Results: RFID and Identity Management in everyday life - ITAS

More documents

Recommendations

Info

In order to get an OV-chipkaart ourselves we needed to fill in an application form requesting many personal details: name, address, bank account, signature and a copy of our passport. This is quite surprising, as the card is a debit system and not a credit system. Money can be put on the card through machines placed at the stations and we did not see why identification was necessary. According to Translink Systems anonymous card should also be available in time, these were not offered yet. Another OV-chipkaart was sent automatically to us by the Dutch Railways, replacing a discount card we already possessed and for which we already provided personal data. The accompanying letter proclaimed we were now “prepared for a new way of travelling”. It also stated that, once we waved our card the first time at the reader, this act would be interpreted as an opt in for the user agreement. For details on this agreement we were referred to a website. Although this action can be interpreted as service in order to make the transition more smooth, it is a subtle way to get a personalised card more accepted than the anonymous card. On the subway, the OV-Chipkaart worked quite well. When holding our card near the Translink sign, the reader bleeped, displayed the current value of the card, stated we had checked in and wished us a pleasant journey. We did however not have to use the card to open the gates. These were left open for people still using the paper-based tickets. On the buses however many problems occurred. Sometimes we could not check in. The readers just gave a mysterious code: 707. Most of the bus drivers could not handle the malfunction, made some jokes about them and offered us a free ride. On other occasions, the readers did not sufficiently check us out, resulting in a payment for as far the bus would go. One of our researchers made 40 trips and accounted more than of the transactions failed. A bus driver, helping her out on many of these events, called her one night at home to inquire if everything was sorted out with the card. This account demonstrates the link between the card and the personal information in the database has not been sufficiently secured yet. Finally, at one occasion we were checked for fare dodging by a controller with a hand held reader. We then found out the data on the card also contain our date of birth – yet another bit of identity being managed by the maintainer without our consent. ID issue The OV-chip card is used both for payment and profiling traveller’s behaviour. Users have two choices in managing their identity: being profiled while travelling with an personal card or anonymous travelling with an anonymous card and fewer possibilities. The case revolves around the question whether travellers have a fair and clear opt in or opt out choice. Sources 01. “NS schendt privacy” In: Volkskrant. 20 February 2006. 02. ‘CBP legt OV-chipkaart aan banden’. In: Bits of Freedom nieuwsbrief, Nr. 4.5, 6 March 2006 (http://www.bof.nl/nieuwsbrief/nieuwsbrief_2006_5.html , visited 29 June 2006). 03. ‘Pechtold ziet geen problemen met RFID’. In: Automatiseringgids, 11 May 2006 04. CBP ‘Visie CBP chipkaart’, 16 November 2005 (http://www.cbpweb.nl/downloads_overig/z2004- 0850_ov_chipkrt_visie_CBP.pdf?refer=true&theme=purple, visited 20 June 2006). 05. CBP ‘brief over chipkaart’ (http://www.cbpweb.nl/downloads_uit/z2004- 0850.pdf?refer=true&theme=purple, visited 20 June 2006). 06. ‘Waarom vertrouwen jullie de klant niet?’