More or less ? Iuridicum Remedium Does the anonymous (RFID) cost more to implement ? Case study - OpenCard Prague, 750 000 000 CZK (30 million EUR) project

Iuridicum Remedium

Does the anonymous (RFID) cost more to implement ?

Case study - OpenCard Prague, 750 000 000 CZK (30 million EUR) project

Get a card against your IDcard Incured costs: Private data management Two buildings for customer service Huge management task Tax payers money

Incured costs:

Private data management

Two buildings for customer service

Huge management task

Tax payers money

Versus ”get a in a newsagent” Costs: Apprrox $1 for a card Not a huge loose when you loose it No privacy protection issues

Costs:

Apprrox $1 for a card

Not a huge loose when you loose it

No privacy protection issues

Implementation Multipurpose card – suppliers of services can get their own folder and if they need an identity management, they do it themselves MIFARE DESFire Ev1 – Random ID Or, ZEROLEAK

Multipurpose card – suppliers of services can get their own folder and if they need an identity management, they do it themselves

MIFARE DESFire Ev1 – Random ID

Or, ZEROLEAK

Speed and security Security of the communication with reader must be done by the RFID chip Security and authenticity of the data, protection against the fraud must be done on the application level (application = the thing which the RFID Reader is connected to) Speed – Moore's Law ? The chip doesn't have to cost $1. $3 would be just as fine.

Security of the communication with reader must be done by the RFID chip

Security and authenticity of the data, protection against the fraud must be done on the application level (application = the thing which the RFID Reader is connected to)

Speed – Moore's Law ? The chip doesn't have to cost $1. $3 would be just as fine.

Lessons learned WRONG: Authentication versus Identification WRONG: Centralized management WRONG: Techologies exist, but are ignored WASTED: 30 million EUR

WRONG: Authentication versus Identification

WRONG: Centralized management

WRONG: Techologies exist, but are ignored

WASTED: 30 million EUR

Thank you Marek Tichy Iuridicum Remedium [email_address]

Marek Tichy

Iuridicum Remedium

[email_address]