique customer identifier that links to a customer entry in a database«. Asa customer passes by a wireless sensor mote, thecustomer is automatically tracked.´
- Detecon white paper, April 2006³Wireless RFID Networks for Real-Time Customer Relationship´
In-store trackingremains a toppriority
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 22/27
RFID tag hidden in Metroloyalty card
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 23/27
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 24/27
and used them to take a mug
shot of every customer
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 25/27
Rheinberg, Germany February 28, 2004
European consumers wantprotections
© Katherine Albrecht 2006. Duplication or presentation without permission is prohibited.
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 26/27
WWW.SPYCHIPS.COM
Dr. Katherine Albrecht, Founder and Director
CASPIAN Consumer Privacy
( Consumers Against Supermarket Privacy Invasion and Numbering)
www.spychips.com
(877) 287-5854 [email protected]
Copyright © Katherine Albrecht 2007
8/9/2019 Katherine Albrecht
http://slidepdf.com/reader/full/katherine-albrecht 27/27
Read Range 915 MHz Tags
³The first product to come from thecollaboration will be a handheld device thatreads Matrics' passive EPC tags«The unit will
be able to read passive tags from up to 33 feet(10 meters) away´
33 feetunspecifiedPassiveMatrics
/Savi
R ead range ³depends on reader configurationand tag enclosure.30 W EIR P (USA site
licensed):> 20m4 W EIR
P (USA unlicensed):6-8m500 mW ER P (Europe): 1-2m´
66 feet USAlicensed
20-26 feetUSAunlicensed
3 ± 7 feet EU
915 MHzPassiveiPico
³The maximum freespace read range of these
emulator tags is 5 meters, consistent with the performance of other known UHF passivetags.´
17 feet915 MHzPassive Alien
³Telenexus has developed a reader and antennafor the 915 MHz long-range R FIDsystem...with a read range of over 15 feet. Thetag is a low-cost passive transponder.´
15 feet915 MHzPassiveTelenexus
³R ead range up to 3.5m (11.48 ft) usingunlicensed 915 MHz reader with one antenna;
read range up to 7m (22.96 ft) with twoantennas"
11 feet915 MHzPassiveTransponder
Technologies
Intellitag 500
CommentsRead RangeFrequencyTypeMfgr
Copyright © Katherine Albrecht 2007