ETSI TISPAN#18-WGs18WTD100a1

Sophia Antipolis, 30 June – 02 July 2008

18WTDxxx

ETSI TISPAN
New Work Item Form / Form to be used when proposing new WorkItems for adoption onto the ETSIWorkProgramme.
Please be aware that, upon starting a new WI to review an ETSI document, work must be started on the latest version of the document, i.e. that published by ETSI.
To obtain the latest Word version of a document, contact
Work Item details
Which Technical Body is responsible?
TISPAN / Project:RFID
Working Group:7
WI reference number (if known):
Version
(number will be allocated by Secretariat if not shown) / Will an STF be requested?
STF number (if known):
EC mandate number (if relevant): BC-
Working title:
RFID; Security; Security and privacy protection for users and operators of RFID devices and RFID Networks in the scope of the Internet of Things / Scope of work to be undertaken:
Development of an EN for the enhanced privacy & security of RFID & RFID networks supporting the Future Internet of Things (FIT). The programme of work is to cover the security and privacy risks associated with the various RFID devices and readers (passive, battery supported). On the reader and network side of RFID/FIT issues related to personalisation and traffic analysis shall be addressed. The EN has to take into account the attachment frequency of devices and readers to networks. The resulting EN should follow the development guidelines found in TR 187 011, EG 202 387 and also the risk analysis method in TS 102 165-1 leading to its possible use in development of a protection profile. Consideration shall be given in the EN to regulatory matters (e.g. support of R&TTE article 3.3c/d). Further considerations are found in the Remarks section of this proposal.
Rapporteur (named individual person):
name: ScottCadzow
organisation:C3L
postal address:
postcode
city
country
e-mail:
phone:+
fax:+ / Supporting ETSI Member organisations:
(name at least four)
BMWi
France-Telecom, (Orange)
Hitachi
Cadzow Communications Consulting Ltd
Deliverable document details:
What type of document will be produced?
choose from list:EN
or enter explicitly:
Proposed Harmonized Standard? / Is it a new document or a revision of an existing one?
NewRevision
If a revision, state the deliverable (e.g. ETS300987ed1) being revised: edition / version
Formal title
of deliverable: / TISPAN; RFID; Security and Privacy
Work schedule:
Milestone / Target date
Date of creation of this Work Item / July 08
Date Work Item adopted by Technical Body / July 08 already adopted?
Start of work date: / August 08 already started?
Progress milestones:
ToC and Scope:
Stable Draft:
WG approval:
approval of deliverable by TISPAN: / September 08
March 09
June 09
July 09
Remarks: / The scope of this work is to include the following items:
  • RFID active (battery powered) systems
  • RFID passive (air interface powered) systems
  • Where many RFID tags are loosely connected to many RFID readers
  • Where RFID tags are or maybe unknown to RFID readers and visa versa
  • Including methods for privacy and fraud protection
  • Technical standards and possibly guidelines too
  • Protection for personal (individuals or organizations) information
  • Private data rights:
  • Creation
  • Deletion
  • Modification
  • Use
  • Transfer
  • Considering the classification of RFID system or RFID system components
  • Evaluating and structuring the use of naming and addressing
  • RFID tags with names
  • RFID readers with addresses
  • RFID readers with names
  • Risk analysis
  • Practicality
  • Feasibility
  • Contribution of standard to objectives
  • Delivery of conformance requirements

Comments:

  • Referencing R&TTE Article 3.3.c & d directive
  • It is proposed that this project prepares a non harmonized standard but which is possible to convert to a harmonized standard in the future

Page 1 of 3