Search the archive: |
| | |
Many applications are now using radio frequency chip technology to automatically identify objects or people. But while a variety of applications use radio waves to communicate information, the RF chip technology used for each is quite different, addressing unique storage, range and security requirements, according to according to Tony Revis of Extech Data Systems.
As a general definition, RFID tag technology is used in applications that identify or track objects and contactless smart card technology, for example, is used in applications that identify people or store financial or personal information.
Short range applications
There are a growing number of applications where a form of very short range communications is needed. One technology that can meet this need is called Near Field Communications or NFC. While it does not have the hype of Bluetooth, Wi-Fi, WiMax, Zigbee, RFID or others, (NFC) appears to be set to become a major presence in the wireless communications arena.
The concept of NFC technology has evolved from a combination of contact-less identification and interconnection technologies including RFID and it allows connectivity to be achieved very easily over distances of a few centimetres. Simply by bringing two electronic devices close together they are able to communicate and this greatly simplifies the issues of identification and security, making it far easier to exchange information.
Application requirements
Applications most often have differing requirements in their use of RF technology, with RFID tag and contactless smart card technologies providing very different capabilities.
RFID is emerging as a complementary technology to help overcome some of the drawbacks associated with bar code technology. Barcodes have one significant downfall- they require line-of-sight technology. That means the scanner has to see the barcode to read it, which usually means items have to be manually oriented toward the scanner for it to be read. Conversely, RFID does not require line-of-sight and can be read as long as the item is within range of the reader.
RFID tags are simple, low-cost and disposable and are being used to identify animals, track goods logistically and replace printed bar codes at retailers. RFID tags include a chip that typically stores a static number (an ID) and an antenna that enables the chip to transmit the stored number to a reader via electromagnetic waves. When the tag comes within range of the appropriate RF reader, the tag is powered by the reader's RF field and transmits its ID to the reader.
RFID middleware provides the interface for communication between the interrogator and existing company databases and information management systems.
Security concerns
One of the biggest objections to RFID is the lack of security. There is little to no security on the RFID tag or during communication with the reader. Any reader using the appropriate RF signal can get the RFID tag to communicate its contents.
Typical RFID tags can be easily read from distances of several inches (centimetres) to several yards (meters) to allow easy tracking of goods. RFID tags have common characteristics, including: low cost, high volume manufacturing to minimize investment required in implementation and minimal security, with tags able to be read by any compatible reader. In addition, disposable or one-time use, minimal data storage comparable to bar code, usually a fixed format written once when the tag is manufactured and finally, read range optimised to increase speed and utility.
Not 'spy chips' as such
There is a still a suspicious view of RFID held by many in the industry - the thinking that RFID technology is a 'spychip' technology. The term 'spychip' is self- explanatory and the issue of lack of privacy rears its head. However, there are security measures being put in place to tackle the issue of privacy. Both EPCglobal and AIM Global, the trade association representing RFID manufacturers, have issued policy statements on RFID and privacy.
AIM's policy states: "AIM Global believes that policies and procedures should be put into place to ensure consumer rights, for example, the right to know whether products contain RFID tags, the right to have RFID tags removed or deactivated when they purchase products, the right to opt out of RFID- enabled services, the right to access an RFID's tag's stored data and finally the right to know when, where and why the tags are being read."
The benefits of RFID
There are many areas that benefit from the use of RFID. The technology can be used in Document Tracking Applications as a way to improve the management of important document files in industries like insurance and legal where the loss of such files can cause severe problems. RFID improves the tracking of documents so that files can be more quickly located and legal document workflow more easily tracked.
For sports events, concerts, and other leisure activities, RFID systems streamline ticket issue and validation. They also serve to minimise losses from ticket fraud. Tickets can be created on demand with RFID-enabled bar code printers; RFID card transponders can be issued to individual customers and enabled for specific time periods; and tickets can be read remotely to increase throughput at entrances and gates.
A hands-free access system for ski lifts based on RFID is used at many ski resorts in Europe. This allows for improved customer service, more efficient operations, increased sales and higher throughput of customers. Remote-operated gates detect a valid ski pass, embedded with a Tag-it read/write transponder, and open automatically. The credit-card sized ski pass fits into a jacket pocket and never has to be removed, giving skiers the freedom to enjoy hassle free skiing.
