Published: August 05, 2007 12:00 am

Keeping Track: Retail tagging adds efficiency - and concerns
By Bill Kirk , Business Editor
Eagle-Tribune


They're everywhere.

Car keys. Passports. Exxon/Mobil Speedpasses. Highway EZ-Passes.

Gillette put them on some of the razors sold at Wal-Mart. Cattle ranchers staple them to the ears of their cows. Hospitals use them to monitor the movement of patients, nurses, doctors and equipment.

Hundreds, if not thousands, of people even have them implanted in their bodies.

Radio Frequency Identification tags, better known as RFIDs, may be nearly invisible to the typical consumer, but they are in more places than most people could possibly imagine.

And their capabilities are beyond the imagination of many people.

RFIDs are microchips with miniature antennae that broadcast information about you or the product you are using to electronic readers linked to computer databases that hold even more information about you or that product.

For businesses, the chips hold the promise of great efficiencies. For instance, the technology can monitor inventory, quickly feeding information into a computer database that alerts store managers when they are running low on Pampers, razors or just about anything else.

But privacy advocates are concerned that unscrupulous companies could track items from store shelves to kitchen cabinets, keeping a dossier on consumers that includes even the most private details of their lives through their buying habits.

More recently, chips have been implanted in humans, making it possible to track, for instance, Alzheimer's patients. And they are now in credit cards, passports and some driver's licenses, leaving open the possibility that criminals could take advantage of potential security vulnerabilities and steal personal information.

Different problems, different solutions

Despite the debate, RFID technology, in one form or another, is here to stay. And, experts say, it will only become more prevalent as the cost of buying and installing RFID tags, readers and associated software continues to drop.

Anticipating this, Merrimack College in North Andover recently opened a lab to train students how to use the technology.

"There are not enough people out there with knowledge of this technology," said Michael Ohanian, an RFID consultant who helps coordinate the new curriculum.

Ohanian said companies donated equipment to the college lab, aiming for "first dibs" on graduates.



"If I had 50 students trained in RFID, I could get them all jobs," he said.

What Ohanian and others hope the students will learn is not only how to use the technology, but how to come up with innovative ways to apply it.

At Merrimack College last year, electrical engineering students enrolled in the RFID course undertook special projects. Peter DePaola, 20, of Connecticut, a senior this fall, worked with another student on how the technology could enhance efficiency in the college library.

Tags would be glued to the inside of a book. When a person checks it out using a library card, the information about the book would be automatically logged into the computer using an RFID tag-reader.

If the book were brought back after hours, tag readers in the book-return slot could automatically register in the librarian's computer that the book was sitting in the return bin. Librarians using portable RFID readers that resemble small paddles could easily find the book and put it back on the shelf.

DePaola's study showed that if the thousands of books in the collection were chipped, and the school purchased the reading devices and software to manage the system, the investment would pay for itself inside of five years.

"I never thought about how much the library spends on late books, mis-shelving and taking time to find books," said DePaola, who previously worked in the library. "It's amazing how much RFID would save. There would be better security for books, plus you know where books are and can find them much faster."

The library and the school are considering whether to implement RFID in its books.

"It does cost a lot of money, but it would save a lot of money, too," DePaola said.

While the technology would be new at Merrimack, it has been around for many years for other uses. People have put chips in their pets for at least 10 years. And ranchers have been tagging the ears of cows for even longer.

Joe Melo, product manager for Psion Teklogix Inc., one of the companies that donated some hand-held RFID readers to Merrimack College, said his company created a system to track cattle in Canada. The cows are tagged at birth and information about them is periodically updated in a database by farmers.

When the animal is slaughtered, the tags could eventually be duplicated in the packaging so that every piece of meat could be traced back to a particular animal, something known in the industry as "farm to fork" tracking.



If there were ever a health problem, he said, the history of the animal can almost instantly be accessed in a computer database.

"What you're really worried about are fatal health issues," he said. "If disease does get transmitted, we want to be able to isolate those incidents. You can track its history to see when and where it was infected with disease."

Tracking people

While many understand the benefits of tracking products or produce, the idea of using RFID tags to monitor people becomes fraught with privacy concerns.

Since last August, every U.S. passport given out by the government contains an RFID chip hidden in the back cover. The chips contain exactly the same information found on the information page of the passport, such as name, date of birth and gender, as well as a digital image of the passport holder.

