Data Tape Security Calls for an RFID Solution
by Larry Maloney
In May of 2005, Time Warner said a container of its computer back-up tapes was lost by an outside data storage firm during shipment to one of that firm's storage facilities. Time Warner had been using this well-known firm for many years to store its computer back-up tapes offsite. The tapes contained data from Time Warner, including personal information on current and former employees. The U.S. Secret Service was called in to assist Time Warner and the data storage firm.
In February of 2005, Bank of America lost tapes containing financial information for 1.2 million accounts of federal employees, including senators Patrick J. Leahy of Vermont and Charles E. Schumer of New York. The tapes contained social security numbers, addresses and account numbers. The bank was transporting data tapes to a backup center. Schumer said the Senate Rules Committee told him the data backup tapes were probably stolen off a commercial plane by baggage handlers in December, but Bank of America disputes that and believes the tapes were simply lost.
In June of 2005, Citigroup reported that personal information on 3.9 million consumer lending customers of its Cinifinancial subsidiary was lost by UPS while in transit to a credit bureau. CitiGroup said in a statement that the data loss "occurred in spite of the enhanced security procedures we require of our couriers."
And in April of 2005, more than 200,000 customers of Ameritrade were informed that a backup tape with personal information had been lost.
These are the best known examples of the security problem involving the transfer of sensitive information on data tapes.
What's the Solution?
Estimates put the number of data tapes currently in use at about 1.4 billion, and because companies continue to spread the risk of storing too much sensitive information in one place, that number will continue to rise as long as companies want to back up their information.
John Samony is owner of JMS Consultants, specializing in security and law enforcement technology for cargo, document and high value asset transportation and firearms weapons training and business development for emerging security. Samony makes a rough estimate that about 2% of those 1.4 billion tapes most likely fall in the category of sensitive, high security information.
Samony says: "People have a tendency to pass off on the problem of security for these tapes, thinking, 'Why should we worry about it?' until it affects them. Security is usually considered a reactive rather than proactive management issue. Then the cost of notifying the people whose information is on the tapes starts to be accounted for. This is roughly about $10-20 per name on each tape, depending upon how the company assesses the cost of recovery. But the real harm comes in the intangible costs."
Among the intangible costs Samony lists are: damage to credibility, which is crucial for banks, brokerage firms, and most businesses, and the threat of lawsuits, which take a toll in time and expense in addition to the possibility of large settlements or judgements against a company.
Identity Thieves Are Patient
The standard response from Corporate America when data tapes are lost is that they believe the loss was due to inadvertant human error. Then comes the refrain, eerily similar in most cases: "There is no evidence that any of the information has been used for illicit purposes." How do they know? They lost the tape in the first place and have no idea where it is!
Even more frightening, if the tapes are stolen, and Samony puts the incidence of foul play at only about 2%, thieves don't have to use the data right away, and indeed would be wise to wait until the "heat" dies down. Individuals' social security numbers don't change, so the theives can easily wait several years before selling the data or using it in some scheme.
Protection from Ship Point to Delivery
RFID is being used for end-to-end security in the shipment of data tapes. Illinois-based Private Pallet Security Systems (P2S2) incorporates RFID readers and GPS units inside their boxes, which typically hold about 60-80 data tapes, depending on the size of the container needed and quantity of tapes shipped weekly or monthly.
The P2S2 solution is a complete turnkey system companies can use to not only identify where their tapes are at all times, but also identify the time and location of any breach, with immediate and automatic notification via cellphone, e-mail or whatever method the company chooses.
The P2S2 unit provides eight layers of security that enable the customer to track, monitor, and view the progress of the shipment.
The P2S2 security containers are available at a per-unit cost of approximately $500 a month for transporting up to 80 data tapes. Actual quantity depends upon the size of the container selected which can be a half to full pallet size. In considering the almost limitless intangible costs companies can incur when data is lost, that would seem to be a small price to pay for enhanced security and peace of mind. Go to www.p2s2llc.com for more information on Private Pallet's security systems.
Larry Maloney is a Chicago-based freelance writer specializing in a wide range of industries, including retail, graphic arts, and law enforcement, among other things. Contact him at lppmaloney@gmail.com.
