a day on RFID - NFC applications and security - September 14th 2011

Become a member of the site to sign up for this event.

14-Sep-2011

THIS EVENT HAS BEEN CANCELLED FOR SEPTEMBER 14th and will be postponed to a later date.

Please contact us for more information at rfid2011@lsec.be

Updated Program

On September 14th, LSEC are organizing a day on applications for short range wireless technologies such as RFID and NFC.
Taken in the first place from a technology perspective, the idea is to present a multitude of applications and their respective challenges and opportunities that these technologies today bring into the market.
With a specific perspective on security in these evolving small wireless technologies. This is a unique event in Belgium, bringing together local specialists and experts from France, UK and other countries.

Introduction

RFID, Radio-Frequency Identification is a series of technologies describing a form of identification, using a wireless radio signal. Typically used with the purpose of tracking, tracing and identifying goods, increasingly it is also being used for people and constantly evolving both passive and active tags. Various companies are using RFID technologies for many different applications, from Wal Mart, public libraries, Airbus, public transportation and international passports; using goods identification for simple pricing, to access control to controlling identities.

According to market research organization IDTechEx, in 2010 the value of the entire RFID market was estimated to be $5.63 billion, up from $5.03 billion in 2009. This included tags, readers and software/services for RFID cards, labels, fobs and all other form factors. $3.27 billion of the total $5.63 billion is spent on non car like structures - from RFID labels to active tags.

Register now at Eventbrite : http://rfid2011.eventbrite.com/ and reserve your free seat prior to March 31st 2011.

More RFID tags than people on the planet

The biggest opportunity : item tagging, moving from price tags to bar codes to radio frequencies in identifiers
The biggest opportunity for RFID is the item level tagging of all things. This ultimately calls for a very low cost tag, something that some printed and chipless RFID technologies have already demonstrated or have the potential to achieve. Interestingly, few of the biggest chip RFID suppliers are working on these technologies. Instead, printers, packagers and electronics and materials companies are leading development, some seeing the ultra low cost RFID tag as just the beginning - with integrated ultra low cost components such as displays, sensors and power to come.

The RFID tagging of apparel is now the largest and fastest growing application of RFID in retailing, the retail supply chain and associated industries. About 100 organizations are tagging apparel in trials and rollouts. Just two - taken together - will buy 500 million tags yearly soon. Analysis indicates that systems and tag business concerned with apparel RFID will grow at double the rate of the overall RFID market through the next ten years.

RFID in the form of tickets used for transit will demand 380 million tags in 2010. The tagging of animals (such as pigs, sheep and pets) is now substantial as it becomes a legal requirement in many more territories, with 178 million tags being used for this sector in 2010. This is happening in regions such as China and Australasia. In total, 2.31 billion tags will be sold in 2010 versus 1.98 billion in 2009. Most of that growth is from passive UHF RFID labels.

The evolutionary landscape of active RFID

The term Active RFID incorporates many technologies including Real Time Locating Systems, Ubiquitous Sensor Networks and Active RFID with ZigBee, RuBee, Ultra Wide Band and WiFi. Active RFID, where a battery drives the tag, is responsible for an increasing percentage of the money spent in the burgeoning RFID market. It will rise from 13% of the total RFID market in 2010 to 25% in 2020, meaning a huge $6.02 billion market. If we include the market for cell phone RFID modules (another form of active RFID), the market is an additional $0.18 billion in 2010 and $1.6 billion in 2020.

Near Field Communication (NFC), and particularly RFID enabled mobile phones, with contactless smart cards and tickets are now reaching the mass market. Are these forms of RFID with advantages and disadvantages and different development paths, or is NFC a different market with more advanced types of applications and services? Expectations are that there will continue to be rapid growth of at least three alternatives for at least ten years. This follows 800 million Chinese acquiring contactless national ID cards in four years and over 70 million Japanese adopting RFID enabled, NFC compatible phones in three years. These were two of the fastest rollouts of electronic products in human history.

