Murad Ahmed, Technology Reporter
Enter our Snapshots of Summer photography competition
Details of how to hack into identity cards that give millions of people access to secure buildings and public transport networks have been published online.
Dutch academics had previously demonstrated weaknesses in the smartcard system, but publication of detailed information on the vulnerability had been delayed by legal action from the card’s manufacturer. Full details of how to hack the cards were released at a security conference earlier this week and have now been published online.
Scientists at Radboud University in the Netherlands hacked into the Mifare system, which is used to control access to thousands of schools, hospitals and government departments around Britain. It also provides the technology behind 17 million Oyster cards for travel in London.
Bart Jacobs, of Radboud University, told a BBC documentary that will be broadcast on Saturday that he and his colleagues discovered a flaw in the chip’s design, making it easy to copy the cards.
"Once we knew how the system worked and what the vulnerabilities were, it turned out to be very simple to actually clone cards, steal someone's identity and enter a building as someone else," he said.
As part of the research, Professor Jacobs used a laptop to clone a card used to access a public building in the Netherlands. His team then travelled to London, where they used the same technique to travel on the Underground for a day without paying.
The chip Manufacturers NXP Semiconductors said that they sought an injunction to delay the information being released to allow time for their clients to update their security systems.
When The Times first revealed the security flaws in the cards, the Dutch Government posted armed guards outside its buildings and postponed the introduction of a new €1 billion transport payment system similar to the Oyster card until the security issues had been addressed.
Transport for London, which runs the Oyster card system for access to public transport in the capital, said it took the security of its cards “extremely seriously” but said they were confident that the system remains secure.
A Tfl spokesman said: “There is no evidence of the widespread cloning of Oyster cards, the system has not been hacked and there is no risk to card holders’ personal data as none is stored on the card."
Win a luxury weekend to Newcastle and its neighbour Gateshead, find out more here
Risk, resilience and embracing new technology
Industry sectors news at a glance. Interactive heatmap, video and podcast
Discover the collective power of smart thinking. Submit a solution and be in with a chance to win a Flip MinoHD Camcorder
The inside track on current trends in the charity, not for profit and social enterprise sectors
Everything the Business Traveller needs to know to make a better trip
Make the most of the summer and enter our fabulous photographic competition, you could win a £5000 holiday
Corsica is an island of beauty and contrast, an ideal holiday destination
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
The clever way to lease a new car is with Car leasing made simple™
2009
42,945
2008
71,450
Car Insurance
Not Specified
MI6
UK-based
£60,000
The Environment Agency
Bristol
Up to £90K
Boots
Midlands
OTE £85k
Credit Protection Association
Nationwide Opportunities
Completely London
Luxury Condo's in Manhattan with NYC views
The best new homes in Wimbledon?
Nationwide
Save up to £1,000 per couple with Elite Vacations at the five-star Constance Lemuria Resort
and do the British Isles this Summer.
Save up to 60% with Oxford Hotels and Inns
Try our inspiring luxury holidays to the Indian Subcontinent and South East Asia.
Great offers available
8 fabulous Canadian cities ...you won’t find cheaper
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Property Finder | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
4GBP per trip?? justin, a year back when i was in uk, it was 1.50 GBP per trip... has it increased to 4 GB in a year ?!
shajitha, dubai, UAE
Damn straight. It's the most expensive and the most unreliable system in the world - £4 for a single trip! what a joke.
Justin van Noort, London,
You know what...Good! In a London subway I pay the price of a CD just to go here and there. In Russia, a single ticket (to get you as far as you want once) costs 15 rubles: that's 33 pence. Englans robs people of everything they're worth. Better quality trains? Better erm...rubber handles? What then
Daniel, Tchalian,