iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
CEN

CEN/TR 16673:2014

(Main)

Information technology - RFID privacy impact assessment analysis for specific sectors

Information technology - RFID privacy impact assessment analysis for specific sectors

The scope of this Technical Report is to use the RFID PIA Framework as the basis for exploring issues with four major sectors involved with RFID:
—   libraries;
—   retail;
—   e-Ticketing, toll roads, fee collection, events management;
—   banking and financial services.
After specific sector research and consolidation of the results of industry workshops and seminars that take place in several EU Member States, this Technical Report will identify the characteristics that need to be taken into consideration by operators of RFID systems in the example sectors. In addition it will provide advice to operators in the sector on significant variants both in terms of technology and application data. This will enable the appropriate risk factors to be taken into account.
Based on the synthesis of the applications in the chosen sectors, this Technical Report will also identify a set of factors relevant to specific RFID technologies and features that will need to be taken into account in preparing a Privacy and Data Protection Impact Assessment for many RFID applications.

Informationstechnik - Verfahren zur Datenschutzfolgenabschätzung (PIA) von RFID für spezifische Sektoren

Technologies de l’information - Évaluation d'impact sur la vie privée des applications RFID dans des secteurs spécifiques

Informacijska tehnologija - Ocenjevanje vpliva RFID na zasebnost za določene sektorje

Področje uporabe tega tehničnega poročila je uporaba ogrodja ocenjevanja vpliva RFID na zasebnost kot osnovo za raziskovanje težav v štirih glavnih sektorjih, ki upravljajo z RFID: - knjižnice; - maloprodaja; - elektronska prodaja kart, pobiranje cestnin, pobiranje pristojbin, upravljanje dogodkov; - bančne in finančne storitve. Po raziskavi določenega sektorja in konsolidaciji rezultatov industrijskih delavnic in seminarjev, ki se odvijajo v več državah članicah EU, bo to tehnično poročilo določilo lastnosti, ki jih morajo upoštevati izvajalci sistemov RFID v podanih sektorjih. Poleg tega bo zagotovilo nasvete za izvajalce v sektorjih o pomembnih različicah tako na področju tehnologije kot tudi uporabe podatkov. To bo omogočilo upoštevanje ustreznih dejavnikov tveganja. Na podlagi sinteze uporabe v izbranih sektorjih bo to tehnično poročilo določilo tudi niz dejavnikov, ki so pomembni za posamezne tehnologije RFID in lastnosti, ki jih ni treba upoštevati pri pripravi ocene vpliva na zasebnost in varnost podatkov za številne uporabe RFID.

General Information

Status
Published
Publication Date
03-Jun-2014
ICS
35.240.60 - IT applications in transport
Technical Committee
CEN/TC 225 - AIDC technologies
Drafting Committee
CEN/TC 225 - AIDC technologies
Current Stage
6060 - Definitive text made available (DAV) - Publishing
Start Date
04-Jun-2014
Due Date
25-Feb-2014
Completion Date
04-Jun-2014
Mandate
M/436 - Standardisation mandate to the European Standardisation Organisation CEN, CENELEC and ETSI in the field of information and communication technologies applied to Radio Frequency Identification (RFID) and systems
Ref Project
SIST-TP CEN/TR 16673:2014 - Information technology - RFID privacy impact assessment analysis for specific sectors

Buy Standard

TP CEN/TR 16673:2014TP CEN/TR 16673:2014
PreviousNext
Technical report
TP CEN/TR 16673:2014
English language
38 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day
TP CEN/TR 16673:2014TP CEN/TR 16673:2014
PreviousNext
Technical report
TP CEN/TR 16673:2014
English language
38 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day

Standards Content (Sample)

SLOVENSKI STANDARD
SIST-TP CEN/TR 16673:2014
01-september-2014
,QIRUPDFLMVNDWHKQRORJLMD2FHQMHYDQMHYSOLYD5),'QD]DVHEQRVW]DGRORþHQH
VHNWRUMH
Information technology - RFID privacy impact assessment analysis for specific sectors
Informationstechik - Verfahren zur Datenschutzfolgenabschätzung (PIA) von RFID für
spezifische Sektoren
Technologie de l’information - Évaluation de l’impact sur la vie privée de la RFID pour
des secteurs spécifiques
Ta slovenski standard je istoveten z: CEN/TR 16673:2014
ICS:
35.020 Informacijska tehnika in Information technology (IT) in
tehnologija na splošno general
SIST-TP CEN/TR 16673:2014 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST-TP CEN/TR 16673:2014

