Download pdf - Katherine Albrecht

8/9/2019 Katherine Albrecht

http://slidepdf.com/reader/full/katherine-albrecht 1/27

SPYCHIPS:Item-Level RFID andConsumer Privacy

Katherine Albrecht, Ed.D.

CASPIAN (Consumers Against Supermarket Privacy Invasion and Numbering)

www.spychips.com

Copyright © Katherine Albrecht 2007 All rights reserved



RFID Tag:

A tiny chip connected to an antenna

Hitachi¶s 0.3 mm mu chip RFID tags in use at Extra ³FutureStore´ in Rheinberg, Germany

Copyright © Katherine Albrecht 2007



RFID Reader:

Sends a signal to a tag, reads the response




EPC: Unique identifiers for

all objects worldwide

³«the EPC network [is] a new global standard for

immediate, automatic identification of any itemin the supply chain of any company, in any industry,in the world.´

- EPCglobal




THREAT #1

Hidden tags




Hidden Tags

(But isn¶t a 6´ tag hard to hide?)

Alien/RAFSEC ³C´ tag




6´ Alien/RAFSEC ³C´ tag inside a box

Not if it¶s sandwiched

in cardboard




Embedded in Shoes




Hidden in fabric labels

(Checkpoint prototype)




RFID tag inCheckpoint label




Tags are appearing in

credit cards




THREAT #2

Ubiquitous

readers




Texas Instruments advises retailers to scan customers¶ loyalty cards right through their purse or walletSource: http://www.ti.com/tiris/docs/solutions/pos/loyalty.shtml

Doorway readers planned




³Conductive threads interwoven with thefabric«[could create an RFID tag that is]flexible and pliant, thereby lending itself

to taking on and conforming to the[item¶s] shape.´

³The placement of [the RFID tag] in [the]shoe may be particularly advantageouswhere the [RFID] interrogator is located

in a floor.́

- Philips Electronics

US Patent # 6677917

"Fabric antenna for tags"

Shoe tags and

floor readers




Anywhere in the environment

"We will not force the bracelets onto people and

the cameras will be unobtrusive, so they will not

feel like they are being watched."




THREAT #3

Abuse by

"The Authorized Parties"




³Previous purchase records of persons who shop at a store are collected

by POS terminals and stored in a transaction database.When a personcarrying or wearing items having RFID tags enters the store or other designated area, a RFID tag scanner scans the RFID tags onthat person and reads the RFID tag information [to] determine the exactidentity of the person... Then, as that person moves around the store,different RFID tag scanners located throughout the store can pick upradio signals from the RFID tags...and the movement of that person is

tracked based on these detections.´

-IBM patent application 20020165758

³Tracking and Identification of persons using RFID-tagged items´

IBM describes its patented

³Person Tracking Unit´




In addition to stores, RFID tracking ³can be applied to other locations havingroaming areas, such as shopping malls, airports, train stations, busstations, elevators, trains, airplanes, restrooms, sports arenas, libraries,theaters, museums, etc.´


Libraries

Elevators

Public restrooms

IBM suggests tracking people in public spaces




The tracking information can be used in any application where it is useful. For example, if the person is carrying a baby bottle, a store advertisement systemmay be configured to advertise diapers.


«and silent scanning for marketing purposes




³By combining captured pre-consumer [RFID tag]information with post-consumption information, theentire life cycle of an item may be tracked. Thisinformation may be useful to«retailers, manufacturers,distributors and the like«.The collected and processeddata may be helpful to track consumer purchase [and]use patterns.´

- US Patent Application # 20040129781

Assigned to BellSouth³System and method for utilizing RF tags to collect dataconcerning post-consumer resources´

GarbageScanning




³Instead of having to redesign the entire store« a store manager simply«places wireless sensor motes on the different shelves to

track customers«.RFID-enabled loyalty cards aredistributed to customers [that] carry a unique customer identifier that links to a customer entry in a database«. Asa customer passes by a wireless sensor mote, thecustomer is automatically tracked.´

- Detecon white paper, April 2006³Wireless RFID Networks for Real-Time Customer Relationship´

In-store trackingremains a toppriority




RFID tag hidden in Metroloyalty card






and used them to take a mug

shot of every customer




Rheinberg, Germany February 28, 2004

European consumers wantprotections

© Katherine Albrecht 2006. Duplication or presentation without permission is prohibited.



WWW.SPYCHIPS.COM

Dr. Katherine Albrecht, Founder and Director

CASPIAN Consumer Privacy

( Consumers Against Supermarket Privacy Invasion and Numbering)

www.spychips.com

(877) 287-5854 [email protected]




Read Range 915 MHz Tags

³The first product to come from thecollaboration will be a handheld device thatreads Matrics' passive EPC tags«The unit will

be able to read passive tags from up to 33 feet(10 meters) away´

33 feetunspecifiedPassiveMatrics

/Savi

R ead range ³depends on reader configurationand tag enclosure.30 W EIR P (USA site

licensed):> 20m4 W EIR

P (USA unlicensed):6-8m500 mW ER P (Europe): 1-2m´

66 feet USAlicensed

20-26 feetUSAunlicensed

3 ± 7 feet EU

915 MHzPassiveiPico

³The maximum freespace read range of these

emulator tags is 5 meters, consistent with the performance of other known UHF passivetags.´

17 feet915 MHzPassive Alien

³Telenexus has developed a reader and antennafor the 915 MHz long-range R FIDsystem...with a read range of over 15 feet. Thetag is a low-cost passive transponder.´

15 feet915 MHzPassiveTelenexus

³R ead range up to 3.5m (11.48 ft) usingunlicensed 915 MHz reader with one antenna;

read range up to 7m (22.96 ft) with twoantennas"

11 feet915 MHzPassiveTransponder

Technologies

Intellitag 500

CommentsRead RangeFrequencyTypeMfgr
