Smart Dust & RFID privacy

http://www.nanotech-now.com/images/golem-dust-penny-large.jpg

The Science Daily article Nano-Based RFID Tags Could Replace Bar Codes [1] announces with breathless excitement that we may be on the verge of nano-scale RFIDs. The implications extend far beyond tracking inventory in warehouses, even if the devices perform only passively at the hoped for range of 300m.

These devices would be by design tiny and ubiquitous, likely embedded in products such that they are not only undetectable when the product is in use, but also integrated into the product in such a way that their removal would be impossible without damaging or destroying the object in question.

There are already some grave concerns [2] regarding tradeoffs in efficiency versus privacy and safety in RFID-enabled passports: do you really want anyone who cares to install the proper equipment to be able to identify you as carrying a U.S. passport the moment you walk though their door? There are certainly places today where such identification could be actively dangerous to the passport holder. Passports, at least, are specific enough items that it might not be unreasonable to expect that those carrying them should take measures to protect them from casual snooping, just as one might take care where one carries a wallet or credit card. Use your favorite search engine to see how many hits you get for “passport RFID blocker” – there are already multiple products on the market designed to address this concern.

Imagine instead that nearly everything on or about your person is labeled with an RFID which identifies manufacturer and item number – not at all unreasonable if you are the manufacturer working to track your inventory, but potentially problematic if you are the end consumer. From an arbitrary distance, say, that 300m or less figure quoted in the Science Daily article someone can generate a profile of you without even needing to focus upon you as a specific individual. You might pass through a portal or doorway and be identified as having $3000 worth of clothing and electronics on your person. You might subsequently be selected for a targeted sales pitch or to be followed with intent for unspecified mayhem.

One might sprinkle nano RFIDs on or about one’s premises for simple inventory – sprinkle first then catalog later: the rough collection of these RFID IDs correlates to the printer, and those to the postage meter. If a few fall off, so be it, there are still a few hundred with unique identifiers; more than enough to specify a particular item. This would be wonderful for tracking material through a manufacturing process or simply for keeping track of what is where. It might also be useful for a third party wishing to track you without your knowledge. If the little nano RFIDs are a bit more capable, they enter the realm of smart dust [3] – able to record and transmit data. [4] Again, incredibly useful if you want to monitor conditions in your shipping container or warehouse, but potentially problematic from a privacy standpoint.

Concerns regarding privacy issues and potential for abuse aside, this technology is coming: the world of ubiquitous sensors is not so much “if” but “when and how.” There is just too much upside for manufacturers or any entity that desires to track and inventory . . . anything.

Question: how will we mitigate the new set of risks that will be created as this technology evolves? Disabling all the RFIDs on your gear/clothing will eventually make you as noticeable as disabling none of them . . .

Further reading

Pister: Smart Dust in 2010. He has the timing off (obviously) but many of his projections are being developed actively.

Privacy concerns grow with the use of RFID tags Martínez-Cabrera, A. SF Gate (September 6 2010). Short consumer article outlining some broad concerns regarding RFID use.

References

[1] Nano-Based RFID Tags Could Replace Bar Codes. ScienceDaily. (Mar. 19, 2010) http://www.sciencedaily.com/releases/2010/03/100318113300.htm accessed 9 October 2012.

[2] A Threat Analysis of RFID Passports. Waldo, J. et al Queue. (October 1 2009) http://queue.acm.org/detail.cfm?id=1626175 accessed 9 October 2012

[3] 'Smart dust' aims to monitor everything. Sutter, J.D. CNN (May 03, 2010) http://articles.cnn.com/2010-05-03/tech/smart.dust.sensors_1_smart-dust-sensors-kris-pister?_s=PM:TECH accessed 9 October 2012.

[4] SMART DUST: Autonomous sensing and communication in a cubic millimeter. Website: http://robotics.eecs.berkeley.edu/~pister/SmartDust/

DHL Smart Sensors

Everyone has had the experience of waiting for weeks for a parcel to arrive, and not getting any useful information from the tracking system provided by the courier. We all wish that we could track our packages as they travel from the source to our door steps. The wait is finally over,  DHL has introduced a new service where it allows customers to get real-time information about their package’s location, temperature, humidity, light exposure, pressure, shock and vibration. This is the first service of its kind to have been authorized by the Federal Aviation Administration (FAA) to be used on commercial airlines. The sensors placed in the packages have been specially designed not to interfere with the airplane’s avionics. The device use both GPS and GSM radio to transmit data to DHL’s data centre.  Customers can then access information about their package through an online portal.

Customers can order the sensors to be placed in the packages. This service caters more towards customers that regularly ship urgent and valuable materials. The service has been in demand by pharmaceutical companies that have to ship medicine and antidotes for emergency use.  Hospitals and Organ banks have shown interest in the service to shipping organs.

The Sensors took three years to develop and were manufactured by a third party. During initial trials the sensors were programmed to send status updates every five minutes but that was resulting in the batteries running out too quickly, so the status reports were set to one every hour. This allows the sensors operate two weeks on batteries.

From a supply chain respective this technology gives security and enhanced visibility along the entire supply chain. A client can know in real time where their package is and what condition it is in. 

The link below is a rather humorous video introducing DLS’s Smart Sensor service 

References 

1.http://www.computerworld.com/s/article/9222386/DHL_wireless_locator_device_tracks_its_location_in_a_box_of_cargo

2. http://dsi.dhl-innovation.com/en/products/smartsensor/index