Item 2 - Information Security and Privacy Protection Technology in RFID Applications Nai-Wei Lo Assistant Professor Department of Information Management National Taiwan University of Science and Technology International Collaboration Project for Information Security

2 Outline Background Background Goals of the project Goals of the project Major tasks and expected outcomes from international collaboration Major tasks and expected outcomes from international collaboration Manpower and budget expense Manpower and budget expense Key performance indicators and review points Key performance indicators and review points

3 Background RFID – a replacement for optical barcode RFID – a replacement for optical barcode Unique identificationUnique identification AutomationAutomation Applications Applications LogisticsLogistics Military usageMilitary usage Other applicable areasOther applicable areas Potential problems Potential problems SecuritySecurity PrivacyPrivacy

Goals of The Project

5 Project Goals To advance the technologies on data security and privacy protection of RFID systems in Taiwan. To advance the technologies on data security and privacy protection of RFID systems in Taiwan. Improve the diversification and quality of our research on RFID related area.Improve the diversification and quality of our research on RFID related area. To foster experts on RFID security and privacy issues through international collaboration project. To foster experts on RFID security and privacy issues through international collaboration project. Provide platform for RFID information exchange, techniques transfer, and even experts visiting internationally.Provide platform for RFID information exchange, techniques transfer, and even experts visiting internationally.

6 International Collaboration Goals: Team members will be sent to UC Berkeley to work with Berkeley scholars in order to learn state-of-the-art technologies and new concepts/ideas from them. By doing so, we hope to expand our research capacity in RFID related field, and also to share precious research results and collaboration experience with both academia and RFID industry in Taiwan. Goals: Team members will be sent to UC Berkeley to work with Berkeley scholars in order to learn state-of-the-art technologies and new concepts/ideas from them. By doing so, we hope to expand our research capacity in RFID related field, and also to share precious research results and collaboration experience with both academia and RFID industry in Taiwan. Research partner: Research partner: RFID security and privacy investigation team under Prof. Doug Tygar, UC Berkeley. Potential research targets: Potential research targets: Build RFID systems with enhanced privacy protection mechanism and/or augmented security scheme.Build RFID systems with enhanced privacy protection mechanism and/or augmented security scheme. Employ sensor networks with RFID systems on medical applications.Employ sensor networks with RFID systems on medical applications.

Major Tasks and Expected Outcomes from International Collaboration

8 Major Tasks Plan and build RFID systems with enhanced privacy protection mechanism and/or augmented security scheme Plan and build RFID systems with enhanced privacy protection mechanism and/or augmented security scheme Increase RFID security and privacy under low energy consumption considerationIncrease RFID security and privacy under low energy consumption consideration Explore new RFID security and privacy mechanisms for specific RFID applicationsExplore new RFID security and privacy mechanisms for specific RFID applications Develop RFID tag integrity test schemeDevelop RFID tag integrity test scheme Develop RFID tracking denial techniqueDevelop RFID tracking denial technique Invent new protocols for RFID applicationsInvent new protocols for RFID applications Employ sensor networks with RFID systems on medical applications, such as: Employ sensor networks with RFID systems on medical applications, such as: Elder healthcare systemsElder healthcare systems Patient auxiliary systemsPatient auxiliary systems

9 Expected Outcomes NoOutcomeNumber Expected Date 1. Report on current status of RFID application security and privacy of available solutions 1 July, Report on progress of solution design - Problem modeling - Our proposed solution - Current implementation status 1 Nov, Prototype of RFID application with developed security scheme (alpha) 1 Dec, Conference paper submission 1 Dec, Note on advanced issues and scheme improvement 1 March, 07

10 Collaboration: Expected Outcome and Milestones A report on the current landscape of RFID security and privacy research (Oct. ‘ 06): A report on the current landscape of RFID security and privacy research (Oct. ‘ 06): A report on specific RFID research issues and initial findings from the collaborative research (Dec. 06). A report on specific RFID research issues and initial findings from the collaborative research (Dec. 06). Research publications ( ‘ 07). Research publications ( ‘ 07). Release of RFID application prototype ( ‘ 07). Release of RFID application prototype ( ‘ 07). Industry workshop/summer school on “ RFID Security and Privacy ” ( ‘ 07). Industry workshop/summer school on “ RFID Security and Privacy ” ( ‘ 07).

Manpower and Budget Expense

12 Manpower Functional PositionName AffiliationTitle PITzong-Chen Wu National Taiwan University of Science and Technology Professor CO-PIShiuh-Pyng Shieh National Chiao Tung University Professor CO-PI Nai-Wei Lo National Taiwan University of Science and Technology Assistant Professor Investigator Da-Wei Wang Institute of Information Science Academia Sinica Associate Research Fellow Investigator Jung-Hui ChiuChang Gung University Associate Professor Investigator Chuan-Kai Yang National Taiwan University of Science and Technology Assistant Professor Full-time Research Assistant (Master Degree 1 person TBD Part-time Research Assistant (Ph.D Student) 3 persons TBD Part-time Research Assistant ( Master Student) 4 persons TBD

13 Budget Expense for the First Year Budget Expense for the First Year Item List Budget Amount Percentage 1. Personnel Expense 1. Personnel Expense1,993, % 2. Equipment Expense 2. Equipment Expense300,0007.6% 3. Travel Expense （ International Conference, etc ） 3. Travel Expense （ International Conference, etc ）300,0007.6% 4. Int ’ l Collaboration Expense 4. Int ’ l Collaboration Expense1,094, % 5. Operation Expense 5. Operation Expense247,7006.3% 6. Overhead 6. Overhead314,8008% Total Amount 4,250,000

Key Performance Indicators and Review Points

15 Timetable of Project Schedule : Report generated 1. Identify and select the research topics XXXX1XX 2. Collect and analyze related research papers and prototypes XXXXXX2+ 3.Build research environment and learn necessary skills XXXX 4.Send researchers to work with UC Berkeley scholars on site XX X Collect related information about combining RFID technology with sensors for medical applications XX X4 + Complete Percentage( ％ ) 40 % 80 % 100 %

16 Review Points Review Point Proposed Date Finished Work Description 1 July, 2006 Establish the detail research direction and work target for the first year. 2 Sept., 2006 Complete the research methodology structure. 3 Dec., 2006 Consolidate the research results through collaboration with UCB and modify prototype design based on new findings. 4 March, Finalize research results for the first year and write research reports. 2.Complete the design of prototype system.

17 Thank you! Q&A