RFID: from identification to identity lara srivastava International Telecommunication Union (ITU) 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU key industry transitions 16th October 2006 EU RFID Conference 2006 NASA Âfrom distance to proximity Âfrom local to global Âfrom network‐centric to edge‐centric Âfrom tech‐push to demand‐pull Âfrom content to context Âfrom wired to wireless Âfrom frequent access to ubiquitous access Copyright 2006 ITU ubiquity of networks, ubiquity of connections ANYPLACE ANYTIME ANYTHING 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU ubiquity of radio  humans and radios ¾ ratio nearing 1 to 1 ¾ in the future, might exceed 1000 to 1  thus, radios would become “pervasive” in the environment around us  this will radically transforming the role of technology in society 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU radio-frequency ID and ubiquity ÂRFID systems can “identify” items, “locate” specific ones in a group, and can also “track” items ¾without need for line of sight ¾they provide a sort of virtual data “map” of the real world  as such, RFID & related technologies are catalysts for ubiquitous networking 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU RFID in application RFID Tag 16th October 2006 RFID Reader EU RFID Conference 2006 Copyright 2006 ITU from identification to identity  in a ubiquitous network environment, managing a large number of “identities” will become vital: ¾ people ¾ animals ¾ machines ¾ institutions ¾ things  wide‐ranging impact ¾ on social interaction ¾ on policy/regulation ¾ on doing business ¾ on network design 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU areas of concern Âownership of identifiers ¾ governance  standardization still fragmented at a global level ¾ network protocols ¾ tag formats ¾ identity systems  privacy and data protection ¾ how and why is data collected? ¾ who owns data on the tags? ¾ who can access the data? ¾ how long is the data accessible? 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU privacy: a question of balance  users are displaying their need for “anonymity” online  ubiquitous networking, for instance through RFID, likely to exacerbate this lack of trust  add to this current national security concerns, which are leading to an increase in information collection and retention  care must be taken to strike a balance : ¾ between national security and citizen privacy ¾ between corporate security and the respect of the employee ¾ between privacy and convenience (a trade‐off…)  this balance is to be struck across domains: technical, regulatory, industrial, & socio‐ethical 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU privacy and the problem of digital identity c h a l l e n g e s  fragmentation of identity  blurring boundaries  data perpetuity  commoditization of privacy, identity r i s k s  user reticence, mistrust  leaks, breaches  mistaken identity  identity theft  cultural differentiation  globalization 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU digital identity: from “I” to “me” digital representation of attributes How do others relate me to to ? What is the perception of me? I Who am ? “I” HUMAN IDENTITY Traditional Attributes: Other Attributes: name address date of birth place of birth phone numbers bank account credit card details credit rating income tax status marital status education … service provider encryption level operating system online purchasing favourite websites language … “Me” Filtering for context and choice DIGITAL IDENTITY Source: ITU Internet Reports 2006: digital.life 16th October 2006 EU RFID Conference 2006 ITU LaraCopyright Srivastava2006 2/10/2006 key principles for managing identity in a ubiquitous environment Âuser‐centric policies ¾user consent ¾user choice Âcontext awareness Âanonymity and ‘identifiability‘ Âtransparency Ânotification Âaccountability Âdata minimization 16th October 2006 freefoto EU RFID Conference 2006 Copyright 2006 ITU 2006 ITU report: digital.life ITU Internet Report 2006 digital.life I. going digital . III. business.digital IV. identity.digital II. lifestyles digital V. living the digital world available december 2006 www.itu.int/digitalife/ 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU t h a n k s lara.srivastava@itu.int international telecommunication union 16th October 2006 EU RFID Conference 2006 Copyright 2006 ITU