RFID US Passports
#31
Join Date: May 2004
Location: Exclusively OMNI/PR, for Reasons
Posts: 4,188
Originally Posted by GradGirl
Sorry, PorkRind,
I didn't realize you were the OP. Still, I'd prefer to have a discussion about the actual RFID passport scheme that will be implemented in our country, rather than a pie-in-the-sky alternative. It's less confusing for the non-techie flyerTalkers to follow what's being discussed if we stick to the facts: the actual passports that people will be required to carry will be broadcasting your name, address, DOB, photograph, et cetera, completely unencrypted, to anyone who's listening.
If U.S. passport holders aren't angry, they're not paying attention.
I didn't realize you were the OP. Still, I'd prefer to have a discussion about the actual RFID passport scheme that will be implemented in our country, rather than a pie-in-the-sky alternative. It's less confusing for the non-techie flyerTalkers to follow what's being discussed if we stick to the facts: the actual passports that people will be required to carry will be broadcasting your name, address, DOB, photograph, et cetera, completely unencrypted, to anyone who's listening.
If U.S. passport holders aren't angry, they're not paying attention.
#32
Join Date: May 2004
Location: Exclusively OMNI/PR, for Reasons
Posts: 4,188
Originally Posted by GUWonder
Thank you for posting an alternative. However, posting an alternative on FT does not mean said alternative is the one that will necessarily be implemented -- unless of course you have Ashcroft, Bush, Cheney or a Ridge in your pocket.
I had no expectations of said alternative being implemented. I had an opinion that there was a better, more secure way to obtain reasonable results, and thought that it would be worth posting.
Sheesh.
#33
FlyerTalk Evangelist
Join Date: May 2000
Location: أمريكا
Posts: 26,763
Originally Posted by PorkRind
For someone who claims to make no presumptions, you sure make a lot of assumptions. Identifying who is carrying an RFID tag is one thing; obtaining any detail about them is quite another. If standards are followed globally and encryption is used correctly, the most that can be learned about an individual is that they have something on their person that contains an RFID tag.
Even if it were encrypted, the code could probably be broken pretty easily, especially since the decryption code would need to be deployed pretty widely.
#34
Join Date: May 2004
Location: Exclusively OMNI/PR, for Reasons
Posts: 4,188
Originally Posted by Yaatri
The passort will have to transmit data too. How can the data on the passport be verified with that in the central database, without retrieveing that data from the passport?
Damn. Still off-topic. Sorry GradGirl . . .
#35
Join Date: May 2004
Location: Exclusively OMNI/PR, for Reasons
Posts: 4,188
Originally Posted by Doppy
The original story says that the data will not be encrypted, thus anyone with the proper equipment will have access to your name, photograph and address - for starters.
Even if it were encrypted, the code could probably be broken pretty easily, especially since the decryption code would need to be deployed pretty widely.
Even if it were encrypted, the code could probably be broken pretty easily, especially since the decryption code would need to be deployed pretty widely.
#36
FlyerTalk Evangelist
Join Date: May 2000
Location: أمريكا
Posts: 26,763
Originally Posted by PorkRind
I know, I know. I was discussing an alternative . . . I guess reading the entire thread is too much to ask. I'm out.
#37
FlyerTalk Evangelist
Join Date: May 2000
Location: أمريكا
Posts: 26,763
Here's an example of an anti-static bag that would probably help block RF signals:
http://www.esdsystems.com/default.as...enuBar=catalog
I'm going to bring an anti-static bag to work tomorrow to see if it actually works.
http://www.esdsystems.com/default.as...enuBar=catalog
I'm going to bring an anti-static bag to work tomorrow to see if it actually works.
#38
Join Date: Apr 2000
Location: Palm Beach/ New England
Programs: AA EXP 3MM, DL GM, Marriott Platinum
Posts: 4,382
How would the RFID tag broadcast your address? Addresses are not in US passports. There is a place to hand-write your address, if you wish, but the home address is not anywhere in the document. (Thankfully). You may nowadays have to provide a SSN and an address when applying: just use a EIN and a work address.
I am glad that I long ago made myself anonymous. I ran into an old landlady a few months back; she told me I still get oodles of junk mail at my 1995 address. I get none at my real home address. Nothing like disappearing from databases.
I am glad that I long ago made myself anonymous. I ran into an old landlady a few months back; she told me I still get oodles of junk mail at my 1995 address. I get none at my real home address. Nothing like disappearing from databases.
#39
Suspended
Join Date: Jan 2002
Posts: 22,778
Originally Posted by PorkRind
The passport need only transmit, when properly interrogated, a uniquely identifying value (i.e. a serial number, suitably encrypted) that would function as a key to the central database. The official checking passports would compare the database information with your physical characteristics and/or the data printed on the passport. No "in the clear" identifying information is required.
