RFID in the supply chain: a guide to selection and implementation

452 Pages·2007·8.621 MB·English

by  Judith M. Myerson

AU3018_C000.fm Page i Monday, October 16, 2006 7:14 PM
RFID in
the Supply Chain
A Guide to Selection and Implementation
AU3018_C000.fm Page ii Monday, October 16, 2006 7:14 PM
Series on Resource Management
Titles in the Series
Handbook of Supply Chain Management, Collaborative Manufacturing: Using Real-Time
Second Edition Information to Support the Supply Chain
by James B. Ayers by Michael McClellan
ISBN: 0-8493-3160-9 ISBN: 1-57444-341-0
The Portal to Lean Production: Principles The Supply Chain Manager’s Problem-Solver:
& Practices for Doing More With Less Maximizing the Value of Collaboration and
by John Nicholas and Avi Soni Technology
ISBN: 0-8493-5031-X by Charles C. Poirier
ISBN: 1-57444-335-6
Supply Market Intelligence: A Managerial
Handbook for Building Sourcing Strategies Lean Performance ERP Project Management:
by Robert Handfield Implementing the Virtual Supply Chain
ISBN: 0-8493-2789-X by Brian J. Carroll
ISBN: 1-57444-309-7
The Small Manufacturer’s Toolkit: A Guide
to Selecting the Techniques and Systems to Integrated Learning for ERP Success:
Help You Win A Learning Requirements Planning Approach
by Steve Novak by Karl M. Kapp, with William F. Latham and
ISBN: 0-8493-2883-7 Hester N. Ford-Latham
ISBN: 1-57444-296-1
Velocity Management in Logistics and
Distribution: Lessons from the Military to Basics of Supply Chain Management
Secure the Speed of Business by Lawrence D. Fredendall and Ed Hill
by Joseph L. Walden ISBN: 1-57444-120-5
ISBN: 0-8493-2859-4
Lean Manufacturing: Tools, Techniques,
Supply Chain for Liquids: Out of the Box and How to Use Them
Approaches to Liquid Logistics by William M. Feld
by Wally Klatch ISBN: 1-57444-297-X
ISBN: 0-8493-2853-5
Disassembly Modeling for Assembly,
Supply Chain Architecture: A Blueprint for Maintenance, Reuse, and Recycling
Networking the Flow of Material, by A.J.D. Lambert and Surendra M. Gupta
Information, and Cash ISBN: 1-57444-334-8
by William T. Walker
ISBN: 1-57444-357-7 Back to Basics: Your Guide
to Manufacturing Excellence
ERP: Tools, Techniques, and Applications for by Steven A. Melnyk and
Integrating the Supply Chain R.T. Chris Christensen
by Carol A. Ptak with Eli Schragenheim ISBN: 1-57444-279-1
ISBN: 1-57444-358-5
Enterprise Resource Planning and Beyond:
Integral Logistics Management: Planning and Integrating Your Entire Organization
Control of Comprehensive Supply Chains, by Gary A. Langenwalter
Second Edition ISBN: 1-57444-260-0
by Paul Schonsleben
ISBN: 1-57444-355-0 Restructuring the Manufacturing Process:
Applying the Matrix Method
Introduction to e-Supply Chain Management: by Gideon Halevi
Engaging Technology to Build ISBN: 1-57444-121-3
Market-Winning Business Partnerships
by David C. Ross Inventory Classification Innovation:
ISBN: 1-57444-324-0 Paving the Way for Electronic Commerce
and Vendor Managed Inventory
Supply Chain Networks and by Russell G. Broeckelmann
Business Process Orientation ISBN: 1-57444-237-6
by Kevin P. McCormack and William C. Johnson
with William T. Walker
ISBN: 1-57444-327-5
AU3018_C000.fm Page iii Monday, October 16, 2006 7:14 PM
RFID in
the Supply Chain
A Guide to Selection and Implementation
Judith M. Myerson
IT Consultant
Philadelphia, Pennsylvania
USA
Boca Raton New York
Auerbach Publications is an imprint of the
Taylor & Francis Group, an informa business
AU3018_C000.fm Page iv Monday, October 16, 2006 7:14 PM
Auerbach Publications
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2007 by Taylor & Francis Group, LLC
Auerbach is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Printed in the United States of America on acid-free paper
10 9 8 7 6 5 4 3 2 1
International Standard Book Number-10: 0-8493-3018-1 (Hardcover)
International Standard Book Number-13: 978-0-8493-3018-6 (Hardcover)
This book contains information obtained from authentic and highly regarded sources. Reprinted
material is quoted with permission, and sources are indicated. A wide variety of references are
listed. Reasonable efforts have been made to publish reliable data and information, but the author
and the publisher cannot assume responsibility for the validity of all materials or for the conse-
quences of their use.
