Has algorithms based on non-contact IC card entrance guard system programme (1)

First, the access control system status and problems

Access control system using an access card is divided into two categories: 125KHZ low frequency only reader, reading and writing of high frequency 13.56MHZ.

Low frequency only card 125KHZ, similar to a normal magnetic cards, no need plain language format to crack, universal programmer to imitated the card number, this is an early technology, security, and belong to eliminate technical, typically used for security requirements of the community, shall not apply to crypto units, high security locations. Commonly used the HF 13.56MHZ read and write cards, can be understood as the u disk with a password, the password to protect card data, the security level is medium, typically used for small e-wallet, identification card. The last two years the international break Mifare 1 card belongs to this class, and explains the way publicly, so use Mifare 1 entrance guard system for security breaches.

This storm caused a decryption of the industry, new access control system to improve security? built by using Mifare 1 Carmen guard system what upgrade options?

Second, non-contact IC card types and related standards

In discussing how to eliminate current problems, let us first summarize the non-contact IC card technology in General.

Non-contact IC card has replaced the magnetic card, become the mainstream of automatic identification card. Non-contact IC card in accordance with the frequency that can be divided into the following categories.

Low frequency only card 125KHZ, appear in 1979, these low-frequency card ID number of the storage media is EEPROM with electrical erasable capabilities, you can write multiple times, so the ID number is extremely easy to forge, and free from relevant international standards.

UHF microwave card 2.5GHZ 915MHZ, last year's new products, card up to the maximum distance 10m.

Relevant ISO/IEC international standard is not final 18000.

13.56MHZ HF read-write card, low frequency than 125KHZ card transfer rate of 100 times faster, is the most widely used, was born in 1993, and since then, the product line is constantly enriched.

According to the card distance, is divided into two standard, ISO/IEC 14443 standard, ISO/IEC 15693. ISO/IEC 14443 maximum distance 10cm, ISO/IEC 15693 standard non-contact IC card maximum distance 100cm.

ISO/IEC 14443 due to come out earlier, and because of the massive use of urban public transport, chip, card reading machines developed, thus at the same time become the mainstream of selecting access control card.

ISO/IEC 14443 Mifare 1 card with pseudo-random number for triple certification, 48-bit key length is too short, cause the card encryption algorithm is broken. Therefore a new non-contact IC card need a random number generation mechanism, key length, the encryption algorithm to improve on. While the frequency of communication, as well as 13.56MHZ ISO/IEC 14443 Protocol will continue to be used.

3. support to the National Bureau of password password algorithm contactless chip

1 card Mifare, smash-hit businesses competing uses of penetration is the chip manufacturers hadn't.

Although the chip manufacturer has introduced the upgraded chip, but due to the popularity of price, technology and other factors have not been accepted in most markets. In order to ensure the smart card market is healthy and orderly development, the support of the State secret code regulatory administration and organization, as early as in 2007, China has carried out independent property rights in China, dedicated to the RFID market development work of the cipher algorithm, a success. The password algorithm has also been numerous integrated circuit chip manufacturers in China's highly respected and followed that success launched related products. To huahong integrated circuit products, for example, the company adopted the State secret code regulatory administration SHC1112 chip product certification.

SHC1112 card chip integrates State secret code regulatory Administration provides 128-bit key encryption, using the SM7 the algorithms to secure data exchange.

Sketch of its triple certification as follows:

　　

[1] [2]