Keeping RFID Tags from Prying Eyes

Consumers could also use the device to run audits to see which of their tags—such as those embedded in identity documents or access cards—have been read throughout the course of a day, along with a record of when each was read. Melanie Rieback, a doctorate student at the school and one of the lead Guardian developers, says the group plans to refine the prototype device by adding Bluetooth capabilities, streamlining its size and adding a rechargeable power source.

The device works only with HF ISO 15693 and 14443 tags, used in access, payment or ID cards, but the team plans to develop a UHF version for tags likely to be embedded in consumer products. She says a large chipmaker could boil the components used by Guardian into a form factor small enough to integrate directly into cell phones and PDAs.

RFIDsec's security system uses a 128-bit key to place its specially designed HF tags in privacy mode.

IBM has taken a different approach to protecting consumers' privacy. IBM researcher Paul Moskowitz designed a UHF RFID tag that supports the many feet of readability required by supply-chain applications. But once a tagged item is purchased, you can simply remove a large portion of the tag's antenna, which reduces the read range to just a centimeter or so.

The tag could still be used for product return verification or warranty claims, which isn't possible when tags are permanently disabled, or "killed," at the point of purchase. IBM has licensed the clipped tag to Canadian tag converter Marnlen, which is currently supplying a limited number of the tags to a garment maker using them in a pilot program, but the converter says it can produce the tag in large quantities today.

Who's Who in Privacy RFID Products

IBM
www.ibm.com

Marnlen
www.marnlen.com

Raytheon
www.raytheon.com

RFIDsec
www.RFIDsec.com

RFID Guardian
www.RFIDguardian.org

Privaris
www.privaris.com

Low-Tech Protectors
RFID-blocking wallets and wallet inserts protect personal information in RFID-enabled access cards, passports and payment cards by shielding the RFID tags so they can't be read. The data protectors are available from these companies:

Emvelope
www.emvelope.com

DIFRwear
www.difrwear.com

Kena Kai
www.kenakai.com

Skim Block
www.orient-computer.co.jp/ english2/products/en_skim.htm