RFID Passports... Close, But Not Quite

from the one-more-step-please dept

Last week, we wrote about the new plans by the State Department to put RFID chips in passports, noting that the precautions they took this time around looked much better, and hoped that they would do an adequate job protecting peoples' information. Bruce Schneier has chimed in to say that, indeed, the two big steps they took (shielding and access control) are absolutely steps in the right direction that others should follow, but there's still one more problem they need to fix. The chips broadcast unique IDs to help readers isolate the signal of a single chip, and it's not clear how these unique IDs are implemented. Schneier is afraid that the implementation can lead to vulnerabilities. But, more importantly, seeing that this point was missed, it points out how hard it really is to make things like this truly secure. There's always "something else" that opens you up to security holes, especially when the details of how something is implemented aren't made clear. The worst case scenario is finding out about yet another security vulnerability, well after these passports are out there.


Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    Anonymous Coward, Nov 3rd, 2005 @ 12:56pm

    No Subject Given

    unique IDs -- how?

    Simple -- random number generator + database of used numbers = unique ID

    Embed it in the paper of a passport and ship to the printing office.

    When assigned, the code is associated with a person -- just as every US passport issued has a unique passport number on it today.

    Don't everybody freak

     

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Follow Techdirt
A word from our sponsors...
Essential Reading
Techdirt Reading List
Techdirt Insider Chat
A word from our sponsors...
Recent Stories
A word from our sponsors...

Close

Email This