---------------------- Page: 2 ----------------------

SIST-TP CEN/TR 16673:2014

TECHNICAL REPORT
CEN/TR 16673

RAPPORT TECHNIQUE

TECHNISCHER BERICHT
June 2014
ICS 35.240.60
English Version
Information technology - RFID privacy impact assessment
analysis for specific sectors
Technologies de l'information - Évaluation d'impact sur la Informationstechnik - Verfahren zur
vie privée des applications RFID dans des secteurs Datenschutzfolgenabschätzung (PIA) von RFID für
spécifiques spezifische Sektoren


This Technical Report was approved by CEN on 20 January 2014. It has been drawn up by the Technical Committee CEN/TC 225.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.





EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 16673:2014 E
worldwide for CEN national Members.

---------------------- Page: 3 ----------------------

SIST-TP CEN/TR 16673:2014
CEN/TR 16673:2014 (E)
Contents Page

Foreword .4
Introduction .5
1 Scope .6
2 Terms and definitions .6
3 Symbols and abbreviations .8
4 Brief description of an RFID system .9
4.1 Infrastructure of an RFID system .9
4.2 Components of an RFID system .9
4.2.1 Transponder/Tag.9
4.2.2 RFID reader or writer . 10
4.2.3 Backend system. 10
4.3 Characteristics of RFID technology compared to other data capture techniques . 10
5 Privacy concept in RFID-based applications . 11
5.1 Interaction between data protection, data security and privacy . 11
5.2 Data protection . 12
5.3 Data security . 13
5.4 Privacy . 13
5.5 General privacy risks .
...

SLOVENSKI STANDARD
SIST-TP CEN/TR 16673:2014
01-september-2014
Informacijska tehnologija - Ocenjevanje vpliva RFID na zasebnost za določene
sektorje
Information technology - RFID privacy impact assessment analysis for specific sectors
Informationstechik - Verfahren zur Datenschutzfolgenabschätzung (PIA) von RFID für
spezifische Sektoren
Technologie de l’information - Évaluation de l’impact sur la vie privée de la RFID pour
des secteurs spécifiques
Ta slovenski standard je istoveten z: CEN/TR 16673:2014
ICS:
35.040.50 Tehnike za samodejno Automatic identification and
razpoznavanje in zajem data capture techniques
podatkov
SIST-TP CEN/TR 16673:2014 en,fr,de
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------
SIST-TP CEN/TR 16673:2014

---------------------- Page: 2 ----------------------
SIST-TP CEN/TR 16673:2014

TECHNICAL REPORT
CEN/TR 16673

RAPPORT TECHNIQUE

TECHNISCHER BERICHT
June 2014
ICS 35.240.60
English Version
Information technology - RFID privacy impact assessment
analysis for specific sectors
Technologies de l'information - Évaluation d'impact sur la Informationstechnik - Verfahren zur
vie privée des applications RFID dans des secteurs Datenschutzfolgenabschätzung (PIA) von RFID für
spécifiques spezifische Sektoren


This Technical Report was approved by CEN on 20 January 2014. It has been drawn up by the Technical Committee CEN/TC 225.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.





EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TR 16673:2014 E
worldwide for CEN national Members.

---------------------- Page: 3 ----------------------
SIST-TP CEN/TR 16673:2014
CEN/TR 16673:2014 (E)
Contents Page

Foreword .4
Introduction .5
1 Scope .6
2 Terms and definitions .6
3 Symbols and abbreviations .8
4 Brief description of an RFID system .9
4.1 Infrastructure of an RFID system .9
4.2 Components of an RFID system .9
4.2.1 Transponder/Tag.9
4.2.2 RFID reader or writer . 10
4.2.3 Backend system. 10
4.3 Characteristics of RFID technology compared to other data capture techniques . 10
5 Privacy concept in RFID-based applications . 11
5.1 Interaction between data protection, data security and privacy . 11
5.2 Data protection . 12
5.3 Data security . 13
5.4 Privacy . 13
5.5 General privacy risks .
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

CEN
EN 17230:2020(Main)
Information technology - RFID in rail
SIST EN 17230:2021

The RFID tag location, tag data content and functional requirements have been developed for application on the main line railway networks. Other networks (such as metro) could apply to this document but are outside of its scope.
This document contains:
-   description of the RFID tag installation location;
-   description of the RFID tag data content;
-   description of the functional requirements in relation to the RFID tag track side reading performance.

