Privacy and Security Implications of RFID

March 12, 2008: 12:00pm - 1:00pm
Location: 290 Hearst Memorial Mining Building, the Maria & Dado Banatao Conference Room, UC Berkeley

Jennifer King [Clinical Research Assistant, Samuelson Law, Technology, and Public Policy Clinic, UC Berkeley]

Part of the CITRIS Research Exchange at UC Berkeley. The complete schedule for the fall semester is online at RE-Spring2008.

Abstract:

While extant for decades in the industrial sector, RFID technology is increasingly being incorporated into everyday products and objects. This growing ubiquity brings with it security and privacy concerns for end users due to implementations that fail to adequately protect personal or identifiable data stored on RF transponders, as well as RFID’s inherently stealthy broadcasting capabilities. In my talk, I will present the initial results of exploratory research where we attempt to elicit user mental models of RFID technology by interviewing users of three existing implementations of consumer-focused RFID technology: RF- enabled credit cards, transit passes, and the U.S. e-Passport. We explore user comprehension of RFID technology generally and these implementations specifically to gain an understanding of how end users conceptualize RFID and its risks.