Damn. Still off-topic. Sorry GradGirl . . .
Damn. Still off-topic. Sorry GradGirl . . .
#40
FlyerTalk Evangelist
Join Date: Mar 2002
Location: Saipan, MP 96950 USA (Commonwealth of the Northern Mariana Islands = the CNMI)
Programs: UA Silver, Hilton Silver. Life: UA .57 MM, United & Admirals Clubs (spousal), Marriott Platinum
Posts: 15,043
Originally Posted by Doppy
Here's an example of an anti-static bag that would probably help block RF signals:
http://www.esdsystems.com/default.as...enuBar=catalog
http://www.esdsystems.com/default.as...enuBar=catalog
#41
Suspended
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 102,095
Originally Posted by PorkRind
Uh, right.
I had no expectations of said alternative being implemented. I had an opinion that there was a better, more secure way to obtain reasonable results, and thought that it would be worth posting.
Sheesh.
I had no expectations of said alternative being implemented. I had an opinion that there was a better, more secure way to obtain reasonable results, and thought that it would be worth posting.
Sheesh.
Last edited by GUWonder; Oct 25, 2004 at 11:44 pm
#42
Join Date: Mar 2004
Location: USA
Posts: 1,017
Originally Posted by SPN Lifer
Thank you, Doppy. I will be bookmarking this thread for when I need to get a new passport in a few years, if RFID is implemented by then.
#44
FlyerTalk Evangelist
Join Date: May 2000
Location: أمريكا
Posts: 26,763
Test results
OK, well I've just performed a test of RFID foiling and here are the results:
The ID card system my company uses is old and slow. It has a range of about 18-24", but you have to hold the card steady in that range for a decent amount of time. There are systems that are much faster and have a better range.
I first placed my ID card into a standard anti-static bag. It seemed to have almost no effect - my card was being ID'ed normally.
Then I wrapped my ID card up in aluminum foil so that the entire thing was covered by about 3-4 layers of foil. That significantly decreased the effective range - bringing it down to about 1 inch. Placing the card in foil inside of the anti-static bag made it so that the card would have to be pressed all the way up against the reader for it to work.
So, my conclusion is that for maximum protection with the system I tested, you'd need at least 5 layers of aluminum foil. But, as I said above, the system is not nearly as high quality/advanced as the new systems on the market.
The anti-static bag did nothing. I posted a link above to some anti-static bags that may have stronger Faraday cage properties, but I can't say for sure. Certainly a bag like the ones I linked to would be a lot more manageable than a few square feet of aluminum wrapping, so it would probably be worth testing some better bags.
The ID card system my company uses is old and slow. It has a range of about 18-24", but you have to hold the card steady in that range for a decent amount of time. There are systems that are much faster and have a better range.
I first placed my ID card into a standard anti-static bag. It seemed to have almost no effect - my card was being ID'ed normally.
Then I wrapped my ID card up in aluminum foil so that the entire thing was covered by about 3-4 layers of foil. That significantly decreased the effective range - bringing it down to about 1 inch. Placing the card in foil inside of the anti-static bag made it so that the card would have to be pressed all the way up against the reader for it to work.
So, my conclusion is that for maximum protection with the system I tested, you'd need at least 5 layers of aluminum foil. But, as I said above, the system is not nearly as high quality/advanced as the new systems on the market.
The anti-static bag did nothing. I posted a link above to some anti-static bags that may have stronger Faraday cage properties, but I can't say for sure. Certainly a bag like the ones I linked to would be a lot more manageable than a few square feet of aluminum wrapping, so it would probably be worth testing some better bags.
Last edited by Doppy; Nov 17, 2004 at 10:29 am
#45
FlyerTalk Evangelist
Join Date: Mar 2002
Location: An NPR mind living in a Fox News world
Posts: 14,165
I know that the RFID's that are in the Smartag/EZ-Pass toll transponders have a range in the 10's of feet -- probably around 100-200'. They tell you to wrap it in aluminum foil if you don't want it to be picked up by the receiver at the toll booth. I'd guess that the closest a transponder gets to a tollbooth receiver is probably about 6-10'.
I'd guess this is probably worst-case, since the toll transponders are large and have good-sized batteries and antennae.
For racing chips attached to running shoes, you literally have to be on top of the receiver strip on the road to make the machine beep. The strip is usually covered by 3/4" dense rubber padding and the chip on your shoe is several inches above the pad's surface.
...just two empirical examples!
I'd suggest a layer of two over a passport would do the job.
I'd guess this is probably worst-case, since the toll transponders are large and have good-sized batteries and antennae.
For racing chips attached to running shoes, you literally have to be on top of the receiver strip on the road to make the machine beep. The strip is usually covered by 3/4" dense rubber padding and the chip on your shoe is several inches above the pad's surface.
...just two empirical examples!
I'd suggest a layer of two over a passport would do the job.