. In: Volkskrant, 20 February 2006 (http://www.volkskrant.nl/binnenland/article224714.ece/Waarom_vertrouwen_jullie_de_klant_niet , visited 20 June 2006). 07. Ejure.nl, ‘Commentaar eJure op de OV chipkaart’ (http://www.ejure.nl/mode=display/downloads/dossier_id=49/id=371/Commentaar_eJure_op_de_OV_c hipkaart.pdf, visited 26 June 2006). 08. ‘OV-chipkaart ook in Amsterdam te gebruiken’, 31 July 2006 (http://www.clubmetro.nl/index.php?actie=nieuws&c=2&id=61561, visited 2 August 2006). 09. http://www.ov-chipkaart.nl (visited 22 June 2006). 10. http://www.verkeerenwaterstaat.nl/Images/G0-besluit%20OV-Chipkaart_tcm195- 160470.pdf?dossierURI=tcm:195-15678-4 (visited 26 June 2006). 11. ‘Ook tram-, bus- en metrovervoer wil gegevens opslaan’. In: Telegraaf, 21 February 2006 (http://www.telegraaf.nl/binnenland/33944341/Ook_tram___bus__en_metrovervoer_wil_gegevens_op slaan.html (visited 26 June 2006). 12. ‘Spitsreiziger 10 procent duurder uit’. In: De Volkskrant, 11 April 2006 (http://www.volkskrant.nl/binnenland/article278824.ece/Spitsreiziger_10%C2%A0procent_duurder_uit , visited 11 July 2006). 13. LOCOV (2005) Advies kaartproposities OV-chipkaart, 26 April 2005, http://www.minvenw.nl/cend/overlegorganen/locov/uitgebrachte_adviezen/2005/Index33.aspx#0 (visited 23 June 2006). 14. ‘OV-chipkaart mag vervoer niet duurder maken’, 12 April 2006 (http://www.consumentenbond.nl/nieuws/nieuws/Archief/2006/4093170?ticket=nietlid, visited 11 July 60
2006). 15. ‘Consumentenorganisaties willen uitstel besluit OV-chipkaart’, 11 May 2006 (http://www.consumentenbond.nl/nieuws/nieuws/Archief/2006/4339524?ticket=nietlid visited, 11 July 2006). 16. ‘Doorgaan met OV-Chipkaart’, 28 June 2006 (http://www.rover.nl/nieuws/berichten/berichten.php?id=ber060629, visited 11 July 2006). 17. ‘Extra jaar voor invoering OV-chipkaart hard nodig’, 13 June 2006 (http://www.rover.nl/nieuws/berichten/berichten.php?id=ber060613, visited 11 July 2006). 18. ‘Als de poortjes maar hufterproof zijn’. In: NRC Handelsblad, 30 May 2006 (http://www.nrc.nl/binnenland/article335132.ece, visited 22 June 2006). 19. The chip card for public transport in The Netherlands. 2004, EastWest (http://www.eastwestconsortium.nl/downloads/presentation.pdf , 28 July 2006). 20. Kamerstuk 2003-2004, 23645, nr. 061 21. Kamerstuk 2003-2004, 23645, nr. 074 22. Kamerstuk 2003-2004, 23645, nr. 074, Bijlage 2511 23. Kamerstuk 2004-2005, 23645, nr. 078 24. Kamerstuk 2004-2005, 23645, nr. 078, Bijlage 3135 25. Kamerstuk 2004-2005, 23645, nr. 084 26. Kamerstuk 2004-2005, 23645, nr. 085 27. Kamerstuk 2004-2005, 23645, nr. 088 28. Kamerstuk 2004-2005, 23645, nr. 093 29. Kamerstuk 2004-2005, 23645, nr. 095 30. Kamerstuk 2004-2005, 23645, nr. 101 31. Kamerstuk 2005-2006, 23645, nr. 111 32. Kamerstuk 2005-2006, 23645, nr. 114 33. Kamerstuk 2005-2006, 23645, nr. 119 34. Kamerstuk 2005-2006, 23645, nr. 123 35. Kamerstuk 2005-2006, 23645, nr. 135 36. Kamerstuk 2005-2006, 23645, nr. 136 37. Kamerstuk 2005-2006, 23645, nr. 139 38. Kamerstuk 2005-2006, 23645, nr. 141 39. ‘Stand van zaken invoering OV kaart’ (http://www.verkeerenwaterstaat.nl/Images/br%2E873%20stand%20van%20zaken%20invoering%20O V-Chipkaart%20- %20%20%20%20www%2Everkeerenwaterstaat%2Enl%20cend%20bsg%20brieven%20data_tcm195- 134235.pdf?dossierURI=tcm:195-15678-4, visited 26 June 2006). 40. ‘Strippenkaart wordt OV-chipkaart’. In: Trouw, 28 June 2006 (http://www.trouw.nl/laatstenieuws/ln_binnenland/article362227.ece/Strippenkaart_wordt_OVchipkaart?backlink=true (29-06-06). 41. RET verzamelt reizigersinfo met chipkaart’. In: AD, 18 June 2006 (http://www.ad.nl/rotterdam/article413455.ece , 22 June 2006). 