Blufax sounds like some kind of faxing service, but it's actually a high-tech system San Diego’s government is using to track smartphones. The federal government has already spent millions of dollars on these devices, and we’re seeing use crop up in more and more cities. Here's how Blufax systems track phones without being detected, how the government is using it today, and what might be areas of concern.
Modern phones have tiny radios in them to connect to other devices wirelessly. These radios send out beacons like radar pings on a submarine. Each ping sends a unique sequence of number of letters and numbers called a MAC ID. By listening for that beacon, computers can record which devices are nearby. A typical smartphone has a radio for connecting to the cell phone tower, Wi-Fi and Bluetooth.
Bluefax is a sensor system used to detect a device with its Bluetooth capability turned on, such as a smartphone or headset. It's marketed as a cost-effective way to measure numbers of cars and travel times: Multiple units can be used to calculate speed as cars containing these smartphones or headsets move down a road. Blufax is manufactured by Traffax and each unit costs about $2,500. The federal government has spent more than 9 million on these devices. Many local governments have deployed units as well.
Here’s an example of the information captured by one of these scanners:
DB ID | Timestamp | MAC | ID | RSSI | CoD | Vendor |
45406 | 2014-05-16 16:18:12 | 00:22:7E:5F:3C:18 | myCar | -72 | Handsfree | PARROT SA |
18005 | 2014-04-20 12:59:27 | D8:2A:7E:0E:C3:30 | JillSmith | -85 | Smartphone | Apple |
One thing to point out about that sample: Most Bluetooth data lacks personally identifying information. But these systems may include names and email addresses in the ID field.
I wanted to find out just how San Diego might be using this technology, so I sent California Public Records Act request to SANDAG. I learned they have at least 16 Blufax units, and plan to add them to every roadside call box common on freeways. The stated intention is to measure traffic speed and volume.
Moving from collecting anonymous data to a system that personally identifies individuals and stores that data is cause for concern. In one SANDAG document I received, there's discussion of doing exactly that using "sensors that re-identify vehicles specifically. Some examples given are "electronic toll tag transponders, cell-phone tracking, license plate reading, Bluetooth sniffing, magnetic signatures, (and) video tracking."
By combining a license plate or a phone number with a Bluetooth serial number, it’s possible to track citizens via their phone.
This isn't science fiction theory. The City of Houston has linked toll road transponders, which record personal identities with Bluetooth scans. In another effort, researchers at University of Washington cross-referenced
license plate reader data with Bluetooth data, which then personally identified individuals. Video tracking could combine facial recognition with Bluetooth scans to personal identify Bluetooth owners as well. I haven’t found any specific documents showing that San Diego is personally identifying Bluetooth devices. But authorities are intentionally withholding documents that might reveal more.
San Diego City Beat revealed that local law enforcement agencies are building a database to track where citizens travel using license plate scans. Does this data also collect Bluetooth serial numbers? I've asked them to make that data public and they've refused. I’ve filed a lawsuit against SANDAG, the agency storing this data, asking a Judge to compel them to reveal this information. A court date is a court date is set for September.
The police have phony cell phone towers called Stingrays which trick phones into revealing their whereabouts. Might these devices also be used in conjunction with Bluetooth scanning? It's unclear because a request for documents on this technology was mostly rejected. San Diego Police turned over a single heavily redacted document.
The government is invisibly collecting data on Bluetooth equipped smartphones along roadways. It's logical to assume this collection will expand to other public areas, as the scanners are relatively cheap and portable. Since smartphones are increasingly integrated into our everyday lives, they make a tantalizing tool for precise tracking. While there's no data suggesting individuals are being tracked in San Diego just yet, the technology exists, and the coordinated secrecy by law enforcement agencies makes it a real possibility.
Original CPRA Request & Notes
Documents Produced by SANDAG
--MR
michael@michaelrobertson.com |