Efficient Method of Achieving Agreements between Individuals and Organizations about RFID Privacy

Shi-Cho CHA

doi:10.1587/transinf.E93.D.1866

Copy

Shi-Cho CHA, "Efficient Method of Achieving Agreements between Individuals and Organizations about RFID Privacy" in IEICE TRANSACTIONS on Information, vol. E93-D, no. 7, pp. 1866-1877, July 2010, doi: 10.1587/transinf.E93.D.1866.
Abstract: This work presents novel technical and legal approaches that address privacy concerns for personal data in RFID systems. In recent years, to minimize the conflict between convenience and the privacy risk of RFID systems, organizations have been requested to disclose their policies regarding RFID activities, obtain customer consent, and adopt appropriate mechanisms to enforce these policies. However, current research on RFID typically focuses on enforcement mechanisms to protect personal data stored in RFID tags and prevent organizations from tracking user activity through information emitted by specific RFID tags. A missing piece is how organizations can obtain customers' consent efficiently and flexibly. This study recommends that organizations obtain licenses automatically or semi-automatically before collecting personal data via RFID technologies rather than deal with written consents. Such digitalized and standard licenses can be checked automatically to ensure that collection and use of personal data is based on user consent. While individuals can easily control who has licenses and license content, the proposed framework provides an efficient and flexible way to overcome the deficiencies in current privacy protection technologies for RFID systems.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.E93.D.1866/_p

Copy

@ARTICLE{e93-d_7_1866,
author={Shi-Cho CHA, },
journal={IEICE TRANSACTIONS on Information},
title={Efficient Method of Achieving Agreements between Individuals and Organizations about RFID Privacy},
year={2010},
volume={E93-D},
number={7},
pages={1866-1877},
abstract={This work presents novel technical and legal approaches that address privacy concerns for personal data in RFID systems. In recent years, to minimize the conflict between convenience and the privacy risk of RFID systems, organizations have been requested to disclose their policies regarding RFID activities, obtain customer consent, and adopt appropriate mechanisms to enforce these policies. However, current research on RFID typically focuses on enforcement mechanisms to protect personal data stored in RFID tags and prevent organizations from tracking user activity through information emitted by specific RFID tags. A missing piece is how organizations can obtain customers' consent efficiently and flexibly. This study recommends that organizations obtain licenses automatically or semi-automatically before collecting personal data via RFID technologies rather than deal with written consents. Such digitalized and standard licenses can be checked automatically to ensure that collection and use of personal data is based on user consent. While individuals can easily control who has licenses and license content, the proposed framework provides an efficient and flexible way to overcome the deficiencies in current privacy protection technologies for RFID systems.},
keywords={},
doi={10.1587/transinf.E93.D.1866},
ISSN={1745-1361},
month={July},}

Copy

TY - JOUR
TI - Efficient Method of Achieving Agreements between Individuals and Organizations about RFID Privacy
T2 - IEICE TRANSACTIONS on Information
SP - 1866
EP - 1877
AU - Shi-Cho CHA
PY - 2010
DO - 10.1587/transinf.E93.D.1866
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E93-D
IS - 7
JA - IEICE TRANSACTIONS on Information
Y1 - July 2010
AB - This work presents novel technical and legal approaches that address privacy concerns for personal data in RFID systems. In recent years, to minimize the conflict between convenience and the privacy risk of RFID systems, organizations have been requested to disclose their policies regarding RFID activities, obtain customer consent, and adopt appropriate mechanisms to enforce these policies. However, current research on RFID typically focuses on enforcement mechanisms to protect personal data stored in RFID tags and prevent organizations from tracking user activity through information emitted by specific RFID tags. A missing piece is how organizations can obtain customers' consent efficiently and flexibly. This study recommends that organizations obtain licenses automatically or semi-automatically before collecting personal data via RFID technologies rather than deal with written consents. Such digitalized and standard licenses can be checked automatically to ensure that collection and use of personal data is based on user consent. While individuals can easily control who has licenses and license content, the proposed framework provides an efficient and flexible way to overcome the deficiencies in current privacy protection technologies for RFID systems.
ER -