See the Secure Sleeve in Action
- Contactless News video demonstration of the Identity Stronghold Secure Sleeve
Read Article>
Identity Stronghold In The News
-
Sleeves block wireless snoops
Read Article>With "Tap N Go" payment cards, your wallet is quickly becoming a hacker's delight. That's because many new cards carry both wireless RFID chips and enough data to make you vulnerable to identity theft.
The good news is that tin foil (in the shape of a hat, if you like) blocks radio frequency signals.
But there is another way to guard your cards, without creating the impression you've got a tuna fish sandwich stuffed into your back pocket.
The Secure Sleeve from Sarasota, Fla.-based ID Stronghold (idstronghold.com) blocks the electromagnetic energy that readers emit to power up and read the chips on ID cards.
Stronghold also sells clear sleeves for employee ID cards.
At the moment, it's unlikely a bad guy will sidle up to you at the bank and scan your wallet with a hand-held radio frequency reader. Identity thieves, for the most part, continue to be low-tech operators. Most of them are garbage pickers and online and telephone scam artists.
-Boston Globe, June 9, 2008 - Identity Stronghold to supply GSA as part of winning EDS team.
Download PDF> - New rigid badgeholder blocks contactless signal get FIPS 201 approval.
Read Article> - Electromagnetic sleeves protect contactless IDs, but is the eavesdropping threat real?
Read Article> - Identity Stronghold approved to guard PIV cards from unauthorized contactless reads
Read Article>
Contactless Security Articles
- Channel 10 demonstrates skimming from purses.
Watch the Video> - Research: CharlieCard is far from hack-proof
Read Article> - RFID SmartCard encryption cracked by researchers
Read Article> - Washington State Enhanced Drivers License guarded by Identity Stronghold Secure Sleeve.
Read Article> - RFID credit card attack demo
Read Article> - Scan This Guy's E-Passport and Watch Your System Crash
Read Article> - Dept of Commerce (NIST) - Guidelines for Securing Radio Frequency Identification (RFID) Systems
Read Article> - New credit cards allow hands-free theft
Read Article> - NBC Video about contactless card security
Read Article>
Karsten says his intent is solely to warn commuters about the possibility that an ID thief sitting next to them on the subway could hack into their smart card within minutes, using a laptop and a reader that can be purchased on the Internet for about $150.
Nohl humorously reassures on his Web page at the University of Virginia that he and his colleagues have not found a way to crack credit card security: “Please note that we have not compromised the security of credit cards as some of the articles suggest. From what we can see, RFID-enabled credit cards have no security (yet?), and hence there is nothing to compromise.”
The state has taken precautions to ensure personal information associated with RFID-enhanced licenses doesn't fall into the wrong hands, starting with the randomly assigned serial number and a secure computer network. The Department of Licensing also issues special "sleeves" for license cards that are impervious to penetration by RFID readers. Drivers simply have to remove the sleeves as they approach the border station so their licenses can be read, Benfield said.
5.2.5 Information Labels / Notice
Control: A written message is affixed to or distributed with each tag or is posted near readers. The notice may inform users of the purposes of the RFID system or advise users on how to minimize privacy or other risks (e.g., place an RFID-enabled access card or transponder in metal foil or a sleeve that shields RF radiation when the card or transponder is not in use).
Applicability: All applications in which there is a risk that could be mitigated with simple informational messages. The control is particularly relevant to consumer applications in which privacy is a concern.
Benefits: Information labels or notices can communicate basic information about risks that might otherwise be left unknown by users that are able to take simple steps to mitigate the risk (e.g., remove a tag or place it in a shielded sleeve)
FIPS 201 Articles
- Video online from FIPS 201 First Responder Credential meeting
Read Article> - FIPS 201 approved products list
Read Article>