Small Tech, Big Issues - RFID IMPLANTS -...

27
Small Tech, Big Issues

Transcript of Small Tech, Big Issues - RFID IMPLANTS -...

SmallTech,BigIssues

  HowItWorks  AdvantagesofRFID  HistoryoftheRFID  ProposedUses

  Identification  MedicalRecords  Immigration  SecurityAuthentication

  EthicalIssues  Purchasetracking  Lackofencryption  Locationtracking  Unauthorizedtagreading  Requiringimplantforjob/immigration

1.  Controllerinitiatesread2.  Readerantennasendsshortrangeradio‐

frequencysignals3.  Tagconvertssignaltoenergy4.  Tagusesstoredenergytotransmitits

memorycontentsbacktoreader5.  Readerantennacollectssentdata

http://www.rotil.nl/communications/products/rfid.en.php

  Tagsare:  Cheap  Resilient  Longlived  Don’tneedpowersource  Small

  Operateunderextremeconditions(cold/heat)  Contactlessrecognition

  Throughmaterialslikeplastic,glass,wood  Canbemadeinvisibletotheuser

  InWW2,theGermans,Japanese,Americans,andBritishwereallusingradar

  Nowaytoidentifyplanes

  Germansdiscoveredthatifpilotsrolledtheirplanesastheyreturnedtobase,itwouldchangetheradiosignalreflectedback

  FirstpassiveRFIDsystem

http://apocalapsus.es/blog/category/cine/

  EASSystemsIntroduced  Checkpoint  Sensormatic

  1‐bittags:onoroff  Deactivatedbypartially

destroyingcapacitorbyrunningtagoverastrongelectromagneticfield

  Multi‐bittagssizeofaloafofbread,sizelimitedbycircuitry

http://www.spychips.com/blog/2006/01/eas_or_rfid_new_labels_prompt.html

http://www.contractpharma.com/articles/2007/06/images/rfid.jpg

http://electronics.howstuffworks.com/gadgets/high‐tech‐gadgets/rfid.htmhttp://autoid.mit.edu/pickup/RFID_Papers/008.pdf

http://images.businessweek.com/ss/06/01/medtech/image/verichip.jpg

http://www.rfidjournal.com/imagecatalogue/imageview/5154/?RefererURL=/article/articleview/4055/

  ReceivedpermissionfromUSFDAtomarketVeriChipin2004

  2000+implantsasof2007

  ~$200  16‐digitcode(128‐bits)

  “AlthoughcurrentlyPositiveIDdoesnotactivelymarkettheVeriMedsystem,itcontinuestosupportexistingpatientsandhealthcarefacilities.”

‐PositiveIDwebsiteFAQ

 MedicalRecords  Immigration  SecurityAuthentication  KidnappingPrevention  Trackingofcriminals/parole….andsickpeople?

  #ofrecordinsecuredatabase

  Focusmarket:Cancerpatients,peoplew/pacemakers,orpeoplewhomightbecognitivelyimpaired

  Detection:  HowdoesERstaffknowyouhaveaVeriChip?▪  Bracelet?Tattoo?▪  Bigproblemsifnotdetected

  DoeshospitalhaveRFIDreader?  HealthIssuesCAUSEDbychip?

Thepotentialriskstohealthassociatedwiththedeviceare:

adversetissuereaction;migrationofimplantedtransponder;compromisedinformationsecurity;failureofimplantedtransponder;failureofinserter;failureofelectronicscanner;electromagneticinterference;electricalhazards;magneticresonanceimagingincompatibility;andneedlestick.

‐USFDA http://www.spychips.com/devices/verichip‐fda‐letter.pdf

  CEOofVeriChipproposedimplantsinimmigrantsandguestworkerstoassistthegovernmentinlateridentifyingthem

  PresidentofColumbiaquotedtellingaUSsenatorthathewouldagreetorequireColumbiancitizenstobeimplantedbeforetheycouldgainentryintotheUSforseasonalwork

 Whopaysforit?Maintenance?Problemsw/chip?Cloning?

  DangerousPrecedent

  SimilartobrandingcattleortattoostheNazisforcedontheirvictimsinconcentrationcamps?

  SuggestedusebyVeriChip

  2004:Mexico’sattorneygeneralCarlosAltamiranoandstaffreceiveVeriChipimplantsforthepurposesof“access,forsecurity”.

http://msnbcmedia1.msn.com/j/msnbc/Components/Photos/040714/040714_mexicoChip_hmed_3p.hmedium.jpg

  Lackofencryption  Power/memoryconstraintspreventanysecuritymeasures,rollingcodeandchallenge‐responseauthenticationsystemsbeingworkedon

  Unauthorizedreading  Fewlawspreventing  Handheldreaders~$250  Makeyourown?

