Introduction
Radio frequency identification (RFID) technology is an effective method of storing and transmitting information that is becoming increasingly popular among users. Chips are being integrated into credit cards, business cards, and IDs to make it easier to access services. At the same time, this technology partially undermines data protection measures, posing a threat to user security. Therefore, in this paper, using a case study as an example, the key problems and opportunities for ensuring the security of holders when using RFID chips are analyzed.
Security Issues
RFID has significant benefits for its owners compared to other technologies. For example, the speed of operation and transmission of information using radio frequencies is much higher (Munoz-Ausecha et al., 2021). Moreover, they offer additional functionality, including the ability to read a holder’s information without line of sight and adaptability to user needs.
However, it is believed that the use of RFID chips may pose a security risk to cardholders’ data. These risks include counterfeiting, interception, tracking, tampering, denial-of-service attacks, viruses, and RFID skimming (Kumar et al., 2021). Credit cards, passports, and other forms of identification require additional measures to prevent this criminal activity.
One significant security concern is the risk of third parties gaining access to users’ confidential information. For example, in the case study, Sara, having received a new business card with an RFID tag, was skeptical of it due to privacy and security concerns. In fact, the RFID tag stores all the user’s information, which fraudsters can obtain for criminal purposes because the technology requires no input; theft of personal information can occur at a distance without users being aware of it (Kumar et al., 2021). Therefore, companies working with this technology must ensure that cardholder data is not stolen.
Another security concern is gaining access to users’ credit cards. Skimmers can use fund holders via wireless technology. Since using credit cards with an RFID chip often does not require additional data, such as a PIN code, users can access their funds (Najib et al., 2021). In a case study, it was this problem that caught Ashley’s attention, and she found a short-term solution. Aluminum foil can block information transmission and be used as a security measure. However, these actions should not be taken by users, but by companies providing services.
Reducing Threats
Understanding the benefits of RFID chips, many credit card companies are taking various precautions to minimize the risks. Such companies are constantly introducing card security shells and envelopes that act as locking devices (1st Security Bank, 2021). This technology dilutes radio frequencies, preventing thieves from obtaining private wireless information.
Blocking devices are placed in a wallet, shirt, or pants so that the RFID tag’s radio frequencies cannot be received from a distance. In addition, all credit card companies are constantly introducing innovations and new technologies, such as smart cards that do not contain a code on the back. This helps prevent the illegal use of credit cards in online payments (Najib et al., 2021). The code on the back of the card is often replaced with a special key, which only the cardholder has access to, and without which online transactions are impossible.
Moreover, innovative technologies help protect users from skimmers by preventing them from accessing accurate user information. For example, fraudsters may have general ideas about the cardholder, such as age or gender, but lack more critical information (El Gaabouri et al., 2023). These changes occur at the system level, and users do not actively participate in them.
Companies using serverless protocols reduce their vulnerability to privacy attacks by reducing the centralization of people’s data (El Gaabouri et al., 2023). Using servers usually creates a traceable path to their central location, making it easy to hack. Thus, a serverless protocol will significantly reduce security risks since it is untraceable. Moreover, this approach is more profitable for companies providing the service, since containing large amounts of information requires investing in large servers.
Using RFID by Criminals
Many criminals take advantage of people’s fear to make money. Some organizations may produce unreliable RFID-blocking products and sell them to unsuspecting consumers. Because these people are in constant panic and despair about the risks associated with RF technology, they will happily purchase blocking devices. Fraudsters may sell locking devices that do not perform the required functions or do not guarantee users’ complete safety.
At the same time, failure to use RFID can delay company operations or make it difficult for users to access services. Therefore, cardholders are forced to rely on other means to protect their data. However, El Gaabouri et al. (2023) note that companies specializing in RFID technologies are taking quite effective strategies to minimize threats to users. This is evidenced by both a decrease in chip-related criminal activity and the popularization of technologies across various fields.
Conclusion
To sum it up, radio frequency identification is a convenient technology that brings significant benefits to users’ daily lives. It optimizes storage and speeds up information transfer, so people can quickly access the services they need. However, it is essential to consider the security risks associated with obtaining confidential information or accessing cardholders’ funds. Although RFID chip companies are taking steps to protect users, people should also not forget about security measures.
References
1st Security Bank. (2021). What you should know about how RFID cards work — and how to protect them. The Seatle Times.
El Gaabouri, I., Senhadji, M., Belkasmi, M., & El Bhiri, B. (2023). A systematic literature review on authentication and threat challenges on RFID based NFC applications. Future Internet, 15(11), 354-369.
Kumar, A., Jain, A. K., & Dua, M. (2021). A comprehensive taxonomy of security and privacy issues in RFID. Complex & Intelligent Systems, 7, 1327-1347.
Munoz-Ausecha, C., Ruiz-Rosero, J., & Ramirez-Gonzalez, G. (2021). RFID applications and security review. Computation, 9(6), 69-88.
Najib, A. A., Munadi, R., & Karna, N. B. A. (2021). Security system with RFID control using E-KTP and Internet of Things. Bulletin of Electrical Engineering and Informatics, 10(3), 1436-1445.