|
Newsletters
|
|
|
|
|
Holding Court...
Should concerns about privacy be allowed to impede RFID's
progress?
PRIVACY NOT A PROBLEM -
This reader claims there is no substantial additional privacy threat from using RFIDs and that, even if there was, the technology is right here, right now in the form of a PKI based solution. Previously I questioned whether such technology could work in the power and cash constrained environment of RFIDs. Apparently the answer is yes thanks to a new algorithm patented by NTRU Cryptosystems (http://www.ntru.com). They claim it's so small it fits anywhere. Not often you hear that!
Innuendoes aside, such technology could enable the implementation of the kind of registration authority our previous contributor to this debate proposes, if, like my humour, it was cheap.
Further evidence is required: Is PKI really affordable for low end RFID applications? And would RFID manufacturers use a solution based on a new algorithm even if they did care about their end users' right to privacy?
Got a view ? Then join the debate.
Comments from Jeremy Wyant
Location: Burlington, MA, USA
RFID based applications should be allowed to flourish because they offer so much potential for improved value added services. At the same time, applications that require the collection of sensitive information should be scrutinized for appropriate safeguards.
RFIDs can be looked on as simply an interface for things that already exist. There is no substantial additional privacy threat from using RFIDs, for example, as baggage tags -- bags are already tagged and tracked through the system. In areas where RFIDs are replacing mag-stripe or contact-based credit or debit card solutions, there is no effect on the privacy of the user. That said, if additional user information is now collected as part of RFID based solutions there may be privacy issues depending on how this data is used.
Fortunately, new technology that enables the development of secure RFID solutions can now be used to protect privacy. Public key based RFID solutions enable strong authentication and data confidentiality which can provide the basis for effective privacy services. An RFID service provider with a strong privacy policy for data collection and dissemination now has the tools to enforce this policy. The end user can now be assured that they are transacting with a provider that respects their privacy.
Come on; don’t be shy, if you have the technology, or even just an opinion, let us know by March 4, 2002, when our part-time judge, part-time jester Nicki Hayes summarizes the debate and puts the issue to the vote. Send comments to HoldingCourt@wirelessdevnet.com
Holding Court Home
|
|