Omnitrol Networks Selected by Endwave for Automated RFID-Based Manufacturing Tracking Solution
Omnitrol Networks announces that its work-in-process (WIP) visibility solution has been selected by Endwave Corporation to provide real-time status updates on the company's manufacturing processes at its defense and security facility in Diamond Springs, CA. Endwave Corporation designs, manufactures and markets RF modules that enable the transmission, reception, and processing of high-frequency signals in telecommunications networks, defense electronics, and homeland security systems.
The Omnitrol intelligent network appliance provides Endwave with completely automated WIP operational visibility to track work orders with manufacturing traceability on parts, components, or raw materials required for the finished product. This new powerful application network solution integrates Omnitrol Networks' Edge Application Service Engine software, or EASETM, which was developed to simplify and rapidly develop business work-flow solutions and enable root-cause analysis. The EASE software fully and securely integrates a variety of smart edge devices and sensor technologies, WiFi handhelds, RFID, RTLS, and PLC controllers to increase productivity and enhance core manufacturing processes through continuous shop-floor visibility. The fully integrated solution includes fixed and mobile RFID infrastructure from Motorola to deliver high-performance and reliable data capture. In addition the solution integrates various back-end systems from enterprise resource planning, to accounting, to logistics, which improve overall efficiency.
“We are constantly looking at innovative manufacturing process improvements to deliver high-quality products to our customers,” says David Hall, SVP and General Manager of Endwave's Defense and Security Products Division. “Omnitrol Networks' web-based in-production dashboard provides us with a unique Work-In-Process solution that is expected to deliver the next level of process innovation and change order management.”
“Endwave is one of the leading defense and homeland security suppliers of microwave subsystems, and they have a long history of implementing leading edge technology to create competitive advantage,” says Raj Saksena, CEO of Omnitrol Networks. “We are pleased that such an innovative company has selected the OMNITROL platform to deploy real-time manufacturing intelligence throughout their Diamond Springs operation.”
Daisy Brand Expands Use of RFID with Alien Technology® Products
Alien Technology announces the expansion of its RFID deployment within Daisy Brand's distribution centers in Texas and Arizona. Daisy Brand is a leading provider of sour cream and cottage cheese for the retail, food service industries, and the military sectors. The company has been actively employing RFID for inventory tracking since the beginning of 2005. The RFID expansion in 2008 includes the installation of the new Alien® ALR9900 enterprise-class readers at the sour cream and cottage cheese maker's distribution centers in Casa Grande, AZ, and Garland, TX.
"There is value and ROI with RFID,” says Kevin Brown, Director of Information Systems for Daisy Brand. “We're taking what we have learned from the RFID data to derive value and provide business insight into what supply chain events occur, and when. Daisy's use of RFID has also improved customer satisfaction.”
Daisy Brand's RFID solutions include use of forklifts outfitted with Alien RFID readers and tablet computers used in conjunction with an iMotion Edgeware RFID middleware platform provided by GlobeRanger. The readers capture the EPC numbers of Alien's Omni-Squiggle® Gen 2 tags used on pallets. Data from forklift readers and fixed readers are routed into Daisy's ERP system for immediate information access from the company's factory and warehouse in Garland, TX.
“RFID technology allows companies such as Daisy Brand to improve real-time tracking of products, expiration dates, and unique location,” says Ronny Haraldsvik, Vice-President of Marketing and Industry Relations at Alien. “Daisy is great example of dairy producer and distributor making use of RFID within the supply chain to improve its own inventory tracking and derive business benefits accordingly.”
Data about the product on a tagged pallet — including its type (no-fat versus regular sour cream, for example) and sell-by date — is also stored in the company's ERP system. When a truck arrives to pick up a load, the system will let that driver know that the proper pallet is being taken. For example, a pallet containing cases of product with an imminent sell-by date would not be shipped to a far-away retail destination. The reader at the portal will also alert a driver on a tablet PC if the driver is loading the wrong pallet for a specific truck.
Daisy Brand first implemented Alien's RFID tags, readers, and software in 2005 at its distribution center in Garland, TX. Since then, Alien's products and support services from RFID partners have enabled Daisy Brand to operate more efficiently by saving time and increasing the visibility of products as they move from the company's warehouse in Texas to third-party facilities across the country.
