Sawubona, igama lami ngingu-Andrey futhi ngiyisisebenzi kwenye yezinkampani ezinkulu zokuphatha ezweni. Kubukeka sengathi isisebenzi sikaHabré singasho? Zisebenzise izakhiwo ezakhiwe unjiniyela futhi akukho okuthakazelisayo, kodwa akunjalo.
Inkampani yokuphatha inomsebenzi owodwa obalulekile futhi onomthwalo wemfanelo endimeni yokwakha indlu - lokhu ukuthuthukiswa kwemininingwane yezobuchwepheshe yokwakha. Yinkampani yabaphathi ebeka phambili izidingo ezizofinyelelwa uhlelo oluqediwe, olwakhiwe lwe-ACS.
Kulesi sihloko, ngithanda ukumboza isihloko sokudala izimo zobuchwepheshe ngaphakathi kohlaka lapho indlu yakhiwa khona ngohlelo lwe-ACS olusebenzisa ubuchwepheshe bezinga lezokuphepha le-SL3 le-Mifare Plus elinombhalo wemfihlo womkhakha onokhiye wokuphepha ongeyena umthuthukisi, noma usonkontileka, noma usonkontileka omncane uyazi.
Futhi enye yezomhlaba wonke ayibonakali nhlobo ekuqaleni - ukuthi ungakuvimbela kanjani ukuvuza kwekhodi yokubethela ekhethelwe ukubethelwa kwamakhadi e-Mifare Plus ngaphakathi kwesigaba sabakhi, osonkontileka, abathengisi nabanye abantu abanomthwalo wemfanelo abasebenza nohlelo lwe-ACS ku. ekhaya esiteji kusukela ekuqaleni kokwakhiwa kwayo kuze kube sekusebenzeni phakathi nenkathi yangemva kwewaranti.
Ubuchwepheshe obuyinhloko bamakhadi angathintwa namuhla:
- I-EM Marine (StandProx, ANGstrem, SlimProx, MiniTag) 125 kHz
- I-Mifare nge-NXP (Classic, Plus, UltraLight, DESfire) (Mifare 1k, 4k) 13,56 MHz
- Umkhiqizi we-HID HID Corporation(ProxCard II, ISOProx-II, ProxKey II) 125 kHz
- I-iCLASS ne-iCLASS SE (ekhiqizwe yi-HID Corporation) 13,56 MHz
- I-Indala (Motorola), Nedap, Farpointe, Kantech, UHF (860-960 MHz)
Kuningi okushintshile kusukela kwasetshenziswa i-Em-Marine ezinhlelweni ze-ACS, futhi muva nje sisuka kufomethi ye-Mifare Classic SL1 saya kufomethi yokubethela ye-Mifare Plus SL3.
I-Mifare Plus SL3 isebenzisa ukubethela komkhakha ozimele ngokhiye oyimfihlo we-16-byte ngefomethi ye-AES. Ngalezi zinhloso, kusetshenziswa uhlobo lwe-chip ye-Mifare Plus.
Ukushintsha kwenziwe ngenxa yokuba sengozini okwaziwayo kufomethi yokubethela ye-SL1. Okungukuthi:
I-cryptography yekhadi icwaningwe kahle. Sithole ubungozi ekusetshenzisweni kwe-pseudo-random number generator (PRNG) yemephu kanye nokuba sengozini ku-algorithm ye-CRYPTO1. Empeleni, lobu bungozi busetshenziswa ekuhlaselweni okulandelayo:
- Uhlangothi olumnyama - ukuhlasela kusebenzisa ukuba sengozini kwe-PRNG. Isebenza kumakhadi e-MIFARE Classic kuze kufike esizukulwaneni se-EV1 (ku-EV1, ukuba sengozini kwe-PRNG sekulungisiwe kakade). Ukuze uhlasele, udinga imephu kuphela, awudingi ukwazi okhiye.
