RFID based eID systems Tomáš Trpišovský Institut mikroelektronických aplikací (IMA) BioHealth / Sophia Antipolis, HCI FF UK / Praha, Oct 9, 2007

IMA at Glance Private Institute on the market since 1992, Located at Praha CZ Distribution of complete eID systems, special electronics & services (Europe-wide) –testing state-of-the-art technology, –security provisions, –well connected to the suppliers and SDOs. Incubator of visions and int./EU projects, expert opinions and consultations ISO 9001 compliance and Security Clearance by NBÚ

RFID systems Implementation Operations Challenges PET ?? Liberal User Centric Identification ??

Plug-in integration –Mature technology –Standards -> NFC? Becoming cost effective Human, Animals, Things Trust and Fears Privacy RFID & Implementation

RFID tag - price structure

EM4223 – ISO A UHF R/O RFID chip DESIGNED IN ASICentrum

RFID chip – real size

RFID sticky label - chip connection detail

RFID Vertical Market Analysis Fasting Growing Verticals (to 2010) –Pharmaceuticals: 134% –Consumer Package Goods: 77% –Health Care: 49% –Electronics: 37% –Retail POS: 33% Source: VDC April, 2007

RFID Application Market Analysis Fastest Growing Applications (to 2010) –Sensing/Monitoring: 600% –Supply Chain: 74% –Rental Tracking: 49% –Retail POS: 47% Source: VDC April, 2007

Easy Robust Foster IDM PET required Trust and Fears Privacy RFID & Operation

RFID System Components

EM4026 – ski application DESIGN, DEVELOPMENT IN ASICentrum

Pre-pairing – wireless devices

Animal Applications Pigeon Race Cattle Management Meat Tracing Cattle Management Meat Tracing Pets, Cats…

LOGISTICS Pallet Reader Pallet Reader Laundry & Textile Laundry & Textile Asset Tracking Asset Tracking

RFID Emerging Technologies Contactless Payment –Using Smartcard technology to enable wireless payment transactions –Currently being/soon to be offered by: MasterCard Visa American Express Customer Loyalty –Using Smartcard technology to provide additional value to store consumers

Digitalised Hospital Access control Patient ID tags Health Professional ID tags Automated monitoring devices Automated medication supply TV / Video / Internet at the bedside –access to the electronic health record/ test results –choice of treatment –meal ordering

RFID for Hospital Supply Tracking hospital equipment and supply Controlling: –sterilisation of surgical instruments –implantable medical assets –quality of blood conserves –stocking of medication Loss prevention of valuable instruments Increasing utilisation Tracking of medicine origin

RFID for Persons Patients – Access control & authentication – Controlling blood transfusions – Medication administration & alert – Observing implants – Option for outpatient self-medication Staff – Access control & authentication

RFID-applications in a Czech military hospital ID System Overview Restaurant Canteen Vending Machines Ordering Wages Access Control PaymentAttendance Control Employees’ Data for ID Devices Vehicles Staff

Concerns & Recommendations RFID –Tracking –Data merging and correlation Recommendations –Knowledge of RFID tags –Possibility to deactivate tags –Ethical obligations / PET

Some Figures (2006) Health care accounts for about 8% of GDP, on average, in OECD countries. Almost 75% of healthcare provision in the major markets across Europe is controlled by the public sector. The number of RFID tags delivered in 10 years will be over 450 times the number delivered in The market for RFID tags is expected to rise from €90 million to €2.1 billion over the next decade.

RFID - Challenges

Challenges (and Fears) Enormous Savings Internet of Things Effective Infrastructure User centric identification Data mining and correlation Risk of RFID cumulative effect Privacy issues

RFID Trends Miniaturization and Technology Consolidation –Hardware footprints (readers, tags, printer/encoders) are all getting smaller Fully-functional readers the size of a PCMCIA card Portable encoders –Design and Manufacturing are integrating components and processes Convergence & Complimentary Solutions –Cell phone enabled RFID readers –Smartcards for Contactless payment, customer loyalty, and security / access control –UHF and HF compatible solutions for supply chain RFID and Bar Code enabled labeling and reading

Savings due the shared infrastructure - demonstrator for European Health Insurance Card EHIC. Phase A: Investment and Deployment Plan across 10 EU member states ( ) Phase B: Initial Deployment of the Coordinator GIE SESAM-VITALE / FR + 28 partners across 20 member states

NFC Technology Near Field Communication (NFC) is a standards-based, short-range (a few centimeters) wireless connectivity technology that enables simple and safe two-way interactions among electronic devices.

Pilot on Nokia 6131 NFC Secure Chip NFC MIDIet API Incorporates NFC chip and Secure Chip Phone application (Java MIDlets) Over The Air managable Apps in the Secure Chip The Secure Chip is an additional multi-application Java card chip supporting Global Platform functionality, which enables it to be used for several applications such as Debit and credit cards Public transport ticketing Event ticketing Compatible with terminals supporting ISO Type A protocol Development Kit available NFC connectivity enabling service initiation, payment & ticketing and giving & sharing

SIM card for the NFC Security NFC Chip Antenna CONTACTLES S TERMINALS ISO14443 BANK (e.g.) managing the payment application on SIM card OPERATOR managing the SIM card platform CellularBB Phone application (e.g. Java MIDlet) to provide OTA services and user interface for Secure Element application END-TO-END MANAGEMENT OF CARD APPLICATIONS JSR-177 JSR-257 OVER THE AIR Direct connection between SIM and NFC chip Java SIM/USIM card with Global Platform support, hosting additional applications, such as payment & ticketing STANDARDIZATION REQUIRED ! !

NOKIA 6131 NFC 6131 NFC supports ticketing infrastructures that follow the ISO type A protocol, Mifare 1k and 4k Type A is refered as Mifare (by Philips), Type B as Calypso (France, Belgium), Type C as Felica (by Sony, mainly in Japan, Singapore, HongKong, some coverage in China) Payment POS terminals support both A and B protocols Ticketing is usually either-or –With 6131 NFC possible to support only type A –Des-fire can be treated as a java-application (Oslo)

Thanks for your attention This paper integrates some illustrative materials prior presented by BioHealth, ASICentrum and

.. how to make bridges.. integrated by IMA