Industry Group Refutes RFID Virus Claims

March 20, 2006
AIM Global, the trade association for automatic identification and mobility, issued a statement on March 17 in response to the highly controversial technical paper delivered during a conference on March 15 in Pisa, Italy entitled, "Is Your Cat Infected ...

AIM Global, the trade association for automatic identification and mobility, issued a statement on March 17 in response to the highly controversial technical paper delivered during a conference on March 15 in Pisa, Italy entitled, "Is Your Cat Infected with a Computer Virus?" The paper claims that RFID tags can be used to corrupt databases and even potentially to spread computer viruses.

"Many of the basic assumptions in the paper overlook a number of fundamental design features necessary in automatic data collection systems and good database design," says AIM Global president, Dan Mullen. "In other words, the researchers built a system with a weakness and then proceeded to show how the weakness could be exploited. Not surprisingly, poor system design, whether capturing RFID tag information, bar code information or keyboard-entered data will create vulnerabilities."

Another group from the International Organization for Standardization (ISO), RFID scientists, pointed out that there are two broad types of RFID tags, ones that have pre-encoded, or fixed data, and ones that have data that can be changed. Systems with fixed data such as those used to identify pets cannot be changed and therefore are immune to infection by a virus.

Here are a few specific attributes in RFID systems that can protect the overall system:

  • Most applications of RFID, including EPC Gen2, look for specific kinds of data. Poor reader design might allow the reading of a "rogue" tag, but a good system will verify the data against pre-defined parameters, as do current bar code systems, and any code not in the database is typically ignored.
  • Being able to insert a virus into the system implies that a tag contains executable code that is recognized by the software. This is simply not possible with many applications of RFID since they look for specific kinds of data and will either flag or reject anything that doesn't fit the data template.
  • Protection is a common process today in data transfer between computer systems and writeable media. Global standards and commercial products are created to ensure that there is adequate data security, much the same way that running current virus software prevents virus attacks to your home computer. Data collection system designers are aware that they must install, and have already installed, methods to authenticate any data into their software.
Intrested in information related to this topic? Subscribe to our weekly RFID eNewsletter.

Popular Sponsored Recommendations

Empowering the Modern Workforce: The Power of Connected Worker Technologies

March 1, 2024
Explore real-world strategies to boost worker safety, collaboration, training, and productivity in manufacturing. Emphasizing Industry 4.0, we'll discuss digitalization and automation...

3 Best Practices to Create a Product-Centric Competitive Advantage with PRO.FILE PLM

Jan. 25, 2024
Gain insight on best practices and strategies you need to accelerate engineering change management and reduce time to market. Register now for your opportunity to accelerate your...

Transformative Capabilities for XaaS Models in Manufacturing

Feb. 14, 2024
The manufacturing sector is undergoing a pivotal shift toward "servitization," or enhancing product offerings with services and embracing a subscription model. This transition...

Shifting Your Business from Products to Service-Based Business Models: Generating Predictable Revenues

Oct. 27, 2023
Executive summary on a recent IndustryWeek-hosted webinar sponsored by SAP

Voice your opinion!

To join the conversation, and become an exclusive member of IndustryWeek, create an account today!