Implanted Microchips: a Bridge too far

September 27, 2017

Blog

David Pollington, Technical Director, GSMA

Among the more striking items in technology news last month was the announcement by Three Square Market, a company in Wisconsin that is preparing to install RFID microchips into its employees. The firm expects to place devices about the size of a grain of rice into over 50 employees. These can then be used to access buildings, rooms, and computers, as well as to pay for items in company facilities.

As you might expect, concerns have been raised over privacy and if the whereabouts of an employee could be tracked remotely, or whether information on their activities could be stolen.  The CEO, Todd Westby, insists that this is impossible, stating: “This device is only readable if you’re within six inches of a proximity reader, the chances of the chip being hacked is nil to none.”

However, these assurances over security are overconfident. Hacking RFID devices is much easier than is often thought possible. While the move to higher-frequency RFID devices over the last three years has improved their security potential, the risks have not been eliminated. Successful identity theft from RFID chips is still possible by using covert readers, which can then be used to clone devices or steal identities.

There is also an unavoidable ethical element to consider here. Concerns over the social and psychological significance of allowing an employer literally to enter one’s body cannot easily be dismissed as Luddite.  As discussions continue in the tech world and beyond about the ‘always on’ work culture of modern society, might body modifications of this kind not prove a bridge too far?

The prospect of leaving the office, but taking a crucial part of it home with you in your own body, may remind some of the unnerving line from the Eagles’ song Hotel California, which warned that “you can check out any time you like, but you can never leave.” The bearer may find, still more if such devices can be tracked or compromised, that they are unable to truly escape their professional environment – even while on holiday.

These concerns can be addressed while retaining the benefits of the technology.  By relying on a device everyone already has with them anyway: their mobile phone. New mobile technologies offer a convenient and secure way for a person to authenticate themselves without the need for additional physical implants. For example, Mobile Connect can be set up to authenticate an individual in a number of ways: from behavioural information such as location and usage history, to the use of simple PINs, and, crucially, biometric information. If the RFID chip’s strongest claim is that it cannot be lost, we can be assured that we are also unlikely to lose our fingertips or retinas.

In addition, with the consensus that biometric solutions will be ubiquitous in the years to come, the huge amount of investment going into them now will strengthen both their affordability and effectiveness. We should not forget that biometrics were designed in response to concerns over the adequacy of chips to adequately verify identity.

Finally, and perhaps most simply, there is the bottom line. When asked about the cost of such implants, Mr Westby considered them highly economical at $300 per piece. For companies seeking to minimise the costs of their security arrangements, this may not seem a modest sum. However, by using the phone employees already have, the cost base is much lower.

Maintenance costs are minimised too: where there is an issue to be resolved in mobile technology, a simple update will typically suffice. For chips implanted into the body, a physical recall process will need to be undertaken, to the greater cost and inconvenience of all concerned.  In any case, as with any technology, the degree of standardisation dictates much of the practicability – and thereby cost-effectiveness – of the solution in question.

There is simply no universally-agreed chipset to make such solutions workable on a mass scale. With the privacy concerns of human microchips along with the ease of access of mobile, there is no question: use mobile networks to put services securely in people’s hands, just not literally.

Back

Mobile Authentication: Capitalising on China’s Identity Market China Mobile have firmly established themselves in the digital identity market. The network operator’s identity service, Mobile Authentication, offers a range of authentication...

Read more | See all Identity Resources

Mobile Connect in the GSMA Innovation City @MWC18 Mobile Connect, the mobile industry’s identity solution, will be present at Mobile World Congress’ GSMA Innovation City where attendees will have the opportunity to e...

Read more | See all Identity Resources

Presentations from the Mobile Connect Summit Singapore The Mobile Connect Summit was a forum for all stakeholders engaged with digital identity and  addressed the status of Mobile Connect deployments both globally and in the Asian m...

Read more | See all Identity Resources

Mobile Connect Privacy Principles The Mobile Connect Privacy Principles are intended to guide the use of personal information in Mobile Connect branded services. Mobile Connect enables verified authentication, au...

Read more | See all Identity Resources

MWCA Mobile Connect Seminar Presentations The Mobile Connect Seminar at the 2017 Mobile World Congress Americas was designed for operators and digital service providers looking to offer secure identity services to their...

Read more | See all Identity Resources

Operator cooperation in South Korea has created a successful identity To ensure broad service provider adoption, SKT and the other Korean operators realised that they needed to offer a single identity solution with full market coverage, and subsequ...

Read more | See all Identity Resources

MWC18: Operators Poised to make Unique Contribution to Securing Trust As the digital economy grows, and the Internet of Things expands, digital identity authentication will play an increasingly routine role in the lives of billions around the world...

Read more | Visit Identity Blog

Securing Trust in India’s Digital Citizenship Jai Rajaraman, Vice President and Global Head of Technology User privacy has been at the forefront of debates over digital identity since their inception.  The case of Aadhaar, ...

Read more | Visit Identity Blog

Digital Identity: What to Expect in 2018 2017 was a profoundly important year in digital identity.  The tide turned decisively against usernames and passwords, with more than 86% of consumers expressing doubts over the...

Read more | Visit Identity Blog

China Mobile Now Scales up GSMA Mobile Connect for Global Authenticati China Mobile have announced their intention to advance in the digital identity market Sihan Bo Chen, Head of Greater China, GSMA A steady rise in spam and fraudulent activity in ...

Read more | Visit Identity Blog

Is Secret Data Trawling a Viable Way to Conduct the Census? Marie Austenaa, Head of Business Development, Identity, GSMA Mobile users are increasingly aware of the myriad possibilities their phones present. Since the arrival of smartphone...

Read more | Visit Identity Blog

Taiwan’s Launch of Mobile Connect Represents Maturity of Asia’s Id Mobile Connect has now launched in Taiwan, where the digital identity solution is finding a range of applications in the public sector.  Through collaboration between Taiwanese ...

Read more | Visit Identity Blog

PSD2 & GDPR Forum in Amsterdam February 19, 2018 The GSMA’s expert on financial regulation, Helene Vigue, will be discussing PSD2’s requirements and how Mobile Connect offers convenient and securely compliant solutions at t...

Read more | See all Identity Events

Smartex – Mobile & Identity Forum February 20, 2018 Marta Ienco, Head of Government and Regulatory Affairs of GSMA, will present at the quarterly Smartex meeting on the ‘Provisioning eID in the phone’, where topics suc...

Read more | See all Identity Events

Mobile Connect at Mobile World Congress 2018 February 26, 2018 The GSMA’s Identity team will be present at this year’s Mobile World Congress 2018, where Mobile Connect, the mobile industry’s identity solution, will be showc...

Read more | See all Identity Events

MWC18 Seminar: Data Attributes as the New Digital Identity Currency February 26, 2018 During this seminar we will focus on how attributes are becoming the new digital identity currency and how cross border identity transactions will shape ecommerce. A number of di...

Read more | See all Identity Events

MWC18 Seminar: How are Identity Regulations Shaping the Digital World? February 27, 2018 The seminar will focus on how technology and digital services are increasingly facing new challenges and opportunities to keep pace with today’s digital transformation. During ...

Read more | See all Identity Events

Contact GSMA Legal Email Preference Centre Copyright © 2018 GSMA. GSM and the GSM Logo are registered and owned by the GSMA.