Testing of 29 smart locks: Kaidis, Dinggu and other samples, fingerprint recognition poses security risks

Nandou News Reporter Yang Liyun Is your smart door lock safe? On May 5, the China Consumers Association released a comparative test report on 29 smart door locks. The results showed that only one sample with the brand name \”Yamos\” was opened after being attacked by a small black box. 50% of the samples have fingerprint recognition security risks, including Kaidis (nominal model: TZ003-5CS(K7)) , Asia Pacific Tianneng (nominal model: A1 ), Dinggu (nominal model: smart fingerprint lock D1 iron door), Haier (nominal model: HL-63PF4) and other samples.

SAMSUNG (nominal model: SHP-P718LBG/CN), Sakura Lock (nominal model: DZ-H1 Semiconductor APP), Guojia (nominal model: A230), etc. 14 When the lock is continuously misoperated and the protective surface is damaged by external force, it will not be able to issue an audible or visual alarm indication or alarm signal.

The main test items for smart door locks are

safety performance, firmness, and durability

In order to understand the quality of smart door locks sold on the market The China Consumers Association, together with the Sichuan Provincial Consumer Rights Protection Committee, the Shenzhen Consumer Committee (including the Longgang District Consumer Committee and the Futian District Consumer Committee), and the Foshan Consumer Committee, jointly conducted a survey on mainstream online platforms, Comparative tests are conducted on some smart door lock products in offline physical stores.

The 29 smart door lock samples in this comparative test are all products with high attention and brand awareness, and top online platform sales. The staff of the Consumer Council simulated the purchase of ordinary consumers. . The price of sample locks ranges from 1,099 yuan to 5,899 yuan per set, and the prices vary greatly. Among them, 22 models were purchased through online platforms (Goode, Deschmann, Lumi, TCL, Smart Home, Gojia, Panasonic, Wanshiwei, Haier, Skyworth, Dinggu, VOC, Haolis, Jindian Atom, Comet, Perry, Sakura Locks, HSPR (Yujin), Yuema, Xiaoyi, Wrigley, Yamos), purchase 7 samples in physical stores (Luke, Caddis (K7), Asia Pacific Tianneng, SAMSUNG (SHP-DR708), Caddis (K8) , SAMSUNG (SHP-P718 LBG/CN), Seamer). From the aspects of information technology security, mechanical safety, and power battery safety, the safety performance, firmness, and durability of the sample locks were tested.

A smart door lock from Yamos

Opened after being attacked by a small black box

Last year, the \”little black box opened the smart door lock in seconds\”\”Rumors of \”are widely circulated. It is reported that the so-called \”little black box attack\” is actually a situation where a strong electromagnetic field is applied to the smart door lock, and the door lock can cause malfunction alarms, system locking, circuit damage, etc.

To verify this statement, a strong electromagnetic field strength 30 times higher than the field strength 50V/m of the \”Electronic Anti-theft Lock Standard\” was selected this time. 9 samples were tested.

The test results showed that the door lock of 28 samples did not open after the small black box attack, and only 1 model was purchased online and was sold by an unmanufactured company with the brand name \”Yamos\”. , samples without product model labels were opened after being attacked by a small black box

50% of the samples were fingerprinted. There are security risks in opening

Kadishi, Asia Pacific Tianneng, Dinggu, etc. are on the list

The unlocking method of sample locks generally includes fingerprint unlocking , password unlocking and identification card unlocking.

The results show that among the 29 samples, 48.3%. % of samples have security risks when opening passwords; 50% of samples have security risks when opening fingerprint recognition; 85.7% of samples have security risks when opening information identification cards. It is reported that information identification card encryption can effectively solve the security problem of information identification cards; it has a negative impact on the system and the system. The algorithm has been upgraded to solve password and fingerprint recognition security issues.

Note: \”√\” means that the content is relatively safe, \”×\” means that the content has security risks, \”——\” means that the sample does not have this function.

Information awareness Samples that pose security risks when opening password cards include:

Samples that pose security risks when opening fingerprint recognition include:

Samples that pose security risks when opening passwords include:

Nandu reporters found that three products including Wanshiwei (nominal model: ES-B300 semiconductor), Jindian Atom (nominal model: JD-H1), and Xiaoyi (nominal model: E301) The smart door lock samples have security risks in the three opening methods of password opening, fingerprint recognition, and information identification card.

1 sample with the nominal brand \”Kemi\”

The keyboard light keeps flashing after the impact test

According to the national mandatory standard GB 21556-2008《Lock\”Safety General Technical Conditions\” requires that the lock can still be used normally after undergoing sinusoidal vibration, impact, and drop tests.

This time, 28 samples can be turned on normally after the test. Only one sample with the nominal brand \”Kemi\” and model A2 showed that the keyboard light kept flashing after the impact test and could not be used normally.

Suffering from continuous misoperation or external force damage

14 types of locks cannot send out alarm signals

According to the national The mandatory standard GB 21556-2008 \”General Technical Conditions for Lock Safety\” requires that the lock should be able to automatically emit an audible or optical alarm indication or alarm signal when the lock is continuously misoperated and the protective surface is damaged by external forces. Testing showed that 14 of the 29 sample locks failed to send out an alarm signal.

Note: \”×\” indicates that the sample has this function

Gold dot atoms and other samples

Anti-vandalism Poor performance

This comparative test refers to the method of the mechanical anti-theft lock cylinder destruction test, using ordinary manual mechanical tools such as screwdrivers, tweezers, and hand hammers to destroy the mechanical emergency lock cylinder of the sample until it is destroyed. Open, and record the time when the destruction is opened. The specific situation is as follows:

Picture: 27 sample mechanical emergency lock damage opening times

Nandu reporters found that gold dot atoms (labeled For three smart door lock samples (nominal model: JD-H1), SAMSUNG (nominal model: SHP-DR708), and TCL (nominal model: AI8-E2G), the mechanical emergency lock damage opening time is within 100 seconds, preventingDestructive performance is poor.

Guangdong Jindian Atomic Information Service Co., Ltd., a manufacturer of Jindian Atomic smart door locks, told the China Consumers Association that in order to improve the anti-vandal security level of fingerprint locks, it will add fingerprint lock anti-pry switches and software processing. Achieve anti-vandal alarm function.