Clipped Tags: IBM's solution to RFID security woes

Remember how we've been harping forever about how awful RFID is, security-wise? Specifically, how everything from your credit card data to your passport info can be hacked pretty easily? Well, IBM's new solution to this problem is not to change the way RFID works, but rather, to just snip off part of the antenna. Calling the new technology "clipped tag," Big Blue claims that this would reduce the range of RFID tags from 30 feet to mere inches, meaning a potential malfeasant would have to get awfully close to their target to steal data. Fortunately for us, clipped tags are set to ship this week, according to InfoWorld. The magazine also interviewed Dr. Ann Cavoukian, the Information and Privacy Commissioner of Ontario, Canada, who said that "the clipped tag concept solves a problem she has wrestled with for years: how to protect a consumer's privacy while still offering them the benefits of RFID technology." And as we all know, as Ontario goes, so goes the rest of the world.

[Via The Inquirer]

[tiuk @ Nov 10th 2006 8:21AM]

Whew, thanks for looking out! (Engadget, can we get a "rolleyes" emoticon for comments?)

Ever hear of pickpockets? Yeah, except now they don't even have to get physically into your pocket. Although, this combined with a RFID blocking wallet might help.. I still think we'd be better off not using RFID at all though.

[Chris @ Nov 10th 2006 8:55AM]

Hey I'm familiar with Clipped Tag. My AmEx came with an RFID chip smack dag in the middle of the card surrounded by a big'ol antenna (clear card). I did my OWN Clipped Tag on that sucker and just cut the damn RFID chip OUT of the card entirely. GRRR... Ya so now I have a credit card with a hole in it, makes an interesting conversation piece.

[Peter Garner @ Nov 10th 2006 9:45AM]

"And as we all know, as Ontario goes, so goes the rest of the world."

Well we Canadians have known that for a long time. Nice to see the rest of the world is finally cottoning on.

What? Don't tell me you didn't know Toronto is the navel of the known universe?

:)

[Jose Correa @ Nov 10th 2006 10:54AM]

When will people understand... RFID != Contactless smartcards...

RFID can be read at 30 feet is used to transmit a simple serial number... used in walmart and to track inventory (unfortunately the gov apparently chose RFID for Western hemisphere Border crossing cards)

Contactless smartcards can only be read at close proximity (a couple inches) and include a microprocessor and up to 128 bit keys to encrypt/decrypt any communication between the chip and the authorized reader... used in contactless credit cards (Paypass, Payexpress) and Passports which already include special covers which makes them physically impossible to be read when closed.. (unfortunately mastercard issued some "smart" cards without the encryption part but that was Mastercard mistake not a technology shortcoming)

Also congratulations to the guy who cut out the chip on his Amex card, you do realize that instead of using your card with encrypted readers you now have to hand in your card or swipe your completely unencrypted information from the magstripe on a reader that can be easily hacked, specially dangerous if you ever travel and/or use an ATM.

[saltcafe @ Nov 10th 2006 11:11AM]

Now if this isn't an example of security through obscurity then I don't know what is ... just wait till someone builds a more sensitive receiver and this isn't worth the toilet paper that it was written on.

[the other steve jobs @ Nov 10th 2006 11:18AM]

solution to RFIDs being unintentionally read....



get ready for it...


ready???



a on/off button. Why do none of the RFID devices we've seen come with buttons that allow a read only when pressed (i'm including a pressure button on the credit cards, or a physical button on the top of Mobil Speedpass keyfobs.)

I only mention it here because its already been patented. Unfortunately... because i seem to be in the extreme minitory that doesn't understand why there are all these privacy concerns with RFID units in consumer devices (CCs, pasports, etc)

[Pinkerton @ Nov 10th 2006 12:35PM]

I'll be getting my first passport soon (mainly for travel to Canada). It seems a whole cottage industry has sprung up with wallets that are little Faraday cages, supposedly blocking RFID and other types of signals.

http://www.difrwear.com/products.shtml

@Peter. LOL, if Toronto is the belly button, Detroit must be the... well, use your imagination.

[Miguel @ Nov 10th 2006 1:20PM]

http://www.komotv.com/news/tech/4594356.html?video=YHI&t=a

Woo, because I'm scared because of the range of these things. Right.

[Dan @ Nov 12th 2006 10:04AM]

"that this would reduce the range of RFID tags from 30 feet to mere inches, meaning a potential malfeasant would have to get awfully close to their target to steal data" - classic example are crowded subways :) Anyone see the way people are packed into the damn things.....

[Jeyfrey @ Nov 27th 2006 11:33AM]

security is a big issue in RFID technology
http://www.gaorfid.com