Intelligent door lock burst security vulnerability: as long as a film, everyone can open your "home"2018-04-16 10:25:19 107 ℃
intelligent door lock is regarded by the industry as the first entry level product of smart home. However, the booming market prospects, however, make the market of intelligent locks different. Some manufacturers directly copy the mobile phone fingerprint identification scheme to the smart door lock. According to the IT Times reported before, "a variety of cell phones appear fingerprint recognition Bug, after patch, everyone can be unlocked." This hidden strategy of loopholes in the self learning function of image algorithm is copied to your "home door", and then comes the hidden danger of "everyone can solve". The industry is worried about the current solution, mobile phone with fingerprint recognition vulnerabilities, is widely ported to the smart door lock.
Samsung, green rice, easy to break a
membrane, can break the fingerprint fingerprint unlock, a membrane can also crack a smart door lock.
Suzhou MINDRAY Microelectronics Co. Ltd. to "IT times" reporter broke the news, they only took a piece of film, it has cracked the high-end Samsung DP808 smart price up to 7000 yuan lock and millet ecological chain enterprises of green rice production Aqara intelligent door lock. In the experimental process of
display, the technician first emptied the system to prevent cheating in advance. After registering a fingerprint, he put the prepared membrane on the door and unlocked several times with the registered fingerprint. After that, the intelligent lock was successfully unlocked by other fingerprint. Such operations have little to do with the previous cracking of Android handset fingerprints.
even worse is that the film is not made by special materials or technologies. MINDRAY micro chairman Li Yangyuan revealed that the film is conductive tape with a conductive pattern. "There is almost no threshold for conducting a conductive pattern, and a few of the simplest conductive strokes can also be formed." The reason behind
is the analysis of Liu Jun, the founder of fingerprint lock algorithm, Shanghai Zheng Zheng. It is very likely that these chips will be mixed with traditional fingerprint feature point algorithm and image algorithm, and later will be the main judgement basis. Because the self-learning function exists when a conductive pattern with tape partially covered sensor registered fingers after a few times, will the fingerprint sensor to the tape containing the pattern of "learning" in, then any finger trigger to collect the tape containing pictures, can be unlocked.
"this is the error of the algorithm's decision. When the two fingerprint patterns are only partially similar, they should be rejected when the other is different. " Liu Jun said.
is currently the only intelligent lock - each one sticks to his argument is the mandatory implementation of standard mechanical lock implementation of the standard "GA/T 73-2015", which clearly pointed out that China mechanical lock is divided into three grades ABC, the difference between grades is the open duration. In Li Yangyuan's presentation, the placement to crack is only for dozens of seconds. The key technology is the A-level lock with the lowest safety coefficient, and the matching one lock and cross lock have been eliminated.
and private mobile phone is different, as the first hurdle of home security, smart locks completely exposed, any person including criminals, can real-time contact affixed a layer of thin film, the user unaware of the circumstances, to achieve crack. Li Yangyuan said, "the security of the lock is about the safety of the person's personal property." Even one percent of the probability of being cracked is a major security risk. "
in order to understand the deeper reason, Li Yangyuan the dismantling of the Aqara smart locks, discovery algorithm chip from Hangzhou Shengyuan data security technology Limited by Share Ltd, model AS608. In the official page shengyaun available, AS608 has made it clear that the self-learning function, and high rate of recognition by.
shengyaun reply said, did not have direct business dealings with the green rice, the video details need to be verified, the mobile phone industry vulnerability issues, they have taken corresponding measures to solve. Green Rice said, video photographer deliberately created, seriously inconsistent with the facts, due to the company's products trade secrets, solution Aqara intelligent door lock using the chip and image recognition algorithm is temporarily unable to open, and has passed the "Ministry of public security and police electronic products quality inspection center" test, fully meet the the corresponding national standards, in line with mechanical anti-theft lock, fingerprint anti-theft lock, password lock corresponding industry standard.
and Li Yangyuan on the "IT times" reporter said, the solution of green rice fingerprint lock, favorable crack method and CCTV "orange skin" in the use of mobile phone solution fingerprint lock, security vulnerabilities that risk level: "I am willing to break the company and MINDRAY micro green meter display video real fingerprint lock the level of risk and vulnerability for judgment."
as of the press release, Samsung officials did not respond.
unlock quickly, is not necessarily a good thing according to the national
lock industry information center data display and forecast, Chinese intelligent lock market is rapidly expanding in 2016, only 3 million sets of circumstances, 2017 intelligent lock market capacity is doubled, the scale has more than 10 billion yuan, the amount of demand in 2018 Chinese intelligent lock Market 13 million units, is expected to compared to 2017 growth of more than 60%, the size of the market or will be close to 20 billion yuan.