The military
The US military is currently one of the largest users and biggest markets for RFID systems although the majority of their systems require/use expensive active RFID tags, some with sensing capabilities.
The airport and airline industry are piloting and using RFID for a multitude of applications. Boeing is using RFID to track and manage serviceable parts on their aircrafts, whilst others such as Hong Kong International Airport are using an automated in-flight catering system for the routing of in-flight meals and the management of returnable containers. The application with the most potential within the industry is for baggage tagging. The airlines are reported to handle approximately 3 billion bags each year and due to limitations of barcode technology it is estimated that about 2% of bags get lost each year, representing 60 million missing bags. Each missing bag cost the airlines as much as $200 to replace, costing the industry around US$12 billion per year plus the additional problem of dissatisfied customers. The implementation of RFID is changing this dramatically.
Manufacturing role
RFID is a mature technology within the automotive industry and has established itself as an integral part of flexible manufacturing systems for those at the forefront of technological development, with greater penetration within vehicle security systems (immobilisers) being adopted. The industry is investigating additional usages of the technology such as supply chain management similar to other industries.
The logistics industry consists of warehousing and postal services, road haulage, fleet management and more. Worldwide the independent logistic industry is a late adopter of RFID although this is currently being addressed. Postal services are paying an active interest in RFID particularly for item management (auto-routing etc.), as are logistics service providers.
RF is a flexible technology and has potential for applications across all industry sectors. It is moving beyond traditional application niches such as baggage handling, rental item tagging, point of sales, Real Time Location Systems (RTLS) and Supply Chain Management.
There is no doubt that RF is a hugely significant technology in most industries, with the projected market value for global RFID systems sales of $3.1 billion by 2008, according to ABI Research. Meanwhile, IDTechEx predicts the global market to be worth approximately US$10 billion by 2013.
RFID in e-commerce
RFID is now being considered as an integral link in e-commerce environments. The technology enhances and complements Electronic Data Interchanges (EDIs) to facilitate quick response and the generation of exception reports. This should allow real time information to be transmitted to partners within the supply chain supporting the decision-making process.
Ultimately RFID could provide immediacy of data right down to individual item level identification. This can help bridge the gap between the customer, the order and order fulfilment process to the satisfaction of the customer. This means essentially that it can enable the enhanced responsiveness expected within an E-Business environment.
RF communications
The area of using RF for communication, including IRDA, Bluetooth and WiFi is expanding very rapidly too. The first breakthrough in wireless communication for personal area networks was the use of Infrared communications and the establishment of a universal standard, IrDA. IrDA is used for simple short-range (up to 1 meter) point-to-point transmissions; use is still especially strong in Japan but Bluetooth has really taken over in 2007 in Europe and the US, especially as many handheld computers no longer have IR ports installed.
Bluetooth solutions are still relatively more expensive than IrDA, but there is an industry promise of a low cost of ownership, ease of use and a fully interoperable system. Wireless Personal Area Networks, connecting hand-held computers with a range of peripheral equipment with either IrDA or Bluetooth will dominate in mobile computing applications. Connectivity to Wireless LANs and WANS will mainly be handled by radios in the computer system. The ability to seamlessly switch from a WLAN running 802.11b to peer-to-peer WPAN using Bluetooth will be a defining requirement for the future.
Wi-Fi security issues
Security in the WiFi arena is always an issue. The IEEE and IETF specify 802.1X and EAP as the standard for secure wireless networking, and Protected EAP (PEAP) is standards based. PEAP (Protected EAP) is a form of EAP developed by RSA, Microsoft, and Cisco. PEAP uses server-side PKI to build an encrypted EAP-TLS tunnel between the client and server prior to the client transmitting its authentication credentials (such as; username, password and certificates). PEAP is used to overcome some of the scalability problems associated with TLS.
Cisco's LEAP is an older EAP that uses TKIP and dynamic WEP keys rather than PKI and TLS for authentication confidentiality. PEAP has largely replaced LEAP due to its advantages- providing mutual authentication and using a server certificate for server authentication by the client. Users also have the convenience of entering password-based credentials. In the first stage, a secure TLS channel is created between the client computer and the authenticator/RADIUS server. In stage two, after that secure tunnel has been created, authentication occurs. This provides strong security during the authentication process and protects against a variety of possible attacks.