No part of this book may be reprinted, reproduced, transmitted, or utilized in any form by any
electronic, mechanical, or other means, now known or hereafter invented, including photocopying,
microfilming, and recording, or in any information storage or retrieval system, without written
permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.
copyright.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC)
222 Rosewood Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that
provides licenses and registration for a variety of users. For organizations that have been granted a
photocopy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and
are used only for identification and explanation without intent to infringe.
Library of Congress Cataloging-in-Publication Data
Myerson, Judith M.
RFID in the supply chain : a guide to selection and implementation / Judith M.
Myerson.
p. cm.
Includes bibliographical references and index.
ISBN 0-8493-3018-1
1. Inventory control--Automation. 2. Radio frequency identification systems. I.
Title.
TS160.R43 2006
658.7’87--dc22 2006045675
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the Auerbach Web site at
http://www.auerbach-publications.com
AU3018_C000.fm Page v Monday, October 16, 2006 7:14 PM
TABLE OF CONTENTS
Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .xvii
Figures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi
1 Supply Chain Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1.1 Paradigm Shift in Product Traceability. . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1.1.1 Transitioning to RFID Technology . . . . . . . . . . . . . . . . . . . . . . . . .1
1.1.2 Tracking Problems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
1.1.3 Supply Chain. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
1.2 RFID Markets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
1.3 Economic Feasibility of Rolling Out RFID. . . . . . . . . . . . . . . . . . . . . . . .15
1.3.1 Supply Chain Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . .16
1.3.2 Customer Privacy Issues. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
1.3.3 Security Challenges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
1.3.4 Operational and IT Challenges (Hardware, Software,
System Compatibility, People Expertise). . . . . . . . . . . . . . . . . . . .17
1.3.5 Logistical Challenges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
1.3.6 Program Management Challenges. . . . . . . . . . . . . . . . . . . . . . . . .19
1.3.7 Education and Training . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
1.3.8 Standard Implementation Challenges . . . . . . . . . . . . . . . . . . . . . .20
1.3.9 Lessons Learned. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
1.3.9.1 Iraq: Asset Visibility . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
1.3.9.2 Wal-Mart: Implementation Training . . . . . . . . . . . . . . . . .23
1.3.9.3 International Paper: Business Processes. . . . . . . . . . . . . .23
1.3.9.4 Procter & Gamble: Docking Loading Throughput . . . . . .23
1.4 RFID Technology Infrastructure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
1.4.1 Open Architecture: Savant Server. . . . . . . . . . . . . . . . . . . . . . . . .24
1.4.2 Major Vendor Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
1.4.3 Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
1.4.4 Antennas. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
1.4.5 Readers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
1.4.6 Electronic Product Code. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
1.4.7 Object Name Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
1.4.8 EPC Information Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
v
AU3018_C000.fm Page vi Monday, October 16, 2006 7:14 PM
vi (cid:1) RFID in the Supply Chain: A Guide to Selection and Implementation
1.4.9 Scenarios. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
1.5 Web-Centric Supply Chain Management Challenges. . . . . . . . . . . . . . . . .36
1.5.1 Combining Web-Centric with RFID Technology . . . . . . . . . . . . . .36
1.5.2 E-Business Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
1.5.3 Advantages and Disadvantages. . . . . . . . . . . . . . . . . . . . . . . . . . .37
References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
2 RFID Technology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
2.1 Primary Drivers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
