You need not be paranoid to fear RFID
The Boston Globe October 10, 2005
By Hiawatha Bray

  It's one of the cutest of those cute IBM Corp. TV commercials, the ones that feature the ever-present help desk. This time, the desk appears smack in the middle of a highway, blocking the path of a big rig.
  ''Why are you blocking the road?" the driver asks. ''Because you're going the wrong way," replies the cheerful Help Desk lady. ''Your cargo told me so." It seems the cartons inside the truck contained IBM technology that alerted the company when the driver made a wrong turn.
  It's clever, all right -- and creepy. Because the technology needn't be applied only to cases of beer. The trackers could be attached to every can of beer in the case, and allow marketers to track the boozing habits of the purchasers. Or if the cargo is clothing, those little trackers could have been stitched inside every last sweater. Then some high-tech busybody could keep those wearing them under surveillance.
  If this sounds paranoid, take it up with IBM. The company filed a patent application in 2001 which contemplates using this wireless snooping technology to track people as they roam through ''shopping malls, airports, train stations, bus stations, elevators, trains, airplanes, rest rooms, sports arenas, libraries, theaters, museums, etc." An IBM spokeswoman insisted the company isn't really prepared to go this far. Patent applications are routinely written to include every possible use of a technology, even some the company doesn't intend to pursue. Still, it's clear somebody at IBM has a pretty creepy imagination.
  And it's not just IBM. A host of other companies are looking at ways to embed surveillance chips into practically everything we purchase -- and even into our bodies. It's a prospect that infuriates Harvard graduate student Katherine Albrecht.
  ''I think the shocking part is they've spent the past three years saying, oh no, we'd never do this," Albrecht said. But instead of taking their word for it, Albrecht and her colleague, former bank examiner Liz McIntyre, began reading everything they could find on the subject. Now they're serving up the scary results of their research in a scathing new book, ''Spychips."
  That's Albrecht's preferred name for a technology called radio frequency identification technology, or RFID. If you use a Mobil Speedpass to pay for gasoline, you're already using RFID. Your Speedpass contains a microchip and a small antenna that allows it to broadcast information to a receiver. The chip has no power source of its own. Instead, it picks up radio signals from an RFID chip reader, turns these radio waves into electricity, and uses the power to broadcast data to the reader.
  Because they need no batteries, RFID chips can be made small enough to attach invisibly to practically anything. One company is even working on a way to print RFID chips onto newspapers, using electrically conductive ink.
  Why is this so scary? Because so many of us pay for our purchases with credit or debit cards, which contain our names, addresses, and other sensitive information. Now imagine a store with RFID chips embedded in every product. At checkout time, the digital code in each item is associated with our credit card data. From now on, that particular pair of shoes or carton of cigarettes is associated with you. Even if you throw them away, the RFID chips will survive. Indeed, Albrecht and McIntyre learned that the phone company BellSouth Corp. had applied for a patent on a system for scanning RFID tags in trash, and using the data to study the shopping patterns of individual consumers.
  ''Spychips" reveals a US government plan to order RFID chips embedded in all cars sold in America. No big deal -- until you realize the police could then track your comings and goings by putting inexpensive RFID readers at key intersections.
  Then there are the RFID pajamas from a California maker of children's clothing. It's a clever way to prevent kidnapping: Just put RFID readers in your home, to alert you if Junior's taking an unauthorized trip. It's easy to imagine parents buying into this idea, but they'll now have to install RFID readers in their homes. ''There's the nose in the camel's tent," said Albrecht. At first, companies will just scan your kids' jammies. But later they'll ask permission to scan the tags on your groceries and your clothes. The consulting company Accenture has patented a design that builds an RFID reader into a household medicine cabinet, to make sure you're taking all your medications.
  There are countless applications for RFID, and viewed in isolation, some are downright appealing. It would be nice for the medicine cabinet to send you an e-mail -- ''Time to buy more Viagra." But what if it's also sending that data to consumer marketing companies, eager to bombard you with unwanted advertising? Worse yet, what if they're sending the data to government investigators, or to hackers who've figured out how to break into the system?
  Not to worry, said Jack Grasso, spokesman for EPC Global of Lawrenceville, N.J.,, the nonprofit organization that sets technical standards for RFID systems. His organization has a code of ethics that requires notifying consumers about the presence of RFID tags. The group also recognizes the right of consumers to deactivate RFID tags, and is working to develop systems to make this easy.
  So how about putting these principles into law? No thanks, said Grasso. ''We believe it is far too early." Because the RFID industry is so young, any regulation ''would have a chilling effect that would put us back years."
  And that's a bad thing?
  Somebody needs to sit down and think this through. Dozens of companies and government agencies are planning to use RFID to track nearly every move we make. And although many of the individual applications make sense, what would happen if they were all implemented, without oversight or restraint? We'd then live in a world in which everything we own gossips about us behind our backs.
  And it would be too late to call the IBM Help Desk to ask for our privacy back.

Hiawatha Bray can be reached at bray@globe.com.