How can organizations secure implanted microchips and RFID tags?

How can organizations secure implanted microchips and RFID tags?

I have heard a lot of discussion lately about implanted microchips and RFID tags. How can organizations secure these tracking technologies, what are the advantages of using these devices from a security standpoint and what dangers do they pose?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

RFID tags and RFID implants are totally different animals. RFID tags are becoming commonplace in warehouse and other high-volume tracking use cases where it's important to find something in a large environment. These applications are like any other application: make sure access to the application is governed and the data stored by the application is protected.

In terms of advantages, RFID tags provide a level of granularity in tracking items that hasn't been economically feasible before. The tags are revolutionizing inventory management, and that's a good thing. From a security standpoint, it's possible to use tags to track assets, which could provide more control over where employees take company-owned devices, but that assumes there are RFID readers everywhere an employee would be.

There are also physical security use cases of RFID tags. For example, they could replace the well-worn proximity card readers that most buildings employ. I'm not sure of the economic benefits, but it's certainly a possible use case.

RFID implants have similar application security requirements as tags, but the privacy issues are a totally different ballgame. If medical records are linked to the RFID implant, there are serious HIPAA mandates to protect that information.

As the technology evolves, I believe that human RFID implants could become a slippery slope toward a Big Brother environment. Right now, to my knowledge, there are no GPS-enabled RFID implants -- at least of the variety that could be tracked anywhere in the world -- but eventually they will become reality. Then the question becomes more about ethics than security.

More information:

This was first published in June 2008