« Net prose and 'Leetspeek' | Main | Prevention of Terrorism Bill debate I »

February 25, 2005

RFID in e-passports

The State Department is now proposing that the new American electronic passports (e-passports) should have an unencrypted radio frequency identification (RFID) chip, confirming the basic data written in the passport.

Critics say this is insecure as the chips can be read from 10 to 30 feet away, and suggest contact chips should be used instead.

The technical arguments are relevant to us because the United States is also asking Britain to issue e-passports to those of us intending to visit America.

www.wired.com/news/privacy/0,1848,66686,00.html

Posted by Simon Holledge at February 25, 2005 04:39 PM

Trackback Pings

TrackBack URL for this entry:
http://www.skakagrall.com/cgi-bin/MT/mt-tb.cgi/281

Comments

Hello Simon

There was an excellent article in last week's Economist magazine (issue dated 19th February) about just this matter. Here's the URL, although access is (I think) restricted to subscribers:
http://www.economist.com/science/displayStory.cfm?story_id=3666171

I think this whole matter blows out of the water the notion that the issuance of ID cards is a benign side-product of these new passports. Apparently another option being considered, apart from the 'contact activation' one is to have an electronic lock on the chip - this has been endorsed by the EU, calling into question the interoperability across borders globally which was said to be one of the 'benefits' of the open chip system - until it was realised that criminals/terrorists might acquire readers, too.

Posted by: Bill (Scotland) at February 26, 2005 11:29 AM

Bill,

Thanks the Economist article is an excellent explanation of the difficulties involved with e-passport technology (I could read it without registering).

No doubt the more powerful the technology used, the greater the potential danger if it is abused.

My own view is that means of identification should be under the control of the individual, not the state. In other words, any locking/unlocking encrypting/un-encrypting of passport chips should be done by the holder.

Posted by: Simon Holledge at February 26, 2005 11:50 AM