RFID: کاربردها، امنیت و حریم خصوصی

“RFID is the first important technology of the twenty-first century. That’s an awesome responsibility. How can we know when and how RFID is being used? How can we make sure it is not misused? How can we exercise choice over how it affects us personally? How do we ensure it is safe? This book is a valuable contribution to the ongoing effort to find the answers.” —From the Foreword by Kevin Ashton, cofounder and former executive director, Auto-ID Center; vice president, ThingMagic Corporation Radio frequency identification (RFID) technology is rapidly becoming ubiquitous as businesses seek to streamline supply chains and respond to mandates from key customers. But RFID and other new wireless ID technologies raise unprecedented privacy issues. RFID: Applications, Security, and Privacy covers these issues from every angle and viewpoint. Award-winning technology journalist and privacy expert Simson Garfinkel brings together contributions from every stakeholder community—from RFID suppliers to privacy advocates and beyond. His contributors introduce today’s leading wireless ID technologies, trace their evolution, explain their promise, assess their privacy risks, and evaluate proposed solutions—technical, business, and political. The book also looks beyond RFID, reviewing the privacy implications of Wi-Fi, Bluetooth, smart cards, biometrics, new cell-phone networks, and the ever-evolving Internet. Highlights include How RFID and other wireless ID technologies work RFID applications—from gas stations and pharmacies to the twenty-first century battlefield RFID, privacy, and the law—in theUnited States and around the world RFID, security, and industrial espionage How Bluetooth and Wi-Fi can track individuals, with or without their permission Technical solutions to wireless ID privacy concerns—their values and limitations Stakeholder perspectives from EPCglobal, Inc., Gemplus, The Procter & Gamble Company, and other industry leaders The future of citizen activism on privacy issues Clear, balanced, and accessible, this is the indispensable primer for everyone involved in RFID: businesses implementing or evaluating RFID; technology suppliers responding to user concerns; and policymakers and privacy advocates who want a deeper understanding of the technology and its implications. Includes contributions from AIM Global, Inc. CASPIAN Center for Democracy and Technology EPCglobal, Inc. The Galecia Group Gemplus IDAT Consulting & Education Institute for the Future Matrics, Inc. MIT Computer Science & Artificial Intelligence Laboratory MIT Media Laboratory OATSystems Privacy Journal The Privacy Rights Clearinghouse The Procter & Gamble Company RSA Laboratories UCLA Department of Geography Wayne State University Law School Cover......Page 1 Contents......Page 6 Foreword......Page 22 Preface......Page 26 Acknowledgments......Page 48 Part I: Principles......Page 54 Introduction......Page 56 A Brief History of AIDC......Page 57 The "Industry" That Isn't......Page 59 The Interconnected World......Page 60 Clear and Present Benefits......Page 61 Future Applications......Page 64 Conclusions......Page 66 RFID Technology......Page 68 RFID Applications......Page 80 Conclusions......Page 88 The Beginning......Page 90 A Mini-Lecture: The Supply Chain......Page 93 The Auto-ID Center......Page 94 Harnessing the Juggernaut......Page 103 Conclusions......Page 107 Introduction......Page 110 Definitions of Privacy......Page 111 Mapping the RFID Discovery Process......Page 115 Privacy as a Fundamental Human Right......Page 118 Privacy Through Data Protection Law and Fair Information Practices......Page 122 Conclusions......Page 133 Introduction......Page 136 Some Current and Proposed RFID Applications......Page 137 Whither Item-Level Tagging?......Page 139 Understanding RFID's Privacy Threats......Page 141 Conclusions......Page 145 Introduction......Page 152 Current State of RFID Policy......Page 154 RFID Policy Issues......Page 158 Government Versus Individual Context......Page 164 Business Versus Individual Context......Page 167 Industry Leadership......Page 172 Options for Government Leadership......Page 173 Snapshot of Current Status......Page 177 Policy Prescriptions......Page 179 The Case for, and Limits of, EPCglobal Leadership......Page 183 Conclusions......Page 186 Introduction......Page 190 A Few Important Concepts in Authentication......Page 191 Authenticity of Tags and Authenticity of Goods......Page 193 Authenticity of Goods and Anticounterfeiting Measures......Page 194 Authentication of Readers......Page 197 Authentication of Users Across the Supply Chain (Federation)......Page 198 Conclusions......Page 200 Introduction......Page 202 Place and Identity in a World of Habits and Symbols......Page 203 Locational Technologies......Page 205 Rethinking Identity: Beyond Traits and Names......Page 210 On RFID......Page 213 Conclusions......Page 214 Introduction......Page 216 A Common Vocabulary......Page 217 Designing and Modifying WID Systems......Page 219 Conclusions......Page 229 Part II: Applications......Page 230 Introduction......Page 232 Interview with Joe Giordano, ExxonMobil Corporation......Page 10 Introduction......Page 242 Logistics and the Military......Page 243 Conclusions......Page 251 Introduction......Page 254 CVS and Auto-ID......Page 255 Project Jump Start......Page 256 Making RFID Work: The Back End......Page 258 Introduction......Page 264 The Hospital......Page 265 Home Eldercare......Page 269 Challenges......Page 274 Conclusions......Page 279 Introduction......Page 282 RFID System Components and Their