Near Field Communication (NFC), by which electronic devices communicate if held within a few centimeters of each other, is underpinned by global ISO specifications. It has attracted the attention of the largest telcos, transport companies, banks and others and new trials are frequently announced all over the world. Many trials confirm that we are all like the Japanese in seeking the convenience that such phones can offer. 
With the fading SIM-cards, throug NFC phones, suddenly Telecommunication Industries are being empowered once more for banking, wallet, ticketing and loyalty applications. Banks are cautious about letting their cards be mimicked by the phones and transport operators are cautious about the ticketing option being loaded.

Program Overview

During this seminar, we are aiming to bring some of the most interesting experts and applications around the table, focusing amongst other on business opportunities and challenges. These could include systems integrations, but also security. Security being one of the applications specifically sought for by short range wireless technologies, we will amongst other challenge the various systems and technologies and indicate that also in this domain, security could better be considered in the design stage.

Some of the following companies and applications have been identified :

• Real-Time Anonymised ID at the point of requirement - a challenge-response approach for an Authority to attest the authenticity of documents and certificates, by Techmatics, Janusz Adamson
• Industrial Identification, RFID Inc, Graham V. Smith – Vice President Europe
An overview of applications for RFID in vehicle identification, warehouses, conveyor belts, meat production facilities, AGV, factory floors and other industrial environments.
• Parallel Solutions, Applications for tracking and tracing of firefighters, children, patients , assets and records
Maintag, Readers, Tags, Low level management software, and other tools for an RFID environment
• NFC Projects in Caen, an overview of private and public proof of concept projects (Caen NFC City, Pay Mobile, Contactless Parking, Normandy Living Lab, ….),
key learning and developments, by Pôle TES
• RFID Security : Issues and Measures, by KU Leuven, COSIC, Dave Singhelee,
• NFC technologies and applications, by NXP Technologies, Phil Teuwen
• Some experiences from practical security challenges, KAHO St Lieven
• NFC and next generation RFID, an evolutionary landscape
• From chip and card to application and everything in between, resolving challenges for Systems Integration, Management and Maintenance Challenges
• Testing and controlling RFID and NFC developments and applications
• GloPass, the integrated solution for ID management, event management
• Integrating personal ID and Mobile ID Management, the challenge ahead
• …

Privacy in RFID and NFC, research activities from MSEC at KaHo St-Lieven, by Vincent Naessens, KAHO Sint-Lieven

This talk will give an overview of research activities in the domain of mobile security at MSEC, KAHO Sint-Lieven.  The research at MSEC is often conducted in collaboration with SMEs, large companies and governmental institutions in Flanders.  Hence, many cases originate from real challenges in industry and government.  The MSEC group works around emergent technologies and application domains for smartphones.  For instance, tamperproof modules (like secure elements and smart micro SD
cards) are used to increase the security level of mobile applications, terminals are extended with trusted platform modules to increase trust in the ecosystem, privacy-enhancing technologies (like anonymous credentials, local privacy policy enforcement modules...) lead to a better privacy level in existing applications… These technologies are relevant in many application domains: personalized health care, advanced physical access control systems, protection of money transfer cycle, supply chain and logistics ...  This talk will mainly focus on the new opportunities of secure solutions that exploit short range communication capabilities of smartphones (like optical communication and near-field communication). More information and an overview of research projects and activities at MSEC can be found on the following url:
http://www.msec.be/

About: Vincent Naessens is head of the research group “Security and Mobility (MSEC)” at KAHO Sint-Lieven since October 2006. The research group focuses on modelling secure, mobile environments. More specifically, his research focuses on e-ID technologies, privacy-enhancing technologies and the integration of these technologies in concrete applications.
Mobile environments often deal with resource-limited devices. The latter often has an impact on the building blocks and technologies that are selected to fulfill security, privacy and trust requirements. Special attention goes to architectural design of such environments. The research group often collaborates with other industrial and academic partners such as DistriNet, Dept. Computer Science at KULeuven and Dramco, Dept. Industrial Engineering at KAHO Sint-Lieven.
He received a master’s degree in Computer Science at the K.U.Leuven University in 1999. Immediately after his studies, he started working as a researcher in the DistriNet research group.  The topics of research he has been working on include: analysis, modelling and design of anonymous applications (anonymous communication, anonymous mail, anonymous publication systems, ...) and the study of techniques for controlled anonymity in various applications. He received his PhD degree in Computer Science at the faculty of Applied Engineering, K.U.Leuven in June 2006.

