Unlock Your Doors With a Knock Code
Erica Campbell writes to tell us IsraCast is reporting that E-lock has developed a new kind of lock technology designed to open a door based on a "knock code." From the article: "This innovation is based on patented technology which uses a series of quick knocking sounds. The discrete mechanical knocks open the lock and are produced by a small device that can be carried by any authorized person. The device which opens the lock needs to touch the door (which can be made out of any material such as metal, wood, plastic or glass) to cause the lock mechanism to open. Since there is no keyhole or contact point on the door, this unique mechanism offers a significantly higher level of security then existing technology."
Yeah right. I think my PKI enabled smartcard offers a lot more security than this device.
No keyhole or lock either. The worst anyone could do is bash the reader but that ain't gonna open the door. And no, you can't just cross some wires and make it open. We're talking a full authentication session here (think ssh and similar).
Two words: Reverse engineering.
What methods have they developed to make the next sequence purely unpredictable? If the next knock sequence is computed from the old one, then the "listening" method is still valid. And if it isnt, one could replicate whatever variables either of the devices (Door or key) make use of to generate the next key.
And then, we're back to square one. Stealing the key is just as easy as stealing todays regular lock keys.
Sigh. In the article (which you didn't read) they say this will not work, because the knock code "changes each time". Probably some combination of your "personal key" (PIN) and date/time/etc.
What I don't see is why this is any more secure than a smart card. If it is such a big deal not to have a reader "on the surface", then just have a reader embedded in the door (i.e. induction-based). There are already smartcards that also change their code with each use (eg for remote logins to secure networks). The "knock" aspect screams gimmick to me...
I have a padlock that's at least 20 years old, with no external holes, other than where the loop comes out of the main body. The key is a flat metal plate about an inch long, with a number of magnets built into it. Place it against the side of the lock and the loop can be pulled up. No batteries, but I imagine it could be rendered unopenable by a sufficiently hard whack with a hammer. But then again, so would most locks...
Working in bankruptcy, I've had the opportunity to break into a larger number of buildings and rooms. The reality is that locks are for honest people. Short of a vault, the vast majority of door lock mechanisms can be defeated with a crowbar, bolt cutters, or leverage bar. Our arsenal includes:
* 25 lb, 66" pinch point crowbar
* 44" bolt cutters
* Standard crowbar
The pinch point crowbar has a knock-knock that no door can resist.