  • Standard
    37 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
EN 16570:2014(Main)
Information technology - Notification of RFID - The information sign and additional information to be provided by operators of RFID application systems
SIST EN 16570:2014

1.1   General
The scope of this EN is to define the requirements for a Common European Notification Signage system to be used by operators of RFID application systems deployed within the EU Member States.
1.2   Objective
The objective of this EN is to provide enterprises, both large and small, with a common and accessible framework for the design and display of RFID notification signs.
In addition to the information placed on the sign, the framework includes the information policy - needed to answer enquiries received from individuals accessing the contact point noted on the sign itself. This minimizes the volume of information written on the sign.
This European Standard defines:
a)   the details of data and graphics that shall be included on the signage;
b)   the presentational requirements for the signage, taking account of the need;
1)   to provide a practical solution given constraints on print technique and print area;
2)   for a consistent common and recognisable signage;
c)   means to support accessibility;
d)   the structure and content of an information policy to meet the informational needs of individuals with respect to RFID privacy.
1.3   Applicability
This EN provides an application-agnostic framework which may be used by all enterprises operating RFID applications in the European Union.

  • Standard
    15 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    15 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
EN 16571:2014(Main)
Information technology - RFID privacy impact assessment process
SIST EN 16571:2014

This European Standard has been prepared as part of the EU RFID Mandate M/436. It is based on the Privacy and Data Protection Impact Assessment Framework for RFID Applications, which was developed by industry, in collaboration with the civil society, endorsed by Article 29, Data Protection Working Party, and signed by all key stakeholders, including the European Commission, in 2011.
It defines aspects of that framework as normative or informative procedures to enable a common European method for undertaking an RFID PIA.
It provides a standardized set of procedures for developing PIA templates, including tools compatible with the RFID PIA methodology.
In addition, it identifies the conditions that require an existing PIA to be revised, amended, or replaced by a new assessment process.

  • Standard
    103 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    103 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
EN 16656:2014(Main)
Information technology - Radio frequency identification for item management - RFID Emblem (ISO/IEC 29160:2012, modified)
SIST EN 16656:2014

This European Standard specifies the design and use of the RFID Emblem: an easily identified visual guide that indicates the presence of radio frequency identification (RFID). It does not address location of the RFID Emblem on a label. Specific placement requirements are left to application standards developers.
It also specifies an RFID Index, which can be included in the RFID Emblem and which addresses the complication added by the wide range of RFID tags (frequency, protocol and data structure). The RFID Index is a two-character code that provides specific information about compliant tags and interrogators. Successful reading of RFID tags requires knowledge of the frequency, protocol and data structure information provided by the RFID Index.

  • Standard
    28 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Standard
    28 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16669:2014(Main)
Information technology - Device interface to support ISO/IEC 18000-3
SIST-TP CEN/TR 16669:2014

The scope of this Technical Report is to assess the need to develop a Technical Specification to define an interface that provides RFID system control components with low-level access to RFID interrogators for the purpose of optimising RFID data access and control operations.

  • Technical report
    20 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16674:2014(Main)
Information technology - Analysis of privacy impact assessment methodologies relevant to RFID
SIST-TP CEN/TR 16674:2014

The scope of this Technical Report (TR) is to identify methodologies that are used for, or have been considered applicable to, wireless technologies. These methodologies are analyzed to identify features that are applicable to RFID.
Based on the Industry RFID PIA Framework endorsed by the Article 29 Data Protection Working Party, the Technical Report focuses on proposing risk analysis methodologies suitable for the data capture area of an RFID system. This includes the RFID tag, the interrogator, the air interface protocol used for communication between them, and the communication from the interrogator to the application.
The Technical Report also proposes risk management features based on the inherent capabilities of a number of RFID technologies that conform to standardized RFID air interface protocols. This should provide enough information to enable the proposed privacy control features to be applied to other RFID technologies including those with proprietary air interface protocols and tag architectures. The risk management features exclude fundamental privacy by design features because these should be the subject of revisions and enhancements to technology standards. The risk management features defined in this Technical Report are considered applicable to current and future implementations of RFID based on existing technology. As such, this Technical Report is considered as input into a standard procedure for undertaking an RFID Privacy Impact Assessment.

