Hacking proximity card reader

The captured data can be used to grant unauthorized access to an office or other facility. Even card readers that force users to enter a PIN into a keypad to gain entry can be defeated, the researchers said, because the PIN data is transmitted along the same wires that the BLEKey is crimped to. Sometimes you don't even have to intercept the codes, Baseggio and Evenchick pointed out; many keycards have the codes printed right on the back, and a photograph will do.

Evenchick swiped a keycard next to the reader, opening the door while Baseggio captured the code on his smartphone a few feet away. Baseggio then opened the door again from his smartphone. By transmitting bogus signals, they explained, the BLEKey could also be used to deny authorized users access. The article also uses pretty drastic language to describe the experience. The Physical Security Guide for Workplaces.

Simply put, a keycard is a device that stores a password. When presented in front of a key card reader, the password and its access credentials are transmitted to the reader. The door unlocks if the access credential number is correct. Is your bank password stored on your debit card? No, and the banks designed the passwords to be stored externally from your debit card for a good reason. Why does this not apply to your access control system?

Despite the amount of money companies spend on server security, secure WiFi, firewalls, anti-virus software, and email gateways within an office, managers often forget about the first line of defense in any office environment - the front door.

Learn more. Report comment. I think the ski areas around the world the richer ones use proximity cards are going to love this ; …but think of the possibilities: free entry to public transportation, schools and ski resorts. Where can I buy one? I have a legitimate use for one at work. These out-dated Proximity cards transmit data at a very low rate of speed, at about , cycles per second.

At this rate, the amount of information able to be transmitted to the reader is limited to a very small number. Given that Proximity cards only transmit such a small number over to the card reader, the possibility of the card information being hacked by a hand-held device or copied by a machine is high. Copying Proximity cards can be done at self-serve key duplication kiosks you often find located inside grocery or hardware stores.

These kiosks advertise duplicating both standard keys like the kind for any door lock, along with electronic credentials such as access cards and key fobs.