2.1.1 RFID Technology Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . .39
2.1.2 RFID Technology: Basics, Advantages, and Disadvantages . . . . . .43
2.2 Selection Guidance on Tags, Servers, and Middleware . . . . . . . . . . . . . .46
2.2.1 EPC Tag Classes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
2.2.2 ISO Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
2.2.3 RFID Device Selection Criteria. . . . . . . . . . . . . . . . . . . . . . . . . . .50
2.2.3.1 What Are the Objects to Be Tagged?. . . . . . . . . . . . . . . .50
2.2.3.2 What Are the Materials of the Objects and How
Do They Affect Reading Ranges?. . . . . . . . . . . . . . . . . . .51
2.2.3.3 What Are Chip Antenna Types?. . . . . . . . . . . . . . . . . . . .53
2.2.3.4 What Readers Can Read Both Passive and Active Tags?. .55
2.2.3.5 What Are Other Considerations that Could
Affect Externally the Optimal Location of Tags?. . . . . . . .56
2.2.3.6 What Readers Can Read Both RFID Tags
and Bar Codes for Easy Transitioning? . . . . . . . . . . . . . .56
2.2.3.7 How Do Various Entities Organize
Frequency Types or Ranges?. . . . . . . . . . . . . . . . . . . . . .57
2.2.3.8 What Standards Are the Vendors Using
for Their RFID Products?. . . . . . . . . . . . . . . . . . . . . . . . .60
2.2.4 Middleware Selection Criteria. . . . . . . . . . . . . . . . . . . . . . . . . . . .60
2.2.4.1 RFID Plug-and-Play. . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
2.2.4.2 RFID Supply Chain Execution Applications. . . . . . . . . . .62
2.2.4.3 RFID Platform-Dependent Legacy Systems. . . . . . . . . . . .64
2.2.4.4 RFID Integration Hubs . . . . . . . . . . . . . . . . . . . . . . . . . .67
2.3 RFID Implementation Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
3 RFID Applications in Supply Chain Management . . . . . . . . . 75
3.1 Logistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
3.1.1 SCM Logistics Maturity Model. . . . . . . . . . . . . . . . . . . . . . . . . . . .77
3.1.2 Logistics: Reactive, Proactive, and RFID . . . . . . . . . . . . . . . . . . . .79
3.2 Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82
3.2.1 Oracle–PeopleSoft . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82
3.2.2 Microsoft RFID Council . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83
3.2.3 IBM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84
3.2.4 The METRO Group Future Store . . . . . . . . . . . . . . . . . . . . . . . . .85
3.2.4.1 Inventory Management . . . . . . . . . . . . . . . . . . . . . . . . . .86
3.2.4.2 Information Management . . . . . . . . . . . . . . . . . . . . . . . .86
3.2.4.3 Check-Out . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87
AU3018_C000.fm Page vii Monday, October 16, 2006 7:14 PM
Table of Contents (cid:1) vii
3.2.5 Chain Pharmacy Operations. . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
3.2.6 SAP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89
3.2.7 Web Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .91
3.2.7.1 Object Name Service. . . . . . . . . . . . . . . . . . . . . . . . . . . .93
3.2.7.2 EPC Information Service . . . . . . . . . . . . . . . . . . . . . . . . .93
3.2.7.3 Electronic Product Code . . . . . . . . . . . . . . . . . . . . . . . . .95
3.2.7.4 Savant Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
3.2.7.5 EPCglobal and the Auto-ID Center . . . . . . . . . . . . . . . . .97
References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
4 Storing and Retrieving Data. . . . . . . . . . . . . . . . . . . . . . . . . . 101
4.1 Two Big Questions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101
4.1.1 Relationship between Data Storage and Retrieval Issues. . . . . . .101
4.1.2 Understanding Risks Associated with RFID/EPC Technologies. . .102
4.2 EPC Technology in Functional Areas. . . . . . . . . . . . . . . . . . . . . . . . . . .103
4.3 Perceptions of Product Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
4.4 Database CD on Local Workstation. . . . . . . . . . . . . . . . . . . . . . . . . . . .105
4.5 Remote Database Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106
4.5.1 How Can We Reduce the Number of Traffic
Bottleneck Incidents?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107
4.5.2 Why Do We Need to Divide the Database into the Static
and Dynamic Partitions?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
4.5.3 What Kind of Database Management Should We Get
to Satisfy Our Requirements? . . . . . . . . . . . . . . . . . . . . . . . . . . .108
4.5.4 What Is the Optimal Way of Increasing Throughputs