  Cloning

  2000+Mexicancitizenshavehadtagsimplantedforthepurposeoftrackingincasetheyarekidnapped

  NoGPScapabilitiesincurrentRFIDimplants..  CEOofVeriChip’sparentcompany

“concedesthatthecompany’sMexicandistributormaynothavetriedveryhardtodispelthenotionthatVeriChipshaveGPScapabilities,whichwouldberequiredforrealremotetracking”[McHugh]

http://i34.photobucket.com/albums/d115/uniteduniverse/verichip1.jpg

  lifeintheU.S.willbecomedifficultforthosewhodonotwantachipinsidethem(inmuchthesamewayasitiscurrentlydifficultforanyonewithoutacreditcard,cellphone,emailaddressorinternetaccess

  http://industry.bnet.com/pharma/10005641/positiveid‐deal‐advances‐use‐of‐microchip‐implants‐in‐florida‐health‐system/).

Iftherewereasocietalbenefit,couldagovernmentrequireindividualstomodifytheirbodies?Forpublichealthpurposes,theanswerisyes.IntheUnitedStates,forexample,studentsmusthavecertainimmunizationsbeforeattendingpublicschool. ‐Foster&Jaeger

  Littlelegislation  Washington(2008)–UnauthorizedReading  California,Georgia,NorthDakota,Virginia,Wisconsin–

ProhibitsforcedRFIDimplants  28(?)otherstatesw/pendingRFIDlegislation

  Needacomprehensivesetofregulations

  EPIC–ElectronicPrivacyInformationCenter  “Publicinterestresearchcenter”  “Noclients,nocustomers,noshareholders”

  Givenoticeof:  TagPresence  ReaderPresence  ReadingActivity

  Removal  AnonymityPriority  Security  Openness  Accountability  Rights

  Access  Removal  Accountability

RFIDimplantscanbepowerfultoolsifusedwhilebeingconsciousoftheirvulnerabilitiesorifsufficientadvancesinthetechnologyaremade.

EventhoughRFIDimplantsaren’twidelydeployedatthistime,legislationneedstobeputinplacetopreventpotentialissuesfromturningintorealissues.

  Bacheldor,Beth.“AmericanMedicalAssociationIssuesEthicsCodeforRFIDChipImplants”.RFIDJournal.17July2007.Accessed11May2010.<http://www.rfidjournal.com/article/articleview/3487/1/1/>

  Foster,KennethandJaeger,Jan.“RFIDInside:TheMurkyEthicsofImplantedChips”.UniversityofPennsylvaniaDepartmentofBioengineering.2007.ReprintedfromIEEESpectrum,March2007,24‐29.<http://repository.upenn.edu/cgi/viewcontent.cgi?article=1098&context=be_papers>

  “GuidelinesonCommercialUseofRFIDTechnology”.ElectronicPrivacyInformationCenter.July2004.http://epic.org/privacy/rfid/rfid_gdlnes‐070904.pdf

  Landt,Jeremy.“ThehistoryofRFID”.IEEEPotentials.October/November2005.http://autoid.mit.edu/pickup/RFID_Papers/008.pdf

  McHugh,Josh.“AChipinYourShoulder”.Slate.com.10November2004.http://www.slate.com/id/2109477

  “Microchipimplant(human)”.Wikipedia.<http://en.wikipedia.org/wiki/Microchip_implant_(human)>

  Perakslis,ChristineandWolk,Robert.“SocialAcceptanceofRFIDasaBiometricSecurityMethod”.IEEETechnologyandSocietyMagazine.Fall2006.<http://autoid.mit.edu/pickup/RFID_Papers/079.pdf>

    “Radio‐frequencyidentification”.Wikipedia.<http://en.wikipedia.org/wiki/Rfid>

  Weissert,Will.“Mexicanattorneygeneralpersonallygoeshigh‐techforsecurity”.USAToday.14July2004.http://www.usatoday.com/tech/news/2004‐07‐14‐mex‐security‐implant_x.htm

  Westhues,Jonathan.“Demo:CloningaVerichip”.July2006.<http://www.cq.cx/verichip.pl>

  Witt,Sam.“Ishumanchipimplantwaveofthefuture?”.CNN.com.January14,1999.<http://www.cnn.com/TECH/computing/9901/14/chipman.idg/>

Begentle……