- I-Nested - Ukuhlasela kusebenzisa ukuba sengozini kwe-CRYPTO1. Ukuhlasela kwenziwa ekugunyazweni kwesibili, ngakho-ke ukuze uhlasele udinga ukwazi ukhiye wekhadi owodwa ovumelekile. Eqinisweni, emkhakheni we-zero, okhiye abajwayelekile bavame ukusetshenziselwa ukusebenza kwe-MAD - baqala ngayo. Isebenza kunoma imaphi amakhadi ku-CRYPTO1 (MIFARE Classic kanye nokulingiswa kwayo). Ukuhlasela kuboniswa esihlokweni esimayelana nokuba sengozini kwekhadi le-Plantain
- Ukuhlasela okulalelayo - Ukuhlasela kusebenzisa ukuba sengozini kwe-CRYPTO1. Ukuze uhlasele, udinga ukulalela ukugunyazwa okuyinhloko phakathi komfundi nekhadi. Lokhu kudinga imishini ekhethekile. Isebenza kunoma imaphi amakhadi asekelwe ku-CRYPTO1 (MIFARE Classic kanye nokulingiswa kwayo.
Ngakho: ukubethela kwamakhadi efektri yisikhathi sokuqala lapho kusetshenziswa khona ikhodi, uhlangothi lwesibili ngumfundi. Futhi asisabethembi abakhiqizi bokufunda ngekhodi yokubhala, ngoba nje abanandaba nayo.
Umkhiqizi ngamunye unamathuluzi okufaka ikhodi kumfundi. Kodwa kungalesi sikhathi lapho inkinga yokuvimbela ukuvuza kwekhodi kubantu besithathu phambi kosonkontileka kanye nosonkontileka abangaphansi kokwakhiwa kohlelo lwe-ACS. Faka ikhodi mathupha?
Kunobunzima lapha, njengoba i-geography yezindlu eziqhutshwayo imelwe ezindaweni ezihlukahlukene zaseRussia, ngaphesheya kweSifunda saseMoscow.
Futhi zonke lezi zindlu zakhiwe ngokwezinga elilodwa, ngemishini efanayo ngokuphelele.
Ngokuhlaziya imakethe yomfundi wekhadi le-Mifare, angikwazanga ukuthola inombolo enkulu yezinkampani ezisebenza ngezindinganiso zesimanje ezinikeza ukuvikelwa kwekhophi yekhadi.
Namuhla, abakhiqizi abaningi bezingxenyekazi zekhompuyutha basebenza ngemodi yokufunda ye-UID, engakopishwa yinoma iyiphi iselula yesimanje ene-NFC.
Abanye abakhiqizi basekela isistimu yezokuphepha ye-SL1 yesimanjemanje, eyayivele isengozini emuva ngo-2008.
Futhi abakhiqizi abambalwa kuphela ababonisa izixazululo ezingcono kakhulu zobuchwepheshe ngokwesilinganiso sekhwalithi yentengo yokusebenza nobuchwepheshe be-Mifare kumodi ye-SL3, okwenza kube nzima ukukopisha ikhadi nokudala i-clone yalo.
Inzuzo eyinhloko ye-SL3 kule ndaba ukungenzeki kokukopisha okhiye. Ubuchwepheshe obunjalo abukho namuhla.
Ngizokhuluma ngokwehlukana ngezingozi zokusebenzisa ukukopisha ikhadi ngokusakazwa kwamakhophi angaphezu kuka-200.
- Izingozi ngasohlangothini lwabaqashi - ukwethemba “inkosi” ukuthi izokwenza ikhophi yokhiye, ukulahlwa kokhiye womqashisi kungena kusizindalwazi sakhe, futhi “umphathi” uthola ithuba lokungena emnyango, futhi aze asebenzise indawo yokupaka noma indawo yokupaka yomqashi.
- Izingozi zezentengiselwano: uma intengo yokudayisa yekhadi ingama-ruble angu-300, ukulahlekelwa kwemakethe ngokudayiswa kwamakhadi engeziwe akuyona ukulahlekelwa okuncane. Ngisho noma "i-Master" yokukopisha okhiye ivela ku-LCD eyodwa, ukulahlekelwa kwenkampani kungafinyelela kumakhulu ezinkulungwane nezigidi zama-ruble.
- Okokugcina, izakhiwo zobuhle: wonke amakhophi enziwa kumadiski ekhwalithi ephansi. Ngicabanga ukuthi abaningi benu bajwayelene nekhwalithi yoqobo.
Sengiphetha, ngifuna ukusho ukuthi ukuhlaziya okujulile kuphela kwemakethe yemishini kanye nezimbangi kukuvumela ukuthi udale izinhlelo ze-ACS zesimanje nezivikelekile ezihlangabezana nezidingo zika-2019, ngoba wuhlelo lwe-ACS esakhiweni sokuhlala okuwukuphela kwe- uhlelo lwamanje umhlali ahlangana nalo izikhathi eziningana ngosuku.
Source: www.habr.com