Radio Frequency Identification (RFID): Privacy and Security

Despite its long history, Radio Frequency Identification (RFID) is considered as one of the most promising wireless technology in future ubiquitous computing environments. However, it’s a very different form of technology than today’s other wireless dominants such as cellular, satellite, and wireless computer networks. In short, RFID is a contactless, automatic, ultra-light, super-cheap, and extremely convenient method primarily for uncomplicated data capture. The physical design of RFID, therefore, is limited to the minimum capability and feasibility necessary to serve the purpose of the technology. Common wireless communication systems enable people to exchange information over the air. In other words, you’re the actual sender or recipient of the information. For instance, a person talks on the cellular phone, watches the satellite TV, connects to the Internet through WiFi. Emergency services agencies (e.g. police, fire, EMS) extend their eyes and ears by public safety wireless networks in order to control the public safety. The communication is deliberately initiated and terminated by human. Unlike these typical wireless systems, in a RFID system, communication is automatically initiated and terminated by a RFID tag or reader, an object, as long as within the range of radio signals. Therefore, the communication may take place without the consent of a person having the RFID-tagged object; even worse, the person may be totally unaware of such machine-tomachine communication. The above characteristics bring about controversial privacy and security concerns. This paper overviews the RFID technology and includes the assessment of the security aspects. Based on those, the paper discusses major security issues and future directions.