Steve Royster, spokesman for consular affairs for the U.S. State Department, explained that when a passport application comes in with a photo, the photo is scanned in and a digital copy made and embedded on the RFID chip, along with the other information. The chip is attached to an antenna and the tag embedded into the back cover of the passport, which is why covers on new passports are a little thicker than the old passports.

When going through Customs, an agent opens the booklet and scans it with an RFID reader. If the information on the computer screen matches the cover page, the passport is stamped and the person is allowed to pass through. If there's no match, there's a problem.

Eight to nine million RFID-enabled passports have been distributed to date, including 2 million last month alone, Royster said.

When it was originally proposed, the so-called "e-passport" met with stiff resistance from privacy advocates.

One criticism was that people could steal information from the tag by "skimming," using an RFID reader to gather information off the chip as a person walks by. As a result, the government inserted metallic cloth into the front and back covers of passports, Royster said. That's why Customs agents need to open the booklet to read the information.

Katherine Albrecht, a Nashua, N.H., author and privacy activist, says that while the protective sheath can prevent skimming, a security hole exists: She said that while the Customs agent has the passport open, the exchange can actually be viewed by someone else nearby with an RFID reader.



But Royster said the information is encrypted and cannot be read by a third party.

"We did a lot of work in the development of this and incorporated the public's concerns about privacy and use of the chip," he said. "And we think we have come up with gold standard of international travel documents."

Passports, however, aren't the only documents containing RFID chips with personal information. Albrecht said some 20 million credit cards have been distributed recently, embedded with personal information.

Meanwhile, Washington state is conducting a pilot program to put RFID tags on driver's licenses. And the federal government continues mulling over how it's going to implement the Real ID Act, a federal law signed by President Bush in 2005 with enforcement slated to start in 2009.

Among the many proposals contained in the act is a requirement that state driver's licenses become a sort of de facto national ID card, complete with an RFID card with all sorts of personal information.

The law "gave control over all 50 states' driver's licenses under one, central umbrella of Homeland Security," said Albrecht.

New Hampshire, as well as 14 other states, have rejected the Real ID Act and will be issuing its own driver's licenses without RFID cards.

"The security issues are overwhelming," she said. "Why anyone would want to use this technology with these kinds of security flaws doesn't make sense, unless they just want to spy on you."

Human chipping

More recently Albrecht said she has been waging a war against what she calls "human implantation."

A company called VeriChip Corp., of Delray Beach, Fla., has been creating chips for animals for more than a decade. Recently, the company began pushing the idea of implanting the chips in people with diseases like Alzheimer's.

In design, the tag is simple: A medical-grade glass capsule holds a silicon computer chip, a copper antenna and a "capacitor" that transmits data stored on the chip when prompted by an electromagnetic reader. Implantations are quick, relatively simple procedures. After a local anesthetic is administered, a large-gauge, hypodermic needle injects the chip under the skin on the back of the arm, midway between the elbow and the shoulder.



For someone suffering from Alzheimer's or any other disease that may lead the person to wander away from a medical facility, the chips could be useful: As soon as a patient gets to a door equipped with an RFID reader, the door would lock and staff would be alerted.

But privacy activists have a number of problems with the practice.

"We're really on the verge of creating a surveillance society in America, where every movement, every action - some would even claim, our very thoughts - will be tracked, monitored, recorded and correlated," Barry Steinhardt, director of the Technology and Liberty Program at the American Civil Liberties Union in Washington, D.C., told the Associated Press.

Meanwhile, Christian activists say the implants represent the fulfillment of a biblical prophecy describing an age of evil in which humans are forced to take the "Mark of the Beast" on their bodies, to buy or sell anything.

Albrecht, who has a doctorate from Harvard University and who co-wrote the book "Spychips: How Major Corporations and Government Plan to Track Your Every Move with RFID," said she and other activists are calling for legislation to regulate who could be chipped.

A bill she hopes to have introduced in the Massachusetts Legislature would make it illegal to force someone to be implanted with a chip and would also make it illegal to put a chip in someone under the age of 18 or who was not "of sound mind."

Albrecht hopes to have similar legislation introduced in New Hampshire.

She said that if people continue to allow RFID technology to creep into their lives, eventually the government and big business will have created a "big brother infrastructure of ubiquitous sensor networks.

"It's not like Nazi Germany where you can see the guy with jackboots. Here, unbeknownst to you, a reader is picking up a signal," she said. "It's in the wall or in the floor, having been quietly slipped into the environment. It's tracking you and you'll never know it's there."


http://www.eagletribune.com/punews/loca ... 911?page=0