30c3 video: hacking RFID public access control systems

In this video from the 30th Chaos Communications Congress, Adrian Dabrowski lectured on RFID based access control systems which are becoming common in Europe. These systems debuted in 2006 and use RFID cards as a substitute for a previous mechanical key system to allow emergency service, delivery and other personnel unassisted access to the common areas of multi-occupant buildings.

We present a black-box analysis of an electronic contact-less system that has been steadily replacing a conventional mechanical key on multi-party houses in a big European city. So far, there are est. 10.000 installations of the electronic system. The mechanical key has been introduced about 40 years ago to allow mail delivery services to access multi-party houses but has since then aggregated many additional users, such as garbage collection, police, fire brigade and other emergency services. Over 92% of residential buildings in this city are equipped with such a solution.

Leave a comment

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail. You can also subscribe without commenting.