|
ABSTRACT
We propose the use of "selective blocking" by "blocker tags" as a way of protecting consumers from unwanted scanning of RFID tags attached to items they may be carrying or wearing.While an ordinary RFID tag is a simple, cheap (e.g. five-cent) passive device intended as an "electronic bar-code" for use in supply-chain management, a blocker tag is a cheap passive RFID device that can simulate many ordinary RFID tags simultaneously. When carried by a consumer, a blocker tag thus "blocks" RFID readers. It can do so universally by simulating all possible RFID tags. Or a blocker tag can block selectively by simulating only selected subsets of ID codes, such as those by a particular manufacturer, or those in a designated "privacy zone.We believe that this approach, when used with appropriate care, provides a very attractive alternative for addressing privacy concerns raised by the potential (and likely) widespread use of RFID tags in consumer products.We also discuss possible abuses arising from blocker tags, and means for detecting and dealing with them.
REFERENCES
Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.
| |
1
|
Benetton undecided on use of 'smart tags'. Associated Press, 8 April 2003.
|
| |
2
|
D.L. Brock. The electronic product code (EPC): A naming scheme for objects. Technical Report MIT-AUTOID-WH-002, MIT Auto ID Center, 2001. Available from http://www.autoidcenter.org.
|
| |
3
|
Security technology: Where's the smart money? The Economist, pages 69--70. 9 February 2002.
|
| |
4
|
D.M. Ewatt and M. Hayes. Gillette razors get new edge: RFID tags. Information Week, 13 January 2003. Available at http://www.informationweek.com/story/IWK20030110S0028.
|
| |
5
|
S. Garfinkel. An RFID Bill of Rights. Technology Review, page~35, October 2002.
|
| |
6
|
P. Golle, M. Jakobsson, A. Juels, and P. Syverson. Universal re-encryption for mixnets, 2002. In submission.
|
| |
7
|
A. Juels and R. Pappu. Squealing Euros: Privacy protection in RFID-enabled banknotes. In R. Wright, editor, Financial Cryptography '03. Springer-Verlag, 2003. To appear.
|
| |
8
|
D. McCullagh. RFID tags: Big Brother in small packages. CNet, 13 January 2003. Available at http://news.com.com/2010-1069-980325.html.
|
| |
9
|
mCloak: Personal / corporate management of wireless devices and technology, 2003. Product description at www.mobilecloak.com.
|
| |
10
|
R. Pappu, 2003. Personal communication.
|
| |
11
|
Prada's smart tags too clever? Wired News, 27 October 2002.
|
| |
12
|
|
| |
13
|
S. E. Sarma, S. A. Weis, and D.W. Engels. RFID systems, security and privacy implications. Technical Report MIT-AUTOID-WH-014, AutoID Center, MIT, 2002.
|
| |
14
|
S. E. Sarma, S. A. Weis, and D.W. Engels. Radio-frequency-identification security risks and challenges. CryptoBytes, 6(1), 2003.
|
| |
15
|
S.E. Sarma. Towards the five-cent tag. Technical Report MIT-AUTOID-WH-006, MIT Auto ID Center, 2001. Available from http://www.autoidcenter.org.
|
| |
16
|
R. Shim. Benetton to track clothing with ID chips. CNET, 11 March 2003. URL: http://news.com.com/2100-1019-992131.html.
|
| |
17
|
|
| |
18
|
S. A. Weis, S. Sarma, R. Rivest, and D. Engels. Security and privacy aspects of low-cost radio frequency identification systems. In First International Conference on Security in Pervasive Computing, 2003. To appear.
|
| |
19
|
S.A. Weis. Radio-frequency identification security and privacy. Master's thesis, M.I.T. June 2003 (expected).
|
| |
20
|
J. Yoshida. Euro bank notes to embed RFID chips by 2005. EE Times, 19 December 2001. Available at http://www.eetimes.com/story/OEG20011219S0016.
|
CITED BY 38
|
|
Jehan Wickramasuriya , Mahesh Datt , Sharad Mehrotra , Nalini Venkatasubramanian, Privacy protecting data collection in media spaces, Proceedings of the 12th annual ACM international conference on Multimedia, October 10-16, 2004, New York, NY, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Michael A. Bender , Martin Farach-Colton , Simai He , Bradley C. Kuszmaul , Charles E. Leiserson, Adversarial contention resolution for simple channels, Proceedings of the seventeenth annual ACM symposium on Parallelism in algorithms and architectures, July 18-20, 2005, Las Vegas, Nevada, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Melanie R. Rieback , Georgi N. Gaydadjiev , Bruno Crispo , Rutger F. H. Hofman , Andrew S. Tanenbaum, A platform for RFID security and privacy administration, Proceedings of the 20th conference on Large Installation System Administration Conference, p.8-8, December 03-08, 2006, Washington, DC
|
|
|
|
|
|
Sudarshan S. Chawathe , Venkat Krishnamurthy , Sridhar Ramachandran , Sanjay Sarma, Managing RFID data, Proceedings of the Thirtieth international conference on Very large data bases, p.1189-1195, August 31-September 03, 2004, Toronto, Canada
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Swapna Dontharaju , Shenchih Tung , James T. Cain , Leonid Mats , Marlin H. Mickle , Alex K. Jones, A design automation and power estimation flow for RFID systems, ACM Transactions on Design Automation of Electronic Systems (TODAES), v.14 n.1, p.1-31, January 2009
|
|
|
|
|
|
|
|
|
|
|
|
Daniel V. Bailey , Dan Boneh , Eu-Jin Goh , Ari Juels, Covert channels in privacy-preserving identification systems, Proceedings of the 14th ACM conference on Computer and communications security, October 28-31, 2007, Alexandria, Virginia, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Alexei Czeskis , Karl Koscher , Joshua R. Smith , Tadayoshi Kohno, RFIDs and secret handshakes: defending against ghost-and-leech attacks and unauthorized reads with context-aware communications, Proceedings of the 15th ACM conference on Computer and communications security, October 27-31, 2008, Alexandria, Virginia, USA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|