Murad Ahmed, Technology Reporter
Attend a special evening hosted by Mike Atherton
Details of how to hack into identity cards that give millions of people access to secure buildings and public transport networks have been published online.
Dutch academics had previously demonstrated weaknesses in the smartcard system, but publication of detailed information on the vulnerability had been delayed by legal action from the card’s manufacturer. Full details of how to hack the cards were released at a security conference earlier this week and have now been published online.
Scientists at Radboud University in the Netherlands hacked into the Mifare system, which is used to control access to thousands of schools, hospitals and government departments around Britain. It also provides the technology behind 17 million Oyster cards for travel in London.
Bart Jacobs, of Radboud University, told a BBC documentary that will be broadcast on Saturday that he and his colleagues discovered a flaw in the chip’s design, making it easy to copy the cards.
"Once we knew how the system worked and what the vulnerabilities were, it turned out to be very simple to actually clone cards, steal someone's identity and enter a building as someone else," he said.
As part of the research, Professor Jacobs used a laptop to clone a card used to access a public building in the Netherlands. His team then travelled to London, where they used the same technique to travel on the Underground for a day without paying.
The chip Manufacturers NXP Semiconductors said that they sought an injunction to delay the information being released to allow time for their clients to update their security systems.
When The Times first revealed the security flaws in the cards, the Dutch Government posted armed guards outside its buildings and postponed the introduction of a new €1 billion transport payment system similar to the Oyster card until the security issues had been addressed.
Transport for London, which runs the Oyster card system for access to public transport in the capital, said it took the security of its cards “extremely seriously” but said they were confident that the system remains secure.
A Tfl spokesman said: “There is no evidence of the widespread cloning of Oyster cards, the system has not been hacked and there is no risk to card holders’ personal data as none is stored on the card."
Industry sectors news at a glance. Interactive heatmap, video and podcast
Everything the Business Traveller needs to know to make a better trip
Get ready for the winter sports season, with our resort guides and snow reports
We are backing British business, what is the confidence of the nation and what businesses are succeeding?
Growing demand for energy, oil that is harder to reach and the rise of carbon dioxide emissions. We examine the energy challenge
With rail travel in Europe on the rise, we review the benefits of travelling by train
In this special section we explore new food trends to help improve your dinner party and impress guests
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
1998
£47,955
12 months for the price of 11 and a 5% discount.
Offer ends 31/11/09
Check your free Experian credit report before applying
Car Insurance
£353 per day
Phonepay Plus
London
PwC’s Consulting practice helps businesses of all shapes and sizes work smarter and grow faster
PwC
£37,000
Department for Culture, Media and Sport
London
Currently £36,285
Department for Culture, Media and Sport
London
Moments from Battersea Park.
For sale with Winkworth
Find out about shared ownership.
See your free Experian credit report beforehand
Accommodation, flights, tickets to the race and a KL city tour for only £999pp
PremierHolidays.co.uk
For your ultimate tailor-made ski holiday, click here
Get covered on your travels with a superb range of policies at great prices. Visit InsureandGo.com
World Class Golf, Spa and preferential Beach Club. Private estate overlooking West Coast
Villas from £275 per night inclusive of Golf
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.