  • Technical report
    49 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    49 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16671:2014(Main)
Information technology - Authorization of mobile phones when used as RFID interrogators
SIST-TP CEN/TR 16671:2014

The scope of this Technical Report is to explore developments in the use of mobile phones as RFID interrogators. It uses as a datum the communication protocols developed for near field communication, which have a defined level of security. This Technical Report will explore known developments in the use of mobile phones as RFID interrogators including (but not limited to):
—   extending NFC phone capabilities to read RFID tags compliant with ISO/IEC 15693 and ISO/IEC 18000-3 Mode 1;
—   using mobile phones as interrogators for UHF tags based on ISO/IEC 18000-6 Type C;
—   the development of multi-protocol readers capable of switching between high frequency and UHF.
The objective of the Technical Report is to identify specific characteristics associated with mobile phones being used as interrogators with tags that are primarily intended for other purposes. It will identify some potential threats associated with the technology. It will also identify gaps in the standardization process that might need to be addressed to mitigate against such threats.
To counterbalance any negative implications, the Technical Report also identifies real and potential applications that could lead to an accelerated take-up of RFID and the Internet of Things through mobile phones being used as RFID interrogators by individual citizens and organizations.

  • Technical report
    43 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    43 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16672:2014(Main)
Information technology - Privacy capability features of current RFID technologies
SIST-TP CEN/TR 16672:2014

The scope of the Technical Report is to identify technical characteristics of particular RFID air interface protocols that need to be taken into consideration by operators of RFID systems in undertaking their privacy impact assessment. It also provides information for those operators who provide RFID-tagged items that are likely to be read by customers or other organisations.
This Technical Report provides detailed privacy and security characteristics that apply to products that are compliant with specific air interface protocols, and also to variant models that comply with such standards.
The Technical Report also identifies proprietary privacy and security features which have been added to tags, which are problematic of being implemented in open systems which depend on interoperability between different devices. Such proprietary solutions, whilst being technically sound, in fact impede interoperability. The gap analysis thus identified can be used to encourage greater standardization.

  • Technical report
    18 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    18 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TS 16685:2014(Main)
Information technology - Notification of RFID - The information sign to be displayed in areas where RFID interrogators are deployed
SIST-TS CEN/TS 16685:2014

This Technical Specification defines:
—   the details of data and graphics that shall be included on the signage;
—   the presentational requirements for the signage, taking account of the need:
—   to provide a practical solution given constraints on print technique and print area;
—   for a consistent common and recognizable signage;
—   means to support accessibility;
—   the structure and content of an information policy to meet the informational needs of individuals with respect to RFID privacy.

  • Technical specification
    14 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical specification
    14 pages
    English language
    sale 10% off
    e-Library read for
    1 day
CEN
CEN/TR 16684:2014(Main)
Information technology - Notification of RFID - Additional information to be provided by operators
SIST-TP CEN/TR 16684:2014

This Technical Report is to assist operators of applications in areas where radio frequency interrogators are deployed, to identify the types of information that are called for in the recommendation.
The Technical Report provides all the current information to assist operators to develop and publish a concise accurate and easy to understand information policy for each of their applications.
The policy should at least include:
—   the identity and address of the operators;
—   the purpose of the application;
—   what data are to be processed by the application, in particular if personal data will be processed, and whether the location of tags will be monitored;
—   a summary of the privacy and data protection impact assessment;
—   the likely privacy risks, if any, relating to the use of tags in the application and the measures that individuals can take to mitigate these risks.

  • Technical report
    34 pages
    English language
    sale 10% off
    e-Library read for
    1 day
  • Technical report
    34 pages
    English language
    sale 10% off
    e-Library read for
    1 day