Kill or Control RFID Tags

Filed in archive Privacy and Security on June 14, 2006

A movement is afoot in the European Union to require or encourage retailers and manufacturers to either kill an RFID tag or transfer control of it to the end user, when an item containing the tag is purchased by or received by the consumer.

Stephan Engberg points us to an interesting presentation outlining a framework for RFID consumer privacy and security, as part of the recent EU consultations on RFID. Download the presentation here (in PDF form).

He sent me an email noting:

"... an interesting change in the discussion.

The discussions started out as the usual "consent to kill" back and forth loose-loose discussion. The initial call for solutions was quite strong.
http://www.rfidconsultation.eu/docs/fiche
iros/RFID_WS3_GS_presentation.pdf

But the final panel was very clear - the choice is "Kill or Control". If the post-purchase value is real then apply RFIDs with some sort of Transfer for control to the product owner. If not or the consumer is uneasy with the technology, kill the RFID to remove the threat perspective."

Very interesting.