Home > Ask the Security Experts > Identity Management and Access Control Questions & Answers > RFID tags: Do they have a secure future?
Ask The Security Expert: Questions & Answers
EMAIL THIS

RFID tags: Do they have a secure future?

Joel Dubin, past SearchSecurity.com expert EXPERT RESPONSE FROM: Joel Dubin, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 07 August 2006
How do RFID tags work? Do they have a future?

>
Radio Frequency Identification Device (RFID) tags can be attached to products, animals or people. They transmit radio waves containing information about the tagged item to a handheld device that reports back to a centralized computer system and database for recording the data. If a product has an RFID tag, one would simply have to swipe their handheld device over the tag and the information would be tracked.

Wal-Mart put RFID on the map in 2005, when they informed their 100 largest suppliers that in order to conduct business with the chain, their inventory must be tagged.

The possibilities for using these devices are endless. They can be used to track warehouse inventory, animals and livestock, and have been tested on humans for identity confirmation, age verification for entering bars and to automatically retrieve medical records from tagged patients in hospitals. They are also being used in subways and toll collection systems, some on a trial basis, as a means for automatic payments so drivers and riders can pass through turnstiles without stopping.

Does RFID have a future? Probably. Despite the media hype over Wal-Mart, RFID will most likely become more common for tracking things and people. However, before its use becomes widespread, the following issues need to be resolved:

  1. Privacy. Although RFID tags are supposed to only emit radio waves a short distance, radio receivers can receive the tags over longer ranges than expected. Which means if the tag contains personal information, the data can be sniffed.
  2. RFID data isn't secure. It generally travels unencrypted and can be either snatched, or worse spoofed, for malicious purposes. A radio transmitter spoofing an RFID tag could transmit bogus data to the receiving computer system to steal warehouse inventory for example.

Once security is strengthened and privacy is better protected, RFID will likely become more popular.


BROWSE BY TAG
Identity Management and Access Control,   Two-Factor and Multifactor Authentication Strategies,   Enterprise Identity and Access Management,   User Authentication Services,   Expert Archive: Identity Management and Access Control,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Identity Management and Access Control
How to find and remove keyloggers and prevent spyware installation
How to encrypt passwords using network security certificates
Prevent meet-in-the-middle attacks with TDES encryption
How to use single sign-on (SSO) for a server configuration
Choosing management for Active Directory user provisioning
LDAP signing requirements for various directory configurations
User account best practices for an investment management website
How to determine password strength for a website
The pros and cons of implementing smart cards
Keep files from being deleted by assigning read and execute permission

Two-Factor and Multifactor Authentication Strategies
PhoneFactor bolsters authentication using voiceprint identification
Risk-based multifactor authentication implementation best practices
Two-factor authentication, vigilance foil password theft
The pros and cons of implementing smart cards
Security on a budget: How to make the most of authentication tools
Best Authentication Products
Best Identity and Access Management Products
Are 'strong authentication' methods strong enough for compliance?
PCI compliance requirement 7: Restrict access
PCI compliance requirement 9: Physical access

Expert Archive: Identity Management and Access Control
Enterprise password management policy: Finding the balance
How to conduct a periodic user access review for account privileges
Options for a mechanical door security system on a server room door
Comparing access control mechanisms and identity management techniques
User provisioning and SSO for PeopleSoft- and Unix-based products
Could someone place a rootkit on an internal network through a router?
Should a new user have to confirm an email address to gain access?
Can home PCs provide a way for viruses and spyware to enter a corporate LAN?
What should an enterprise look for in a password token and a vendor?
Using batch files for temporary user access to the local admin group

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
AAA server  (SearchSecurity.com)
authentication  (SearchSecurity.com)
authentication, authorization, and accounting  (SearchSecurity.com)
federated identity management  (SearchSecurity.com)
identity access management (IAM) system  (SearchSecurity.com)
Kerberos  (SearchSecurity.com)
password hardening  (SearchSecurity.com)
typeprint analysis  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2010, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts