1

first of all, i really apologize for asking this kind of generic question, but since i am a complete newbie in this area, i hope you wont mind.

I found a nice and cheap RFID powered locking system (http://www.alibaba.com/product-detail/Waterproof-Digital-rfid-Card-Electronic-locker_60561282753.html) that i plan to use on swimming lockers for users to store their things.

Since i dont understand this area, i was wondering is this secure? I saw somewhere that RFID cards/bracelets can be cloned and that doesnt sound good. So, if somebody rents a locker today and clones the card, he can keep opening them until he wants, right (because the card/bracelet stays the same?)

Again, i know this is very broad question but if anybody have any suggestions or comments, please let me know.

Thanks a bunch!

|improve this question
1

Clear answer: it depends.

I've read the linked product description but it simply doesn't give enough information to tell whether it is really a secure solution or not.

It could be done in a secure way (using state of the art secure elements inside the cards/token, using approved cryptographical algorithms and an appropriate protocol), but it could also be done in a more or less superficial way.

Given only the information in the product description you can't tell.

|improve this answer
0

The Temic card supports Cipher coding to key card so that each card has a different code that can not be copied. Compulsory or force iteration decoding will destroy the card automatically.

Security depends on both master and slave keys so both must be managed with secure master.

|improve this answer
  • "supports Cipher coding to key card so that each card has a different code" sounds like marketing speak but doesn't say much. Is it safe against simple replay attacks (e.g. by using challenge-response-method with random challenges)? – Curd Sep 4 '17 at 17:01
  • BTW: destruction of the card by too many wrong trials is very bad. That's an open door for very effective denial of service attacks. I would not trust my belongings to a lock whose key can be destroyed so easily. – Curd Sep 4 '17 at 17:04
  • but duplicate keys are easy with secure master – Tony Stewart Sunnyskyguy EE75 Sep 4 '17 at 17:05
  • but do you have it with you? (at the swimming pool, at the hostel, etc.) – Curd Sep 4 '17 at 17:07
  • Security of the key from damage or theft is not the same as dual key encryption and content security. The question here focused on cloning, which AFAIK is secure. – Tony Stewart Sunnyskyguy EE75 Sep 4 '17 at 17:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy