|
Radio frequency identification (RFID) will be very widely used, says a spokesman from Hewlett-Packard (HP), and there will be substantial possibility of damage because goods will move much faster over the system. If the system is hacked, users will not be aware of the effects for a while. Therefore, the RFID industry, including retailers and the consumer products makers, will have to decide the level of security for which they will pay. Security exposures can occur at the RFID tag, network, or data level. Burt Kaliski, chief scientist and director for RSA Laboratories, says the low cost and light functionality of tags that are based on current standards could be one of the problems with RFID. However, security matters are being addressed and resolved with the emergence of such standards as the EPCGlobal UHF generation protocol, which is expected to work with ISO 18000-6C RFID wireless interface specifications. Although most passive tags that support EPCglobal standards are write-once, RFID tags supporting other standards, such as ISO, provide multiple write-to-abilities. Among topics covered are the need for point-to-point encryption and a key performance indicator (KPI) exchange, rogue RFID tags, RSA's Blocker tag (which does a denial of service attack to prevent unauthorized reading of tags), the soft blocker, silent treewalking, and VeriSign's work on use of existing security methods, including firewalls and other access management technologies.
|