42. ‘Reactie van CBP op E-jure over OV’ (http://www.ejure.nl/downloads/dossier_id=49/id=371/show.html , visited 26 June 2006). 43. ‘Axalto selected for world's first national project covering all transport modes’, 27 July 2004 (http://www.rfidnews.org/news/2004/07/27/axalto-selected-for-worlds-first-national-project-covering-alltransport-modes/, visited 28 July 2006). 44. ‘Nederland open voor OV-chipkaart’, 11 november 2003 (http://www.tns-nipo.com/, visited 11 July 2006). 45. KST 23645, 141, bijlage 1 46. KST 23645, 141, Bijlage 2 47. KST 23645, 141, Bijlage 3 48. KST 23645, 141, Bijlage 4 49. KST 23645, 141, Bijlage 5 50. KST 23645, 141, Bijlage 6 51. ‘OV-chipkaart van start zonder duidelijkheid over privacy’. In: Bits of Freedom nieuwsbrief, Nr. 4.13, 21 June 2006 (http://www.bof.nl/nieuwsbrief/nieuwsbrief_2006_13.html, visited 31 July 2006). 52. http://nl.wikipedia.org/wiki/OV-chipkaart (visited 1 September 2006). 53. http://forum.trosradar.nl/viewtopic.php?t=24738&postdays=0&postorder=asc&start=30&sid=53f4c33df 9a33cdf31dcc10abc280711 (visited 8 September 2006). 54. http://tweakers.net/nieuws/43150/Bits-of-Freedom-twijfelt-aan-privacywaarborgen-OV-chipkaart.html 61
Page 1 and 2:
ETAG European Technology Assessment
Page 3 and 4:
Contents PREFACE...................
Page 5 and 6:
Introduction: when RFID becomes a p
Page 7 and 8:
Aim and methodology This research a
Page 9 and 10: Results: RFID and Identity Manageme
Page 11 and 12: ferries throughout the whole Nether
Page 13 and 14: Going to work: access and presence
Page 15 and 16: uilding. The system then provides a
Page 17 and 18: our identity as paying customer. Me
Page 19 and 20: sensitive link in the chain: custom
Page 21 and 22: All in all, there is not much going
Page 23 and 24: popular matches. They can also be a
Page 25 and 26: Barcelona director Chase foresees a
Page 27 and 28: than just border control. Although
Page 29 and 30: Discussion: multiple identities in
Page 31 and 32: Sources Sources on specific case st
Page 33 and 34: Appendix: case studies 33
Page 35 and 36: About a year after the opening of t
Page 37 and 38: 12. http://www.intel.com (visited 2
Page 39 and 40: The retailer has chosen for minimal
Page 41 and 42: visited 14 July 2006).1. ‘KLM en
Page 43 and 44: has two reasons; one is the busines
Page 45 and 46: Case #19: FIFA World Cup Germany Ti
Page 47 and 48: Case ID 23, level 3 Title Passport
Page 49 and 50: e used. But this has not yet been d
Page 51 and 52: (http://www.volkskrant.nl/binnenlan
Page 53 and 54: Case ID # 29, level 1 Title AMC Res
Page 55 and 56: long run, like narrow-casting and o
Page 57 and 58: Sources 13. http://www.kidspotter.c
Page 59: to the CBP commercial purposes alon
Page 63 and 64: Case #61: Transport for London (Oys
Page 65 and 66: Case ID # 66, level 2 Title Detenti
Page 67 and 68: (http://www.vdgp.nl/bbcms/assets/pd
Page 69 and 70: data is collected solely for employ
Page 71 and 72: 10. Centro Ricerche Fiat http://www
Page 73 and 74: Some statistical analysis can be do
Page 75 and 76: more matches.” A third reply we h
Page 77 and 78: Case ID # 91, level 1 Title TopGuar
Page 79 and 80: when they collect their tag. Accord
Page 81 and 82: (http://www.sanef.fr/fr/ecommerce/p
Page 83 and 84: (visited 10 September 2006) 83
Page 85 and 86: have several exits clustered togeth
Page 87 and 88: Case ID #128 , level 3 Title Mol Lo
Page 89 and 90: Case #130: Apenheul Case ID # 130,
Page 91 and 92: Case ID #131 , level 1 Title ExxonM
Page 93 and 94: Case ID # 133, level 1 Title Medixi
show all

Results: RFID and Identity Management in everyday life - ITAS

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?