and Operational Efficiency? . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
4.5.4.1 Peoplesoft Enterprise Systems. . . . . . . . . . . . . . . . . . . .110
4.5.4.2 IBM RFID Product. . . . . . . . . . . . . . . . . . . . . . . . . . . . .110
4.5.5 How Do We Reduce Loading Times Cost Effectively?. . . . . . . . .111
4.5.6 How Do We Migrate a Relational Database Management
System to Another? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112
4.5.7 How Is Partitioning Emulated and What Are
the Partitioning Types?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112
4.5.8 How Do You Determine the Number of Partitions
for a Database? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115
4.5.9 What Are the Factors You Should Consider in Your
Migration Planning? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116
4.6 Databases in Company Merger Processes . . . . . . . . . . . . . . . . . . . . . . .117
4.7 Hybrid Databases. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
4.8 Web Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120
5 RFID Business Processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
5.1 Implementation Approaches. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
5.1.1 Dual Shipping Faces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123
5.1.2 Two Sides of the Mandates . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
5.1.3 RFID Implementation Checklist . . . . . . . . . . . . . . . . . . . . . . . . .124
AU3018_C000.fm Page viii Monday, October 16, 2006 7:14 PM
viii (cid:1) RFID in the Supply Chain: A Guide to Selection and Implementation
5.2 Business Process Reengineering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126
5.2.1 Procter & Gamble: Dock Loading Throughput. . . . . . . . . . . . . .127
5.2.2 Canus: Changing Antenna’s Orientation . . . . . . . . . . . . . . . . . . .128
5.2.3 Unilever: Changing Tag Placement. . . . . . . . . . . . . . . . . . . . . . .128
5.2.4 Heinz: Adapting Tag Requirements . . . . . . . . . . . . . . . . . . . . . .128
5.2.5 Gillette Scenario: Misplaced Case. . . . . . . . . . . . . . . . . . . . . . . .129
5.2.6 Canus: Adjusting Computer Speed . . . . . . . . . . . . . . . . . . . . . . .131
5.2.7 Software Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131
5.3 Organizational Maturity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .132
5.4 Basic Multi-Layer RFID Business Process Model . . . . . . . . . . . . . . . . . .135
5.5 Adaptive Multi-Layer RFID Business Process Model. . . . . . . . . . . . . . . .136
5.5.1 Adaptive Maturity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137
5.5.2 Application Adaptors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
5.5.3 The METRO Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139
5.6 Predictive Multi-Layer Business Process Model . . . . . . . . . . . . . . . . . . .140
5.7 RFID Business Processes Strategy. . . . . . . . . . . . . . . . . . . . . . . . . . . . .143
5.7.1 IBM RFID Strategy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143
5.7.2 Heinz RFID Strategy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144
5.7.3 Canus RFID Strategy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144
5.7.4 International Paper RFID Strategy. . . . . . . . . . . . . . . . . . . . . . . .145
5.7.5 Kayser-Roth RFID Strategy. . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
5.7.6 Philips Semiconductors RFID Strategy. . . . . . . . . . . . . . . . . . . . .146
5.7.7 Intel RFID Strategy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148
5.7.8 Unilever RFID Strategy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149
5.7.9 Major Clothier Retailer RFID Strategy . . . . . . . . . . . . . . . . . . . . .149
5.7.10 Marks and Spencer RFID Strategy . . . . . . . . . . . . . . . . . . . . . . .149
5.8 RFID Enterprise Supply Chain Systems . . . . . . . . . . . . . . . . . . . . . . . . .150
5.8.1 Supply Chain Planning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150
5.8.2 Supply Chain Execution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151
5.8.3 Supply Chain Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
5.8.3.1 SCM Logistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
5.8.3.2 SCM Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . .155
5.9 RFID Business Process Life Cycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . .156
5.9.1 Older Life-Cycle Models. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158
5.9.1.1 Waterfall Life Cycle. . . . . . . . . . . . . . . . . . . . . . . . . . . .158
5.9.1.2 Incremental Life Cycle. . . . . . . . . . . . . . . . . . . . . . . . . .159
5.9.1.3 Spiral Life Cycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .161
5.9.2 Newer Life-Cycle Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162
5.9.2.1 Adaptive Linear Feedback Life Cycle. . . . . . . . . . . . . . .162
5.9.2.2 Adaptive Dynamic Life Cycle . . . . . . . . . . . . . . . . . . . .162
References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163
6 RFID Security, Privacy, and Risk Assessment. . . . . . . . . . . . 165
6.1 Security Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165
6.1.1 Organizational Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .166
6.1.2 Issue-Specific Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .166
6.1.3 System-Specific Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .167
AU3018_C000.fm Page ix Monday, October 16, 2006 7:14 PM
Table of Contents (cid:1) ix
6.2 Security of RFID Query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168
6.2.1 Query Scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168
6.2.2 Security Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169
6.3 Attacks on RFID Technology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170
6.3.1 War-Walking and Lifting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170
6.3.2 Counterfeiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172
6.3.3 Denial-of-Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173
6.3.4 Weak Cryptography. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173
6.4 Defense in Depth. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176
6.5 Risk Assessment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177
6.5.1 Risk Assessment Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .178
6.5.2 Internal Asset Risk Assessment. . . . . . . . . . . . . . . . . . . . . . . . . .178
6.5.3 Risk Assessment Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .182
References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .183
Appendix A Passive RFID Technology . . . . . . . . . . . . . . . . . . . . 185
A.1 Avonwood (http://www.avonwood.com) . . . . . . . . . . . . . . . . . . . . . . .185
A.1.1 Eureka 111 Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .185
A.1.2 Eureka 211 Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .185
A.2 Escort Memory Systems (http://www.ems-rfid.com/). . . . . . . . . . . . . . .186
A.2.1 HMS Passive Read/Write Systems. . . . . . . . . . . . . . . . . . . . . . . .186
A.2.1.1 HMS100 Series Passive Read/WriteTags. . . . . . . . . . . .186
A.2.1.2 HMS800 Series Passive Reader/Writers. . . . . . . . . . . . .186
A.2.1.3 HMS827 Series Passive Reader/Writer . . . . . . . . . . . . .186
A.2.1.4 HMS828 Series Passive Reader/Writer . . . . . . . . . . . . .187
A.2.1.5 HMS820-04/HMS830-04 Series Passive Conveyor
Reader/Writers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .187
A.2.1.6 HMS820-08/HMS830-08 Series Passive Wide-Plate
Reader/Writers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .187
A.2.1.7 HMS820/HMS830 Passive Reader/Writers. . . . . . . . . . .187
A.2.1.8 HMS827-04 Passive Conveyor Reader/Writer . . . . . . . .188
A.2.1.9 HMS827-05 Passive Tubular Reader/Writer. . . . . . . . . .188
A.2.1.10 HMS814/HMS816 Portable Reader/Writers. . . . . . . . . .188
A.2.2 Passive Read-Only Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . .188
A.2.2.1 ES600-Series Read-Only Tags . . . . . . . . . . . . . . . . . . .189
A.2.2.2 RS427 Read-Only Reader. . . . . . . . . . . . . . . . . . . . . . .189
A.2.2.3 RS427-04 Passive Read-Only Conveyor Antenna . . . . .189
A.3 Intermec (www.intermec.com) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .189
A.3.1 RFID Tags and Inserts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .189
A.3.2 RFID Readers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191
A.3.3 Intellitag PM4i Printer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .194
A.3.4 RFID Partners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195
A.4 Northern Apex (www.northernapex-rfid.com). . . . . . . . . . . . . . . . . . . .195
A.4.1 Inlays and Tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195
A.4.2 Readers and Antennas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .197
A.4.2.1 900-MHz Readers and Antennas . . . . . . . . . . . . . . . . . .197
A.4.2.2 13.56-MHz Readers and Antennas. . . . . . . . . . . . . . . . .198