RFID and privacy - Some industry perspectives (ICC, EICTA)

Transcription

1 RFID and privacy - Some industry perspectives (ICC, EICTA) Jeroen Terstegge ICC, EICTA OECD, Paris

2 Identification Technologies: Connecting PEOPLE to Information, Entertainment and Services. Identify and track GOODS. ICC, EICTA Jeroen Terstegge OECD, Paris

3 RFID and Identity RFID has 3 identity types ID linked to Person: direct identification: personal data on chip (biometrics) personal data in database (employee badge) ID linked to Service: In combination with person ID (banking, season cards) Anonymous (one time public transportation paper tickets) ID linked to Object / Product: product information in database (retail products, library books) direct identification (car keys) Combining Object/Product ID with Individual is additional step, covered by existing privacy principles 3

4 Ubiquitous Computing and Electronic Footprints Several technologies involved in leaving footprints Offline and online footprints But ubiquitous computing will increase number of footprints Concerns for the Individual Is my footprint accurate? Does it reflect me? personalization of services, convenience discrimination, social sorting Where are my footprints? And why are they there? OECD Privacy Principles: transparency, purpose Do I have some control over my footprints? Relationship (citizen, employee, consumer), degree of freedom/privacy Notice and choice, access to data Some trade-off between Accuracy and Control Key question: Can we enhance accuracy while maintaining control? 4

5 Privacy-enhancing solutions for RFID (PETs) System-solutions Encryption Tag/Reader Authentication Range reduction Antenna size/design? Consumer-in-Control Solutions Kill-switch Removable tags Blocker tags Shielding User interface (NFC-device).? 4

6 Determining Privacy Risk { Identification (people): low, medium, high { Linkability (information): low, medium, high Observerability: low, medium, high PRIVACY RISK = low, medium, high When Privacy Risk is: High: Medium: Low: use smart cards + PETs use smart cards, smart tag + PETs use smart tag (PETs optional) 5

7 Ways of protecting privacy Privacy by Design (technological) examples: encryption, kill command, read range main actors: technology providers, standardization bodies influencing factors: cost, usability public policy: R&D-funding, Launching customer Privacy by Design (organizational) examples: anonymization, system design, business model main actors: system integrators, end-users (business) influencing factors: business opportunities, customer trust public policy: privacy principles, guidelines, best-practices Rule-based protection examples: self-regulation, law main actors: government, business, stakeholders influencing factors: administrative burdens (cost), market development public policy: compliance verification ( Trust but Verify ) 6

8 Ways of protecting privacy Privacy by Design (technological) examples: encryption, kill command, read range main actors: technology providers, standardization bodies influencing factors: cost, usability public policy: R&D-funding, Launching customer Privacy by Design (organizational) examples: anonymization, system design, business model main actors: system integrators, end-users (business) influencing factors: business opportunities, customer trust public policy: privacy principles, guidelines, best-practices Rule-based protection examples: self-regulation, law main actors: government, business, stakeholders influencing factors: administrative burdens (cost), market development public policy: compliance verification ( Trust but Verify ) 7

9 Contactless Smart Cards and Privacy Data security Personal data (may be) stored in chip s memory Password protection Mutual authentication chip and reader Advanced encryption (3DES, AES, PKI) Extremely short operating range: < 10 cm Advanced system design and sensor technology to prevent tempering Multi-application smart cards Several applications on a single card Exclusivity Clear separation of applications and data (as if different cards were used) Back office and system design Full application of current privacy and data protection laws 8

10 RFID/EPC tags and privacy ICC Principles of Fair RFID/EPC use RFID-use should be legal, honest, decent No personal data stored in RFID-tag Consumer information and choice Labeling How to remove / disable tags Privacy statement including RFID/EPC use What data is collected via RFID Purposes of collection/use Data disclosures (if any) Data security Individual s right of access to data in RFID-enabled IT-system 9

11 Recommendations Do not legislate RFID-technology, but only its applications and use Address privacy risks of the entire system Current OECD Privacy Principles already apply to system design, applications and data collection and management Use Privacy-Enhancing Technologies only where relevant Stimulate R&D, standardization and use/acceptance of PETs RFID is the enabling technology! 10