Identification chips track products, shoppers

Technology can put consumers at risk

Has a store near you replaced its metal shelves with plastic ones? Such a move could signal a switch to a type of product tracking that has the potential to invade your privacy.

Radio Frequency Identification, or RFID, is a wireless technology that allows objects and even people to be tagged and tracked. RFID tags contain microchips and tiny radio antennas and are embedded in products or stuck on labels. Once activated, they transmit a unique identifying number to an electronic reader, which, in turn, links to a computer database where information about the product or person is stored.

Metal shelves can interfere with transmissions.

Although it sounds like science fiction, radio tagging is a reality. For years, railroads and the U.S. Department of Defense have used radio tags to track inventory. Cars outfitted with radio tags that mark their passage have long breezed through tollbooths, while ExxonMobil’s Speedpass – an RFID tag in the form of a key fob – enables drivers to pay for gasoline.

More recently, the technology has shown up in contactless payment cards such as Chase’s Blink or MasterCard PayPass, on individual items at Wal-Mart and Best Buy, in library books and in U.S. passports. The use of RFID tags is growing so explosively that analysts forecast sales this year alone of 1.3 billion units – more than half as many tags as were sold in all years up through early 2006. Part of the reason is that the price of the tags – topping $1 apiece in 1999 – is plummeting. Within five to seven years, radio tags are expected to cost less than a penny each, the magic point at which nearly anything we buy is likely to be tagged.

This is a close-up of a Radio Frequency Identification chip.

And there are touchy privacy issues. Identity thieves and other crooks can tap into the information transmitted from a radio tag to a scanner, culling – for example – banking or medical information. Researchers already have cracked the code in ExxonMobil’s Speedpass, demonstrating for the company how a hacker could use mined data to charge gasoline on the Speedpass holder’s account.

Other researchers have copied an implantable RFID tag, which could allow them to assume the implantee’s identity and gain access to high-security locations. VeriChip, the tag’s manufacturer, says its product would serve as only one of several security layers thwarting such incursions.

Some products are flagged as tagged, voluntarily displaying a thumbnail-sized Electronic Product Code (EPC) logo on their packages. Yet few consumers recognize the logo or understand its meaning.