|
|
Radio
Frequency Identification (RFID) Systems
FACT OR FICTION The recent panic that resulted from the media hype blitz regarding a team of individuals capturing a transponder code was, at the least, extremely over exaggerated and misinterpreted to a greater degree by the media, which was subsequently passed on to the members of the insurance companies Special Investigations units, law enforcement personnel and to the public. FACT: The team of individuals was actually composed of a team of graduate students and a scientist from the John Hopkins University in Baltimore Maryland and from the RSA Laboratories. The tests were limited only to a Texas Instrument transponder, one of five companies that use transponder technology in today's vehicles. FACT: The team admits in their reports that transponder technology in today's vehicles has reduced auto theft as much as 90%. FACT: The team also sites Texas Instruments in their report as stating that after they were advised of the test results "they have recieved no reports due to the vulnerability" of the transponder system. FACT: The team bought a commercial microchip costing less then $200.00 and programmed it to find the KEY for a gasoline purchase tag. They then linked 16 such chips together and cracked the key code in about 15 minutes. FACT: The team did not consist of a group of auto thieves, or for that matter even sophisticated well educated auto thieves, but did consist of three graduate students, one faculty member and two industrial scientists all of whom specialize in the field of data security and applied cryptography. FACT: Based on the information provided by the media, relative to auto applications, the " CRACK" affected only a single chip currently used only on the Ford Focus and Escape and the Ford produced Mazda Tribute. WHEN WAS THE LAST TIME YOU HAVE HAD ONE OF THESE VEHICLE'S REPORTED STOLEN. FACT: The team did not physically defeat the steering column ignition locking system, which also must be defeated. They would have had to use a properly cut key. FACT: Does the JHU/RSA teams study findings mean that it is easy to steal gasoline and automobiles equipped with the transponder technology? NO! What the researchers have shown is that these types of crimes are easier than widely believed. It must be understood that the experts in the field of data security and applied cryptography conducted these tests under ideal laboratory conditions, with apparently no time restraints as well as an unlimited amount of resources. The tests were undoubtedly funded with an unspecified amount of funds available to the team. Although the team has so far demonstrated an ability to scan a victims device at a range of only a few inches, the team still believes that this poses a real practical threat in public spaces, as it is not difficult to brush up in such close proximity to a potential victim. The team is still testing the device with a greater distance than only a few inches. To date the team has not been able to "CRACK" other transponder systems, especially the "ROLLING CODE" system of the BMW, Mercedes Benz, and others that use this technology. Texas Instrument expresses a confidence in the security of RFID systems and have stated the following when asked: What should an existing Speed Pass user or car owner with an RFID vehicle Immobilizer do to protect themselves?" "RFID-enabled products like any other car key or payment device needs to be protected from being lost or stolen. There are no additional protections necessary". In addition, if you observe a person with a laptop in your close proximity, do not panic, as they only may be doing there homework or surfing the World Wide Web. It took this group and a handful of computers three months of full time work to crack this one chip. References: Associated Locksmiths of America - Keynotes Magazine - Page 10-13, March 2005 issue: VIN Locksmiths Newletter to clients: With permission of the author Thomas G. Seroogy, CFL. Dated 1/31/05. "Ford Busted or Not". Copies of the reference material available upon request. |