Types of applications discussed :

Passive RFID
• Drugs
• Other Healthcare
• Retail apparel
• Consumer goods
• Tires
• Postal
• Books
• Manufacturing parts, tools
• Archiving (documents/samples)
• Military
• Retail CPG Pallet/case
• Smart cards/payment key fobs
• Smart tickets
• Air baggage
• Conveyances/Rollcages/ULD/Totes
• Animals/Livestock
• Vehicles
• People (excluding other sectors)
• Passport page/secure documents
• Other tag applications

Active RFID / battery-assisted
• Pharma/Healthcare
• Cold retail supply chain
• Consumer goods
• Postal
• Manufacturing parts, tools
• Archiving (samples)
• Military
• Retail CPG Pallet/case
• Shelf Edge Labels
• Conveyances/Rollcages/ULD/Totes
• Vehicles
• People (excluding other sectors)
• Car clickers
• Other tag applications

Practical Details :

Wednesday, September 14th , 2011
Brussels, IBM Seminar Centre
Seminar and exposition
Free to attend, upon registration prior to May 30th; from June 1st and onwards, registration fee of 150 €
Free for LSEC Members and partners (European Security Innovation Network, Pôle TES, OASIS, Agoria, ISSA, ISACA, …) upon membership identification.

For more information, sponsoring and practical details please contact rfid2011@lsec.be.

Register now at Eventbrite : http://rfid2011.eventbrite.com/

Become a member of the site to sign up for this event.

Are you a leader in Security ? Do you want to share your expertise and join the Leaders in Security as a Core Expert Member ?
Contact us via email! Or call +32.16.32.85.41 for a direct contact and more information.
An information set and your Membership Welcome Pack awaits you.

 

Copyright LSEC vzw 2007-2008 with the support of the IWT.

LSEC vzw Kasteelpark 10 - 3001 Heverlee - VAT BE BE 478 045 395 - fax. +32.16.32.19.69 - info @ lsec.be

<< May 2012 >>

S M T W T F S
29 30 1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31 1 2

Expert: Cognitive Security

Providing detailed intelligence against highly sophisticated network attacks.

Expert: Courion

Leader in IAM Solutions

Expert: Oracle

Oracle Belgium & Luxemburg

Expert: Option

Wireless data security enablers

Expert: TNO

TNO Research and Innovation

Expert: Control & Protection

Automatisering SCADA, PLC; Meettoestellen en brandbeveiliging

Expert: Thales Group

Thales Group

Expert: On2It

Smart IT Security We Are On To It

Expert: Mobco

Mobile Fleet Management

Expert: TITANS

TITANS ICT Consulting

Expert: G Data

G Data Anti Virus Solutions

Expert: Outpost 24 - Vulnerability Management Made Easy

Outpost 24 - Vulnerability Management Made Easy

Expert: Regify - Trusted and Binding Secure eMail

Regify - Trusted and Binding Secure eMail

Expert: Mobila - Mobile Enterprise Applications

Mobile Enterprise & Applicatinos

Expert: Lancelot Institute

Lancelot Institute - Training in Information Security, IT- Risk & IT - Auditing

Expert: CSI Tools

CSI tools is an expert software solution provider specialized in powerful tools for IT architects and auditors who are focused on maximizing GRC project development efficiency in SAP environments.

