Murad Ahmed, Technology Reporter
Win tickets to the ATP finals
Details of how to hack into identity cards that give millions of people access to secure buildings and public transport networks have been published online.
Dutch academics had previously demonstrated weaknesses in the smartcard system, but publication of detailed information on the vulnerability had been delayed by legal action from the card’s manufacturer. Full details of how to hack the cards were released at a security conference earlier this week and have now been published online.
Scientists at Radboud University in the Netherlands hacked into the Mifare system, which is used to control access to thousands of schools, hospitals and government departments around Britain. It also provides the technology behind 17 million Oyster cards for travel in London.
Bart Jacobs, of Radboud University, told a BBC documentary that will be broadcast on Saturday that he and his colleagues discovered a flaw in the chip’s design, making it easy to copy the cards.
"Once we knew how the system worked and what the vulnerabilities were, it turned out to be very simple to actually clone cards, steal someone's identity and enter a building as someone else," he said.
As part of the research, Professor Jacobs used a laptop to clone a card used to access a public building in the Netherlands. His team then travelled to London, where they used the same technique to travel on the Underground for a day without paying.
The chip Manufacturers NXP Semiconductors said that they sought an injunction to delay the information being released to allow time for their clients to update their security systems.
When The Times first revealed the security flaws in the cards, the Dutch Government posted armed guards outside its buildings and postponed the introduction of a new €1 billion transport payment system similar to the Oyster card until the security issues had been addressed.
Transport for London, which runs the Oyster card system for access to public transport in the capital, said it took the security of its cards “extremely seriously” but said they were confident that the system remains secure.
A Tfl spokesman said: “There is no evidence of the widespread cloning of Oyster cards, the system has not been hacked and there is no risk to card holders’ personal data as none is stored on the card."
Industry sectors news at a glance. Interactive heatmap, video and podcast
Everything the Business Traveller needs to know to make a better trip
Get ready for the winter sports season, with our resort guides and snow reports
We are backing British business, what is the confidence of the nation and what businesses are succeeding?
Growing demand for energy, oil that is harder to reach and the rise of carbon dioxide emissions. We examine the energy challenge
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
36-month car lease
on contract hire for
£359.99 plus VAT pm
12 months for the price of 11 and a 5% discount.
Offer ends 31/11/09
The UK's leading alternative to showroom finance.
Finance packages tailored to your needs.
Minimum loan of £15,000
Car Insurance
£12,578 per annum
The Independent Housing Ombudsman
London
Competitive
Barclaycard
Not Specified
The Sheppard Trust
London
£80-95,000
Clay McGuire Executive Selection
Moments from Battersea Park.
For sale with Winkworth.
See your free Experian credit report beforehand
Book now & save over £100pp.
11 cool resorts, lowest prices... Early Booking offers 15 Nov.
20% off selected Azores holidays taken in October with Sunvil Discovery
Get covered on your travels with a superb range of policies at great prices. Visit InsureandGo.com
World Class Golf, Spa and preferential Beach Club. Private estate overlooking West Coast
Villas from £275 per night inclusive of Golf
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.