Murad Ahmed, Technology Reporter
Download your 2 for 1 Pizza Express voucher
Details of how to hack into identity cards that give millions of people access to secure buildings and public transport networks have been published online.
Dutch academics had previously demonstrated weaknesses in the smartcard system, but publication of detailed information on the vulnerability had been delayed by legal action from the card’s manufacturer. Full details of how to hack the cards were released at a security conference earlier this week and have now been published online.
Scientists at Radboud University in the Netherlands hacked into the Mifare system, which is used to control access to thousands of schools, hospitals and government departments around Britain. It also provides the technology behind 17 million Oyster cards for travel in London.
Bart Jacobs, of Radboud University, told a BBC documentary that will be broadcast on Saturday that he and his colleagues discovered a flaw in the chip’s design, making it easy to copy the cards.
"Once we knew how the system worked and what the vulnerabilities were, it turned out to be very simple to actually clone cards, steal someone's identity and enter a building as someone else," he said.
As part of the research, Professor Jacobs used a laptop to clone a card used to access a public building in the Netherlands. His team then travelled to London, where they used the same technique to travel on the Underground for a day without paying.
The chip Manufacturers NXP Semiconductors said that they sought an injunction to delay the information being released to allow time for their clients to update their security systems.
When The Times first revealed the security flaws in the cards, the Dutch Government posted armed guards outside its buildings and postponed the introduction of a new €1 billion transport payment system similar to the Oyster card until the security issues had been addressed.
Transport for London, which runs the Oyster card system for access to public transport in the capital, said it took the security of its cards “extremely seriously” but said they were confident that the system remains secure.
A Tfl spokesman said: “There is no evidence of the widespread cloning of Oyster cards, the system has not been hacked and there is no risk to card holders’ personal data as none is stored on the card."
Articles from our sister site:
Industry sectors news at a glance. Interactive heatmap, video and podcast
Get ready for the winter sports season, with our resort guides and snow reports
We are backing British business, what is the confidence of the nation and what businesses are succeeding?
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
2006/06
£POA
Surrey
2009
£114,950
Derbyshire
The best policy at the
best price
Be Wiser Insurance
£POA
Surrey
Highly competitive six figure
Nationwide
Swindon
Competitive benefits package
Chartered Institute of Builders
Ascot
Competitive salary + benefits
NHS Direct
London
£125K
Meltwater News
Nationwide Positions
With Part Exchange Crest Nicholson could get you moving.
Award-winning riverside development, SW11.
Luxury apartments for sale from £350,000.
Find out more about our luxurious apartments and houses for sale in the heart of Sussex.
for sale in the French Alps
from E189,000.
We're offering extra savings on Voyager & Adventure of the seas Mediterranean Cruises fr £549.
Book by 28 Feb!
Includes 3* accommodation throughout, a 15 minute Apollo night helicopter flight down the Las Vegas strip and United Airlines flights from Heathrow.
Same break by air costs £189. Valid for weekend travel until 31 Aug 10.
Get covered on your travels with a superb range of policies at great prices
Visit InsureandGo.com
Family friendly villas with Quality Villas. Book with the specialists.
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Milkround
Copyright 2010 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.