Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > RFID tags: Do they have a secure future?
Ask The Security Expert: Questions & Answers
EMAIL THIS

RFID tags: Do they have a secure future?

Joel Dubin EXPERT RESPONSE FROM: Joel Dubin

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 07 August 2006
How do RFID tags work? Do they have a future?

>
EXPERT RESPONSE
Radio Frequency Identification Device (RFID) tags can be attached to products, animals or people. They transmit radio waves containing information about the tagged item to a handheld device that reports back to a centralized computer system and database for recording the data. If a product has an RFID tag, one would simply have to swipe their handheld device over the tag and the information would be tracked.

Wal-Mart put RFID on the map in 2005, when they informed their 100 largest suppliers that in order to conduct business with the chain, their inventory must be tagged.

The possibilities for using these devices are endless. They can be used to track warehouse inventory, animals and livestock, and have been tested on humans for identity confirmation, age verification for entering bars and to automatically retrieve medical records from tagged patients in hospitals. They are also being used in subways and toll collection systems, some on a trial basis, as a means for automatic payments so drivers and riders can pass through turnstiles without stopping.

Does RFID have a future? Probably. Despite the media hype over Wal-Mart, RFID will most likely become more common for tracking things and people. However, before its use becomes widespread, the following issues need to be resolved:

  1. Privacy. Although RFID tags are supposed to only emit radio waves a short distance, radio receivers can receive the tags over longer ranges than expected. Which means if the tag contains personal information, the data can be sniffed.
  2. RFID data isn't secure. It generally travels unencrypted and can be either snatched, or worse spoofed, for malicious purposes. A radio transmitter spoofing an RFID tag could transmit bogus data to the receiving computer system to steal warehouse inventory for example.

Once security is strengthened and privacy is better protected, RFID will likely become more popular.


Sound Off! -   Post your comments |  See others' comments (1)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Identity Management and Access Control
CardSpace vs. user IDs and passwords
Biometrics vs. biostatistics
What are the dangers of using radio frequency identification (RFID) tags?
What are the risks of connecting a Web service to an external system via SSL?
What should an internal support model for identity management look like?
How to prevent hack attacks against smart card systems.
For a small office, what are the best, least expensive office servers with secure access?
What are the pros and cons of using stand-alone authentication that is not Active Directory-based?
Should users set up password expiries in Active Directory?
How to conduct an efficient and thorough employee access review.

Two-Factor and Multifactor Authentication Strategy
Trends in enterprise identity and access management
Address Authentication and Transaction Validation Protocols to Stem Identity Theft
Understanding multifactor authentication features in IAM suites
SaaS Offering Handles SSO
Identity Management Suites Enable Integration, Interoperability
Product review: Secure Computing SafeWord 2008
Keystroke recognition aids online authentication at credit union
Fraudsters exploiting multiple financial services channels
Video: Changes ahead for MIT Kerberos Consortium
Kerberos security evolves for B2B, mobile tech

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
AAA server  (SearchSecurity.com)
authentication  (SearchSecurity.com)
authentication, authorization, and accounting  (SearchSecurity.com)
federated identity management  (SearchSecurity.com)
Kerberos  (SearchSecurity.com)
password hardening  (SearchSecurity.com)
typeprint analysis  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts