Small Tech, Big Issues - RFID IMPLANTS -...
Transcript of Small Tech, Big Issues - RFID IMPLANTS -...
HowItWorks AdvantagesofRFID HistoryoftheRFID ProposedUses
Identification MedicalRecords Immigration SecurityAuthentication
EthicalIssues Purchasetracking Lackofencryption Locationtracking Unauthorizedtagreading Requiringimplantforjob/immigration
1. Controllerinitiatesread2. Readerantennasendsshortrangeradio‐
frequencysignals3. Tagconvertssignaltoenergy4. Tagusesstoredenergytotransmitits
memorycontentsbacktoreader5. Readerantennacollectssentdata
http://www.rotil.nl/communications/products/rfid.en.php
Tagsare: Cheap Resilient Longlived Don’tneedpowersource Small
Operateunderextremeconditions(cold/heat) Contactlessrecognition
Throughmaterialslikeplastic,glass,wood Canbemadeinvisibletotheuser
InWW2,theGermans,Japanese,Americans,andBritishwereallusingradar
Nowaytoidentifyplanes
Germansdiscoveredthatifpilotsrolledtheirplanesastheyreturnedtobase,itwouldchangetheradiosignalreflectedback
FirstpassiveRFIDsystem
http://apocalapsus.es/blog/category/cine/
EASSystemsIntroduced Checkpoint Sensormatic
1‐bittags:onoroff Deactivatedbypartially
destroyingcapacitorbyrunningtagoverastrongelectromagneticfield
Multi‐bittagssizeofaloafofbread,sizelimitedbycircuitry
http://www.spychips.com/blog/2006/01/eas_or_rfid_new_labels_prompt.html
http://www.contractpharma.com/articles/2007/06/images/rfid.jpg
http://electronics.howstuffworks.com/gadgets/high‐tech‐gadgets/rfid.htmhttp://autoid.mit.edu/pickup/RFID_Papers/008.pdf
http://images.businessweek.com/ss/06/01/medtech/image/verichip.jpg
http://www.rfidjournal.com/imagecatalogue/imageview/5154/?RefererURL=/article/articleview/4055/
ReceivedpermissionfromUSFDAtomarketVeriChipin2004
2000+implantsasof2007
~$200 16‐digitcode(128‐bits)
“AlthoughcurrentlyPositiveIDdoesnotactivelymarkettheVeriMedsystem,itcontinuestosupportexistingpatientsandhealthcarefacilities.”
‐PositiveIDwebsiteFAQ
MedicalRecords Immigration SecurityAuthentication KidnappingPrevention Trackingofcriminals/parole….andsickpeople?
#ofrecordinsecuredatabase
Focusmarket:Cancerpatients,peoplew/pacemakers,orpeoplewhomightbecognitivelyimpaired
Detection: HowdoesERstaffknowyouhaveaVeriChip?▪ Bracelet?Tattoo?▪ Bigproblemsifnotdetected
DoeshospitalhaveRFIDreader? HealthIssuesCAUSEDbychip?
Thepotentialriskstohealthassociatedwiththedeviceare:
adversetissuereaction;migrationofimplantedtransponder;compromisedinformationsecurity;failureofimplantedtransponder;failureofinserter;failureofelectronicscanner;electromagneticinterference;electricalhazards;magneticresonanceimagingincompatibility;andneedlestick.
‐USFDA http://www.spychips.com/devices/verichip‐fda‐letter.pdf
CEOofVeriChipproposedimplantsinimmigrantsandguestworkerstoassistthegovernmentinlateridentifyingthem
PresidentofColumbiaquotedtellingaUSsenatorthathewouldagreetorequireColumbiancitizenstobeimplantedbeforetheycouldgainentryintotheUSforseasonalwork
Whopaysforit?Maintenance?Problemsw/chip?Cloning?
DangerousPrecedent
SimilartobrandingcattleortattoostheNazisforcedontheirvictimsinconcentrationcamps?
SuggestedusebyVeriChip
2004:Mexico’sattorneygeneralCarlosAltamiranoandstaffreceiveVeriChipimplantsforthepurposesof“access,forsecurity”.
http://msnbcmedia1.msn.com/j/msnbc/Components/Photos/040714/040714_mexicoChip_hmed_3p.hmedium.jpg
Lackofencryption Power/memoryconstraintspreventanysecuritymeasures,rollingcodeandchallenge‐responseauthenticationsystemsbeingworkedon
Unauthorizedreading Fewlawspreventing Handheldreaders~$250 Makeyourown?
Cloning
2000+Mexicancitizenshavehadtagsimplantedforthepurposeoftrackingincasetheyarekidnapped
NoGPScapabilitiesincurrentRFIDimplants.. CEOofVeriChip’sparentcompany
“concedesthatthecompany’sMexicandistributormaynothavetriedveryhardtodispelthenotionthatVeriChipshaveGPScapabilities,whichwouldberequiredforrealremotetracking”[McHugh]
lifeintheU.S.willbecomedifficultforthosewhodonotwantachipinsidethem(inmuchthesamewayasitiscurrentlydifficultforanyonewithoutacreditcard,cellphone,emailaddressorinternetaccess
http://industry.bnet.com/pharma/10005641/positiveid‐deal‐advances‐use‐of‐microchip‐implants‐in‐florida‐health‐system/).
Iftherewereasocietalbenefit,couldagovernmentrequireindividualstomodifytheirbodies?Forpublichealthpurposes,theanswerisyes.IntheUnitedStates,forexample,studentsmusthavecertainimmunizationsbeforeattendingpublicschool. ‐Foster&Jaeger
Littlelegislation Washington(2008)–UnauthorizedReading California,Georgia,NorthDakota,Virginia,Wisconsin–
ProhibitsforcedRFIDimplants 28(?)otherstatesw/pendingRFIDlegislation
Needacomprehensivesetofregulations
EPIC–ElectronicPrivacyInformationCenter “Publicinterestresearchcenter” “Noclients,nocustomers,noshareholders”
Givenoticeof: TagPresence ReaderPresence ReadingActivity
Removal AnonymityPriority Security Openness Accountability Rights
Access Removal Accountability
RFIDimplantscanbepowerfultoolsifusedwhilebeingconsciousoftheirvulnerabilitiesorifsufficientadvancesinthetechnologyaremade.
EventhoughRFIDimplantsaren’twidelydeployedatthistime,legislationneedstobeputinplacetopreventpotentialissuesfromturningintorealissues.
Bacheldor,Beth.“AmericanMedicalAssociationIssuesEthicsCodeforRFIDChipImplants”.RFIDJournal.17July2007.Accessed11May2010.<http://www.rfidjournal.com/article/articleview/3487/1/1/>
Foster,KennethandJaeger,Jan.“RFIDInside:TheMurkyEthicsofImplantedChips”.UniversityofPennsylvaniaDepartmentofBioengineering.2007.ReprintedfromIEEESpectrum,March2007,24‐29.<http://repository.upenn.edu/cgi/viewcontent.cgi?article=1098&context=be_papers>
“GuidelinesonCommercialUseofRFIDTechnology”.ElectronicPrivacyInformationCenter.July2004.http://epic.org/privacy/rfid/rfid_gdlnes‐070904.pdf
Landt,Jeremy.“ThehistoryofRFID”.IEEEPotentials.October/November2005.http://autoid.mit.edu/pickup/RFID_Papers/008.pdf
McHugh,Josh.“AChipinYourShoulder”.Slate.com.10November2004.http://www.slate.com/id/2109477
“Microchipimplant(human)”.Wikipedia.<http://en.wikipedia.org/wiki/Microchip_implant_(human)>
Perakslis,ChristineandWolk,Robert.“SocialAcceptanceofRFIDasaBiometricSecurityMethod”.IEEETechnologyandSocietyMagazine.Fall2006.<http://autoid.mit.edu/pickup/RFID_Papers/079.pdf>
“Radio‐frequencyidentification”.Wikipedia.<http://en.wikipedia.org/wiki/Rfid>
Weissert,Will.“Mexicanattorneygeneralpersonallygoeshigh‐techforsecurity”.USAToday.14July2004.http://www.usatoday.com/tech/news/2004‐07‐14‐mex‐security‐implant_x.htm
Westhues,Jonathan.“Demo:CloningaVerichip”.July2006.<http://www.cq.cx/verichip.pl>
Witt,Sam.“Ishumanchipimplantwaveofthefuture?”.CNN.com.January14,1999.<http://www.cnn.com/TECH/computing/9901/14/chipman.idg/>