RF in transaction processing
Another very significant area for RF technology is in Transactions. Identification for payment and contactless smart cards will be extremely important tools in the future.
Despite having a reputation for being a complex technology, smart cards have already delivered huge benefits across a wide range of diverse applications. The deployment of smart cards has proved their worth in secure access, transport, financial services and several areas of government among others.
However, vendors would like to find a way of getting everyone to adopt them immediately to recoup their development costs and get return on investment. There are certain issues. The creation of a smart card to do one thing is comparatively cheap; getting it to do two or more things is incrementally more expensive.
Smart card prices continue to fall and competitive pressure to deliver greater value and functionality using one token increase, especially in the financial services sector. Most often Smart cards have 'single function' thinking behind them. As Henry Ford once said, "They can have any colour they want as long as it's black".
Contactless smart cards
The event of 'contactless' smart card technology is used in applications that need to protect personal information or deliver secure transactions. Contact smart card technology provides similar capabilities but does not have the RF interface that allows contactless smart cards to be conveniently read at a short distance from the reading mechanism.
There are an increasing number of contactless smart card technology implementations that capitalise on its ability to enable fast, convenient transactions and its availability in form factors other than plastic cards - for example the inside of a watch, key fob or document. Current and emerging applications using contactless smart card technology include transit fare payment cards, government and corporate identification cards, documents such as electronic passports and visas, and contactless financial payment cards.
The contactless device includes a smart card secure microcontroller, or equivalent intelligence, and internal memory and has the unique ability to securely manage, store and provide access to data on the card, perform complex functions (for example, encryption or other security functions) and interact intelligently via RF with a contactless reader.
Applications that require the highest degree of information and communications security (for example, payment applications, government IDs, electronic passports) use contactless smart card technology based on an international standard that limits the ability to read the contactless device to approximately 4 inches (10 centimetres). Applications that need longer reading distances can use other forms of contactless technologies that can be read at longer distances.
Smart card security features
Applications using contactless smart cards support many security features that ensure the integrity, confidentiality and privacy of information stored or transmitted, including the following:
- Mutual authentication
For applications requiring secure card access, the contactless smart card-based device can verify that the reader is authentic and can prove its own authenticity to the reader before starting a secure transaction.
- Strong information security
For applications requiring complete data protection, information stored on cards or documents using contactless smart card technology can be encrypted and communication between the contactless smart card-based device and the reader can be encrypted to prevent eavesdropping. Additional security technologies may also be used to ensure information integrity.
- Strong contactless device security
Like contact smart cards, contactless smart card technology is extremely difficult to duplicate or forge and has built-in tamper-resistance. Smart card chips include a variety of hardware and software capabilities that detect and react to tampering attempts and help counter possible attacks.
- Authenticated and authorised information access
The contactless smart card's ability to process information and react to its environment allows it to uniquely provide authenticated information access and protect the privacy of personal information. The contactless smart card can verify the authority of the information requestor and then allow access only to the information required. Access to stored information can also be further protected by a personal identification number (PIN) or biometric to protect privacy and counter unauthorized access.
- Strong support for information privacy
The use of smart card technology strengthens the ability of a system to protect individual privacy. Unlike other technologies, smart card-based devices can implement a personal firewall for an individual, releasing only the information required and only when it is required. The ability to support authenticated and authorised information access and the strong contactless device and data security make contactless smart cards excellent guardians of personal information and individual privacy.
Conclusions
Contactless smart card technology is an excellent privacy-enabling solution for applications that need to protect personal information and ensure that communication with the contactless device is secure. The on-chip intelligence enables systems that use contactless smart card technology to comply with strong privacy and security guidelines, as well as deliver the speed and convenience of contactless communication.
This combination of features is leading governments, corporations, financial service providers and transit agencies to choose contactless smart card technology for new secure identification and payment applications.
To conclude, RF technology - despite certain issues - with its fast registration, wireless data collection, and communication abilities, offers far-reaching benefits to many industries.
Source: Extech Data Systems
|