's huge market has prompted many enterprises to cross the border into the intelligent lock market. BYD, Midea, ZTE, SKYWORTH, Hui Ding and so on. Appliances, hardware, communications and mobile phone companies are trying to get a slice of the market. In early April this year, the hammer mobile phone conference, hammer technology and advantages of science and technology Luo Yonghao jointly launched a variety of fingerprint lock. Li Yangyuan analysis believes that some new brands do not have the knowledge and experience of security products, and use the supply chain of mobile phones optimistically. The deeper reason for
was that Liu Jun thought it was related to the price war. According to the statistics of relevant departments, the price of the mainstream intelligent lock will fall from 3000 yuan over 3000 yuan to 1500 - 2500 yuan in the first two years. "Some enterprises set off the price war after entering the lock market, and the price of our goods fell 20% last year. Therefore, some manufacturers will choose cheaper 160X160 small area sensors, because the area is limited, which is not very suitable for fingerprint structure feature point comparison. Many manufacturers combine the algorithm with high rate and good experience. Liu Jun said.
and Samsung and green rice represent two kinds of different style lock industry manufacturers, the former is the traditional lock enterprises, the latter is the new generation of lock enterprises, both have the same problem, the industry believes that this is at least a industry alert signal, many manufacturers are the fingerprint identification scheme with mobile phone vulnerabilities ported to the smart fingerprint lock on. The development trend of
has made the people in the industry very worried. "We found that even using the same vendor's fingerprint identification algorithm chip, the vulnerabilities of different door lock brands can be used in different risks. So, smart lock makers are likely to give up security in order to pursue the so-called 'use experience'. Li Yangyuan added, consumers may think this door lock is very good, quick and convenient to lock, so they choose to buy, but they are totally ignorant of the hidden danger.
in front of consumers is that some vulnerabilities can be upgraded through background upgrade, and some vulnerabilities are hardware level, which needs to lock and shop, remove locks, upgrade firmware and install them back. People in the industry said that such a "recall" for enterprises is very high cost, almost impossible to achieve, intelligent lock will become a "one hammer sale".
Li Yangyuan appealed that the relevant market supervision and management departments should carry out cross industry supervision for technology middleware, especially set up a mandatory middleware technology standard, such as encryption chip, and guard against "bad money drives out good money". You may also be interested in
elevator to lift the "bloody" trendy "cheap" challenge "big brothers" the
- In the previous：Quick rectification: on-line parental control mode, banned 56 thousand users
- The next article：Car service platform is set up by drop trip
Guess you like
- 2018-09-27China Mobile announces good news: the era of traffic cabbage prices has come
- 2018-09-21Meizu 16X, are you really doing this well?
- 2018-09-20Released in October did not run! Apple heavy new products re-exposure: full screen without bangs, interface changes
- 2018-09-19Nearly 100% screen share + Kirin 980! Glory Magic 2 re-exposure: screen fingerprint
- 2018-09-18The fastest in the country is not SF, but the biggest rival of SF, the growth rate is 3 times
- 2018-09-17Brush bus, brush subway, brush access control, omnipotent millet bracelet 3NFC version out of the box
- 2018-09-15The same price is the strongest! Meizu 16X camera configuration announced: super sensitive camera blessing
- 2018-09-12Millet 8s exposure: screen fingerprint + gradient color body, and Xiaomi MIX3 released on the same day?
- 2018-09-06Magic2 has been mass-produced. President of Glory recalls Huang Zhang: Can't eat grapes, say grape acid
- 2018-09-06Foreign media said Huawei GPU Turbo over-marketing Kirin 970 running data is suspected of deception
- Zhang Yong and Jia Yueting: A parting classmate’s parting ways
- Writing a program is like writing poetry. Lei Jun’s programming dream is presented in another way after 30 years.
- The minimum is 1713 yuan! Office 2019 officially released: compatible with Apple computers
- Meizu 16x renewed its life, but why should 16 out of the Aurora Blue new color, suicide!
- Implied that the new machine is four photos Lenovo mobile phone routines recognize Xiaomi 8 Youth Edition this time you won
- Meizu V8 first evaluation: How does Huang Zhang personally design the hundred yuan machine performance?
- iResearch responds to the loss of multiple executives: individual managers should assist the investigation at the request of relevant departments
- The official version of iOS 12 is online soon. Do you still believe that the new system is more fluid?
- The fight has skyrocketed, and the second echelon of China’s Internet has shuffled overnight!
- The next generation of full screen, reel phone is coming!