Expert: Intrinsic-ID

Content Protection, Unique Device Identification, Key Storage, PUF Physical Unclonable Functions

Expert: Belgacom ICT

Belgacom ICT Security Solutions for Large, Medium and Small Enterprises

Expert: Qualys

On Demand Vulnerability Management and Policy Compliance

Expert: Trend Micro

Securing your web world

Expert: Egemin

Egemin provides process and handling automation engineering and Secures Industry Automation

Expert: AEP Networks

More than 60 countries ... protected by AEP Networks

Expert: Palo Alto Networks

Next Generation Firewalls

Expert: Atos Origin Belgium & Luxemburg

A leading IT services provider. Ranks 1 in telecom outsourcing. Via Atos Worldline specialized in financial transactions.

Expert: Websense

Leading provider of unified content security

Expert: CA Technologies

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our security management products.

Expert: CA Technologies

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our security management products.

Expert: Axl-Trax

axl & trax are highly qualified experts in providing leading edge GRC services for SAP

Expert: VintiQ

VintiQ - Security Management Services

Expert: T-Systems Belgium

T-Systems is Deutsche Telekom's corporate customer arm.

Expert: LIN.K nv - LINKID

LIN.K is a provider of online user authentication, identification with the system LINKID

Expert: Devoteam Belgium

Devoteam Belgium, one of the major European ICT consultancy specialists with offices in 23 countries

Expert: CHB Technologies - Celadon Hailstone Biometrics

Celadon Bailstone Biometrics

Expert: Barracuda Networks

Worldwide supplier of email and internet security

Expert: Sophos

Sophos is the Utimaco is a leading global provider of data security solutions, enabling mid- to large-size organizations to safeguard their data assets against intentional or unintentional data loss, and to comply with privacy laws.

Expert: Dimension Data

Dimension Data

Expert: Bull

Bull

Expert: Check Point Software Technologies

Check Point Software Technologies

Expert: MMS-Secure

MMS-Secure nv, a distributor with a specific focus on network and systems security

Expert: F-Secure Corporation

F-Secure - Fastest Focused Anti-Virus Protection

Expert: C-Cure

C-Cure are Information Security architects already since 1998

Expert: IS4U

IS4U - Cronos specializes in Identity and Access Management

Expert: UCL Crypto Group

The Crypto Group of UCL, the UC of Louvain-la-Neuve is a research group specialized in cryptography and information security.

Expert: eID Company

eID company provides a flexible easy to integrate eID in any web application. Access to eID as a webservice.

Expert: ACA IT-Solutions

ACA IT-Solutions, end to end IT solutions and IDM Expert. Probably the largest and most successful independent J2EE solution provider.

Expert: RSA - Security Division of EMC

RSA - The Security Division of RSA. One of the leading companies in the world in IT Security. Enterprise wide Data Security solutions, suites and Services.

Expert: Unisys

Security Unleashed – At Unisys, we’re looking at security in an entirely new way.Security is no longer a defensive measure. It’s an enabling catalyst for achievement.Unisys Secure Business Operations help to unleash your full potential.

Expert: Zion Security

ZION SECURITY is the leading European application security company. Our mission is to secure your business value by securing your business applications.

Expert: Zetes

For those who want to see the difference!

Expert: Vasco

VASCO designs, develops, markets and supports patented User Authentication products for e-business and e-commerce.

Expert: SUN Microsystems

Everyone and everywhere connected to the network.

Expert: Security4Biz

Security4Biz offers ICT security consultancy services.

Expert: SecurIT

The value proposition to our customers is the competence and experience of highly qualified people, combined with best-in-class solutions from leading suppliers, and our entire focus on Identity and Access Management.

Expert: Sealed

Expert in implementation of e-Security, e-Proofs and e-ID within the management of business & document flows & processes, or within the management of your enterprise content in the broad sense.

Expert: McAfee

McAfee is the world largest dedicated security companY;

Expert: NXP (founded by Philips)

Sense & simplicity. Help customers to transform initial ideas into competitive products and cost-efficient manufacturing solutions within healthcare, lifestyle and technology.

Expert: KPMG

PMG Information Risk Management (IRM) focuses on inherent risks in technology systems used to support your business objectives and grow your business.

Expert: EMC2

EMC Corporation is the world's leading developer and provider of information infrastructure technology and solutions.