Effects in Libraries......Page 283 RFID Standards......Page 286 RFID in U.S. Libraries......Page 287 Best-Practices Guidelines for Library Use of RFID......Page 292 Conclusions......Page 294 Introduction......Page 298 RFID Has to Prove Itself......Page 300 Putting RFID to Work......Page 301 RFID and Livestock Marketing......Page 302 RFID World Livestock Roundup......Page 306 Part III: Threats......Page 310 Introduction......Page 312 RFID Tags and the EPC Code......Page 313 A Ubiquitous RFID Reader Network......Page 316 Watching Everything: RFID and the Four Databases It Will Spawn......Page 318 Corporate Abuse......Page 324 Government Abuse......Page 325 Conclusions......Page 326 Introduction......Page 328 Scenario 1: "No One Wins"......Page 330 Scenario 2: "Shangri-La"......Page 331 Scenario 3: "The Wild West"......Page 332 Scenario 4: "Trust but Verify"......Page 333 Conclusions......Page 334 In-Store Scenarios......Page 336 So, Who Wants to Know?......Page 339 Conclusions......Page 343 Introduction......Page 344 Reverse-Engineering the Protocol......Page 345 Security Implications......Page 348 Protecting Against These Types of Attacks......Page 350 Conclusions......Page 353 Bluetooth......Page 356 Bluetooth Security and Privacy Attacks......Page 369 Conclusions......Page 378 Part IV: Technical Solutions......Page 380 Introduction......Page 382 The Technical Challenges of RFID Privacy......Page 384 Blocker Tags......Page 385 Soft Blocking......Page 388 Tags with Pseudonyms......Page 389 Corporate Privacy......Page 390 Conclusions......Page 391 The Problems in RFID Security......Page 394 Conclusions......Page 396 Introduction......Page 400 RFID Recoding and Infomediaries......Page 402 Infrastructure Issues......Page 405 Conclusions......Page 408 Part V: Stakeholder Perspectives......Page 410 Introduction......Page 412 Toll Tracking: Who Knows Where You Are Going?......Page 413 Contactless Payment: Are Safeguards Already in Place?......Page 414 RFID and Automotive Anti-Theft: Staying Ahead of the Security Curve......Page 416 How and What We Communicate......Page 417 Conclusions......Page 419 What Is a Smart Card?......Page 420 Smart Card Communication and Command Format......Page 423 Card Life Cycle......Page 424 Smart Card Applications......Page 425 "Contactless" Cards......Page 426 Protocols and Secure Communication Schemes......Page 427 Constraints of Contactless Products......Page 428 Contactless Products and the Contact Interface......Page 430 Conclusions......Page 433 Payment Applications......Page 434 Inventory Management Applications......Page 436 Hybrid Scanners......Page 442 Privacy Concerns......Page 445 RFID Portal......Page 446 Conclusions......Page 448 Introduction......Page 450 Procter & Gamble's Position......Page 451 RFID Technology and the Supply Chain......Page 452 Global Guidelines for EPC Usage......Page 461 Conclusions......Page 465 Introduction......Page 466 After the Point of Sale: Nonconsumer Goods......Page 467 After the Point of Sale: Consumer Goods......Page 468 After the Point of Sale: Privacy Interests......Page 469 Eliminating the RFID Threats to Privacy......Page 472 Conclusions......Page 481 Introduction......Page 484 RFID Characteristics That Threaten Privacy......Page 485 Proposed Technology-Based Solutions......Page 486 Calling for a Technology Assessment......Page 487 Conclusions......Page 490 Introduction......Page 492 The Surveillance Society: It's Already Here......Page 493 A Trick to Overcome Resistance......Page 494 Constituents to Change—and to Stasis......Page 495 Privacy Advocates Own This Story......Page 497 Privacy, Change, and Language......Page 498 How to Make Consumers Demand Change (and RFID)......Page 500 Conclusions......Page 502 Factors Separating Western and Asian RFID Experience......Page 504 The Extant Paper Database and Electronic Credit Card Systems......Page 508 RFID in India......Page 509 RFID Across Asia......Page 514 Conclusions......Page 518 Introduction......Page 520 An Overview of Wireless Services Penetration into Central America......Page 521 Pervasiveness of Telecommunications in Central America......Page 523 Privacy Concerns......Page 526 An Overview of Privacy Across Latin America......Page 528 Conclusions: Privacy, Poverty, and the Future......Page 530 Appendixes......Page 532 Appendix A: Position Statement on the Use of RFID on Consumer Products......Page 534 Appendix B: RFID and the Construction of Privacy: Why Mandatory Kill Is Necessary......Page 550 Appendix C: Guidelines for Privacy Protection on Electronic Tags of Japan......Page 560 Appendix D: Adapting Fair Information Practices to Low-Cost RFID Systems......Page 568 Appendix E: Guidelines on EPC for Consumer Products......Page 578 Appendix F: Realizing the Mandate: RFID at Wal-Mart......Page 582 A......Page 588 B......Page 589 C......Page 590 E......Page 592 F......Page 593 H......Page 594 K......Page 595 L......Page 596 M......Page 597 P......Page 598 R......Page 601 S......Page 602 T......Page 604 W......Page 607 Z......Page 608 "Award-winning technology journalist and privacy expert Simson Garfinkel brings together contributions from every stakeholder community-from RFID suppliers to privacy advocates and beyond. His contributors introduce today's leading wireless ID technologies, trace their evolution, explain their promise, assess their privacy risks, and evaluate proposed solutions - technical, business, and political. The book also looks beyond RFID, reviewing the privacy implications of Wi-Fi, Bluetooth, smart cards, biometrics, new cell-phone networks, and the ever-evolving Internet."--Jacket