Topics:  

  • Email this page E-mail this page
  • Print this page Print this page
  • Bookmark and Share
  • icon

RFID Hacking


Posted by , Jul 30, 2004 03:52 PM

Online media sites this week published a rash of articles about Lukas Grunwald, a senior consultant with DN-Systems Enterprise Solutions GmbH, a global consulting firm that works mainly in security and Internet e-Commerce applications for enterprises. Grunwald spoke at this year's Black Hat Security Briefings, and announced he co-developed RFDump, a program that will allow users to read and modify data with an RFID tag using a hex or text editor.

RFID hacking, are you surprised?


It was really just a matter of time before this type of news hit the streets.

Hackers find there way into “secure” Internet Web sites. Weekly, if not daily, we hear about some worm finding its way into code, e-mails, or enterprise systems. We hear about universities and corporations reporting that their “secure” databases have been “compromised.” Even multibillion dollar corporations and well-funded universities, such as computer distributor Ingram Micro, or the University of California in San Diego are not immune.

Counterfeiters manage to duplicate tiny semiconductors and capacitors used to manufacture cellular phones and other electronics. Why should RFID hacking be different. Can you say e-n-c-r-y-p-t-i-o-n? You’ll be hearing much more about encryption for RFID chips as the technology matures.

Technology advancements are inevitable. RFID technology for backroom supply chains or retail store shelves is just the beginning. In fact, RFID will become common place in supply chains for retail, medical, and pharmaceutical. You will begin to see RFID tags in many more forms than the small silicon chips or printed bar codes seen today. They will become liquid or microscopic and be on public sidewalks, and more commonly in schools, homes, and automobiles.

The potential benefits and savings that corporations can gain from RFID technology go far beyond supply chain integration and traceability. RFID hacking is a small hurtle to overcome when the Vatican Library in Rome, Italy, can easily inventory its millions of books each month in half a day instead of a full day.

Earlier this month Texas Instruments reported its 13.56 MHz RFID tags were being deployed by the Vatican Library to identify and manage its two-million book collection. When the project is complete, the Vatican estimates inventory will take half a day instead of the full day it took prior to implementing the tagging system, according to TI.

Those who find innovative ways to use RFID technology will outweigh those who abuse. Today, Philips Semiconductor, TAGSYS, and Texas Instruments released a joint white paper called “Item Level Visibility in the Pharmaceutical Supply Chain: A Comparison of HF and UHF RFID Technologies.” The white paper estimates up to 7% of all the drugs in the pharmaceutical supply chain could be counterfeit. Retail and pharmaceutical markets absorb about $2 billion in product returns each year caused by overstock or outdated product. RFID would provide an easier avenue to implement reverse logistics, not only for the pharmaceutical industry, but for electronics and apparel. More on the pharmaceutical white paper is found at www.semiconductors.philips.com, www.tagsys.net, or www.ti-rfid.com .

And if there is concern about technology being used to follow or track you, leave your cellular phone on the table, your car with the global positioning system in the garage, and avoid major cities, because they all have enough cameras placed on the outside of buildings or traffic signals to follow your movements down the street.

As for RFID hackers, don’t worry corporate America will convince RFID vendors to find a method to protect their assets.

« When You Buy an iPod, who controls what you can play on it? | Main | Banfield Halts RFID Tagging »



Sign Up Now
For InformationWeek News Alerts




This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.