Expert: Deloitte

In addition to the qualities of a leading Belgian audit and consulting firm, Deloitte is different through the values it shares daily with clients and employees.

Expert: Certipost

Specialist in secured electronic document exchange for companies, the state, and for residential customers.

Expert: Ascure

World class information risk management services!

Expert: Verizon Business

Verizon Business is now the leading provider of managed security services worldwide with acquisition of Cybertrust.

Expert: K.U. Leuven

Computer Security and Industrial Cryptography (COSIC): Cryptography to protect data against passive and active fraud.

Expert: ATOS Worldline nv

Specialist in end-to-end secure payment systems.

Expertise: UTM

UTM - Unified Threat Management

Expertise: End Point Security

End Point Security

Expertise: DLP - Data Leakage, Data Loss Prevention and Protection

DLP - Data Leakage, Data Loss Prevention and Protection

Expertise: SOA - Service Oriented Architectures

Expertise: Identity Management

Identity Management (IdM) enables organizations to facilitate and control their users' access to critical online applications and resources — while protecting confidential personal and business information from unauthorized access

Expertise: Crypto

Cryptography - Cryptografie - Cryptographie

Expertise: Secure Application Development

Secure Application Development. Security does not only start at user name and password login, from the first entry of a software security needs to be integrated.

Expertise: RFID

passive and active low-cost wireless tags

Expertise: Application Security

encompasses measures taken to prevent exceptions in the security policy of an application or the underlying system

Expertise: Wireless Security

Expertise: Appliances

protect computer networks from unwanted data traffic, intruders, email spam, enforce policies, and may also be used to create and manage VPNs.

Expertise: Access Control

the ability to permit or deny the use of something by someone.

Expertise: Risk and Vulnerability Assessment

process of identifying and quantifying vulnerabilities in a system..Cataloging assets and capabilities (resources) in a system

Expertise: Penetration Testing

A method of evaluating the security of a computer system or network by simulating an attack by a malicious user, commonly known as a hacker.

Expertise: Physical Security

describes measures that prevent or deter attackers from accessing a facility, resource, or information stored on physical media. It can be as simple as a locked door or as elaborate as multiple layers of armed guardposts.

Expertise: Remote Access

computer program that lets you access your PC from another PC via the Internet, LAN, or phone connection and work on your computer ...

Expertise: Security Policy

security policy is a definition of what it means to be secure for a system, organization or other entity. For systems, the security policy addresses constraints on functions and flow among them, constraints on access by external systems and adversaries

Expertise: Anti-Virus

Software that detects, repairs, cleans, or removes virus-infected files from a computer.

Expertise: Spyware

Software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes.

Expertise: Authorization

The process of enforcing policies: determining what types or qualities of activities, resources, or services a user is permitted. Usually, authorization occurs within the context of authentication.

Expertise: Authentication

Provides a way of identifying a user, typically by having the user enter a valid user name and valid password before access is granted. The process of authentication is based on each user having a unique set of criteria for gaining access.

Expertise: Computer Virus

Program or programming code that replicates by being copied or initiating its copying to another program, computer boot sector or document.

Expertise: Smart Cards

smart card or chip card, is defined as any pocket-sized card with embedded integrated circuits which can process information such as a SIM for a mobile phone or an eID card

Expertise: UTM and Appliances

Unified threat management (UTM) is a term which is used to describe network firewalls that have many features in one box, for example junk e-mail filtering,or anti-virus capability, along with the traditional activities of a firewall.

Expertise: NAC

Network access control (NAC) is a method by which hardware and software grant access to enterprise network resources after first authorizing the user and device and verifying the device's compliance with the enterprise's security policy.

Expertise: Biometrics

Biometrics (ancient Greek: bios ="life", metron ="measure") is the study of methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits.

Expertise: DRM

Expertise: eID - Electronic Identity Cards

The electronic identity card (eID) is an official electronic proof of one's identity. It also enables the possibility to sign electronic documents with a legal signature.