RFID Wizard for EASYLABEL® Labeling Software
Tharo's EASYLABEL®'s RFID Wizard allows a person to easily create EPC and Department of Defense (DoD) smart labels. The RFID Wizard prompts the user for the necessary information and EASYLABEL does the rest. RFID projects that do not require the EPC or DoD RFID code can use EASYLABEL to directly program HF or UHF smart labels in a hexadecimal or ASCII format.
With EASYLABEL, the user has the option to import parts or all of his/her RFID data from sources such as: databases, serial files, user input, existing barcode or text fields, and external text files. The user may also choose to print the RFID data, encoded in the RFID tags, on smart labels as a text or barcode field.
An additional EASYLABEL RFID feature is the ability to write and print a report that includes the data used to program printed smart labels. This report can then be used as part of an Advanced Shipping Notice or to keep a record of labeled items.
Combining all of these RFID capabilities with EASYLABEL's other time-tested features, will allow a person to easily design, report, program, and print smart labels. A free trial edition is available for download from Tharo's website: www.tharo.com.
IBM Teams with METRO Group to Improve Customer Service and Efficiency with RFID
IBM announces it has worked with METRO Group to implement RFID technology to improve the availability of products in its stores, enhance consumers' shopping experience, and boost supply chain performance. The companies are successfully using RFID in a system that tracks shipments from suppliers to warehouses, distribution centers, and stores. The companies are also teaming on an innovative customer focused RFID project in one of METRO Group's Galeria Kaufhof department stores.
Retailers worldwide are focused on deploying strategies aimed at meeting the needs of today's increasingly connected and information hungry customers. METRO Group and IBM have been working together since 2003 on projects aimed at improving operational efficiencies with RFID and ultimately improving customers' shopping experience. As part of the relationship, METRO Group has leveraged IBM's retail expertise, industry leading software products, and RFID solutions.
“Our relationship with IBM has been a strategic component of our RFID programs,” says Dr. Gerd Wolfram, Managing Director, MGI METRO Group Information Technology GmbH. “Innovation is at the heart of our strategy. Our use of RFID is improving our operational effectiveness as well as the experience of our customers.”
Eye on the Supply Chain
IBM and METRO Group recently completed the roll out of Europe's largest RFID project. The system allows METRO Group to track shipments from suppliers to its warehouses and distribution centers to around 200 supermarkets and stores across Germany. It has enabled METRO Group to improve product availability and ensure that customers' expectations are met.
Pallets of goods destined for a METRO Cash & Carry or Real store contain an RFID tag when they leave the supplier or the group's distribution centers. The tags are scanned by RFID readers on delivery at a store location. The data captured by the readers is provided in real time to METRO's merchandise information systems using the IBM WebSphere Premises Server (software that aggregates and analyzes RFID information).
Smarter Shopping with RFID
Galeria Kaufhof, a division of METRO Group, has teamed with IBM to develop and install a first of a kind system to enhance customer service in one of its department stores in Essen, Germany. As part of a pilot program, approximately 30,000 articles in the men's fashion department have been equipped with UHF Gen 2 RFID tags.
Employees are using the system to find articles that shoppers are looking for and to monitor stock to ensure that popular items are always available. The store also features devices in the store's fitting rooms that recognize the tagged garments and display customer information such as price, fabric and care instructions.
A team of experts from IBM Business Consulting Services designed the system's software architecture the system and conducted an in-depth analysis of how to best execute the project. IBM also developed Galeria Kaufhof's Store Information System, which provides real-time information on inventory based on readouts of RFID tags. The system puts comprehensive reports on business-related performance indicators into the hands of store employees and managers.
The Galeria Kaufhof project is one of the first to use the EPCglobal architecture framework, which sets communication standards between hardware and software components while also defining data interfaces. Galeria Kaufhof can use the captured data to make better informed decisions on products it will sell in the future.
“Using RFID and Information on Demand software from IBM, METRO Group has enhanced the efficiency of its operations,” says Martin Wildberger, Vice President, RFID Solutions, IBM. “With this project, METRO Group has proven that RFID technology is mature and reliable for use across a chain of retail stores at a reasonable cost, and with minimal effort for suppliers.”
METRO Group began its move toward RFID in 2003 when it opened its “Future Store.” In 2004, a first RFID pilot was run in 20 wholesale outlets. When the results proved the technology was reliable and easy to use, the company decided in 2007 to extend its use of RFID to all its Cash & Carry and Real stores.
