RFID tags in US Passports

| 4 Comments
Generally, I do not have a problem with RFID tags - the claims that these can be read remotely are laughable to anyone with a basic knowledge of electronics. You need to be within a foot or so and other tags cannot be near (they use the same power frequency and re-transmit their data on the same data frequency -- two RFID chips within range of the transceiver would jam each other) McArtuhur at The Misanthropist links to an article at Schneier on Security which outlines a very good security concern. I will take exception to one point though and mention something else: bq. "...These chips are like smart cards, but they can be read from a distance. A receiving device can "talk" to the chip remotely, without any need for physical contact, and get whatever information is on it. Passport officials envision being able to download the information on the chip simply by bringing it within a few centimeters of an electronic reader. bq. Unfortunately, RFID chips can be read by any reader, not just the ones at passport control. The upshot of this is that travelers carrying around RFID passports are broadcasting their identity. bq. Think about what that means for a minute. It means that passport holders are continuously broadcasting their name, nationality, age, address and whatever else is on the RFID chip. It means that anyone with a reader can learn that information, without the passport holder's knowledge or consent. It means that pickpockets, kidnappers and terrorists can easily--and surreptitiously--pick Americans or nationals of other participating countries out of a crowd. bq. It is a clear threat to both privacy and personal safety, and quite simply, that is why it is bad idea. Proponents of the system claim that the chips can be read only from within a distance of a few centimeters, so there is no potential for abuse. This is a spectacularly na�ve claim. All wireless protocols can work at much longer ranges than specified. In tests, RFID chips have been read by receivers 20 meters away. Improvements in technology are inevitable..." First, a bit about RFID technology. There is no power source in the chip itself. It has what amounts to a simple crystal set tuned to one frequency and it receives this radio frequency (the "RF" in RFID), converts it to electricity and uses that to power the other side of the RFID chip. The "ID" side of the chip uses the small amount of juice to send a weak signal. It is transmitted in radio frequency domain but consists of binary data -- an identification or ID. I could certainly dummy up something very easily and cheaply to get a valid signal from an RFID chip that was 20 meters away -- as long as no other chip was closer and I would have to use a large (meter long) antenna or flood the area with a _lot_ of RF energy. The trope that technology is getting better ignores the fact that the RFID chip _has_ to get enough received power to function and this requires a large antenna (focused on the chip in question) or a huge unidirectional broadcast of RF energy (and only able to receive the data from one RFID chip). The point I take exception to is that very little data is stored on the chip. What is usually the case is that the chip has a unique 'number' stored on it and that number becomes a new identity number. The link to your personal data happens when this one number is entered into the agency's computer database and that number is used to call up your file. More data equals more power and we are dealing with a small and thin source here. The idea that someone 'cruising the airport' and scanning people's passports and 'getting their identity' is bogus unless they already had a link into the immigration computer in which case, they would not need to hack the RFID chip at all, they could do this from the safety of their desktops and not bother lurking in airports with large Yagi antennas and strange boxes attached to car batteries...

4 Comments

And now (26 Nov 2004) I think your argument is at risk. See this NY Times story about the amount of data contained within the RFID. They claim it is the entire passport contents, to include a digital image of the carrier for automated comparison:

http://www.nytimes.com/2004/11/26/politics/26passport.html?hp&ex=1101531600&en=6e6254bd574cba42&ei=5094&partner=homepage

Nice work. Uninformed RFID hysteria is part of what I call "Slashdot politics", where the state is always right except when they pass DMCA.

The RFID chips, being completely non-powered, would seem to be something that you could _prevent_ from responding also. Just guessing, a Gaussian sphere ought to do it - but there has to be smaller and more subtle methods that would disrupt the 'normal' access patterns - and yet allow the device to work normally when necessary.

I have updated my entry to reflect your convincing refutation:

http://www.mcarthurweb.com/archive/1098481263.html

October 2022

Sun Mon Tue Wed Thu Fri Sat
            1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          

Environment and Climate
AccuWeather
Cliff Mass Weather Blog
Climate Depot
Ice Age Now
ICECAP
Jennifer Marohasy
Solar Cycle 24
Space Weather
Watts Up With That?


Science and Medicine
Junk Science
Life in the Fast Lane
Luboš Motl
Medgadget
Next Big Future
PhysOrg.com


Geek Stuff
Ars Technica
Boing Boing
Don Lancaster's Guru's Lair
Evil Mad Scientist Laboratories
FAIL Blog
Hack a Day
Kevin Kelly - Cool Tools
Neatorama
Slashdot: News for nerds
The Register
The Daily WTF


Comics
Achewood
The Argyle Sweater
Chip Bok
Broadside Cartoons
Day by Day
Dilbert
Medium Large
Michael Ramirez
Prickly City
Tundra
User Friendly
Vexarr
What The Duck
Wondermark
xkcd


NO WAI! WTF?¿?¿
Awkward Family Photos
Cake Wrecks
Not Always Right
Sober in a Nightclub
You Drive What?


Business and Economics
The Austrian Economists
Carpe Diem
Coyote Blog


Photography and Art
Digital Photography Review
DIYPhotography
James Gurney
Joe McNally's Blog
PetaPixel
photo.net
Shorpy
Strobist
The Online Photographer


Blogrolling
A Western Heart
AMCGLTD.COM
American Digest
The AnarchAngel
Anti-Idiotarian Rottweiler
Babalu Blog
Belmont Club
Bayou Renaissance Man
Classical Values
Cobb
Cold Fury
David Limbaugh
Defense Technology
Doug Ross @ Journal
Grouchy Old Cripple
Instapundit
iowahawk
Irons in the Fire
James Lileks
Lowering the Bar
Maggie's Farm
Marginal Revolution
Michael J. Totten
Mostly Cajun
Neanderpundit
neo-neocon
Power Line
ProfessorBainbridge.com
Questions and Observations
Rachel Lucas
Roger L. Simon
Samizdata.net
Sense of Events
Sound Politics
The Strata-Sphere
The Smallest Minority
The Volokh Conspiracy
Tim Blair
Velociworld
Weasel Zippers
WILLisms.com
Wizbang


Gone but not Forgotten...
A Coyote at the Dog Show
Bad Eagle
Steven DenBeste
democrats give conservatives indigestion
Allah
BigPictureSmallOffice
Cox and Forkum
The Diplomad
Priorities & Frivolities
Gut Rumbles
Mean Mr. Mustard 2.0
MegaPundit
Masamune
Neptunus Lex
Other Side of Kim
Publicola
Ramblings' Journal
Sgt. Stryker
shining full plate and a good broadsword
A Physicist's Perspective
The Daily Demarche
Wayne's Online Newsletter

About this Entry

This page contains a single entry by DaveH published on October 22, 2004 9:42 PM.

Penguins at the North Pole was the previous entry in this blog.

News item this monday??? is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Monthly Archives

Pages

OpenID accepted here Learn more about OpenID
Powered by Movable Type 5.2.9