Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > RFID tags: Do they have a secure future?
Ask The Security Expert: Questions & Answers
EMAIL THIS

RFID tags: Do they have a secure future?

Joel Dubin, past SearchSecurity.com expert EXPERT RESPONSE FROM: Joel Dubin, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 07 August 2006
How do RFID tags work? Do they have a future?

>
Radio Frequency Identification Device (RFID) tags can be attached to products, animals or people. They transmit radio waves containing information about the tagged item to a handheld device that reports back to a centralized computer system and database for recording the data. If a product has an RFID tag, one would simply have to swipe their handheld device over the tag and the information would be tracked.

Wal-Mart put RFID on the map in 2005, when they informed their 100 largest suppliers that in order to conduct business with the chain, their inventory must be tagged.

The possibilities for using these devices are endless. They can be used to track warehouse inventory, animals and livestock, and have been tested on humans for identity confirmation, age verification for entering bars and to automatically retrieve medical records from tagged patients in hospitals. They are also being used in subways and toll collection systems, some on a trial basis, as a means for automatic payments so drivers and riders can pass through turnstiles without stopping.

Does RFID have a future? Probably. Despite the media hype over Wal-Mart, RFID will most likely become more common for tracking things and people. However, before its use becomes widespread, the following issues need to be resolved:

  1. Privacy. Although RFID tags are supposed to only emit radio waves a short distance, radio receivers can receive the tags over longer ranges than expected. Which means if the tag contains personal information, the data can be sniffed.
  2. RFID data isn't secure. It generally travels unencrypted and can be either snatched, or worse spoofed, for malicious purposes. A radio transmitter spoofing an RFID tag could transmit bogus data to the receiving computer system to steal warehouse inventory for example.

Once security is strengthened and privacy is better protected, RFID will likely become more popular.


BROWSE BY TAG
Identity Management and Access Control,   Two-Factor and Multifactor Authentication Strategies,   Enterprise Identity and Access Management,   User Authentication Services,   Expert Archive: Identity Management and Access Control,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Identity Management and Access Control
Is Identity Management as a Service (IDaaS) a good idea?
How to log in to multiple servers with federated single sign-on (SSO)
How to confirm the receipt of an email with security protocols
Learn about enterprise strategy for server virtualization single sign-on
Employee information security awareness training for new IAM systems
Can you combine RFID tag technology with GPS to track stolen goods?
Is there a free enterprise-caliber password-management tool?
Cryptosystem attacks that do not involve obtaining the decryption key
Can any firm or organization get a digital signature certificate?
Should the CTO have domain administrator access?

Two-Factor and Multifactor Authentication Strategies
Two-factor authentication, vigilance foil password theft
Security on a budget: How to make the most of authentication tools
Best Authentication Products
Best Identity and Access Management Products
Are 'strong authentication' methods strong enough for compliance?
PCI compliance requirement 7: Restrict access
PCI compliance requirement 9: Physical access
Best practices: How to implement and maintain enterprise user roles
Changing times for identity management
RSA researcher Ari Juels: RFID tags may be easily hacked

Expert Archive: Identity Management and Access Control
Enterprise password management policy: Finding the balance
How to conduct a periodic user access review for account privileges
Options for a mechanical door security system on a server room door
Comparing access control mechanisms and identity management techniques
User provisioning and SSO for PeopleSoft- and Unix-based products
Could someone place a rootkit on an internal network through a router?
Should a new user have to confirm an email address to gain access?
Can home PCs provide a way for viruses and spyware to enter a corporate LAN?
What should an enterprise look for in a password token and a vendor?
Using batch files for temporary user access to the local admin group

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
AAA server  (SearchSecurity.com)
authentication  (SearchSecurity.com)
authentication, authorization, and accounting  (SearchSecurity.com)
federated identity management  (SearchSecurity.com)
Kerberos  (SearchSecurity.com)
password hardening  (SearchSecurity.com)
typeprint analysis  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts