[Q] NFC for Access Control - NFC Hacking

Hello!
Currently I am writing my Master's thesis. For this I am supposed to use the NFC function of the Samsung Galaxy Nexus to turn on/off certain devices such as a flat iron or a stove.
My idea was to use an RFID access control as the ones used to open laboratory doors or the like and attach its relais to the devices' power switch. One could hold the phone next to the device to turn it on/off if permission is granted.
However, most of the access controls I've found are only for 125kHz. As far as I know NFC uses the ISO/IEC 14443 standard which communicates with 13.56MHz. What confuses me though is that some sources say it works with the NXP Mifare Ultralight C chipset but not with the Mifare Classic 1K. Can anyone explain why that is? But even more important to me is: has anyone a good suggestion on the access control I should use in my case?
I'd be happy about any reply!
Regards,
-knucKles

knucKles2 said:
Hello!
Currently I am writing my Master's thesis. For this I am supposed to use the NFC function of the Samsung Galaxy Nexus to turn on/off certain devices such as a flat iron or a stove.
My idea was to use an RFID access control as the ones used to open laboratory doors or the like and attach its relais to the devices' power switch. One could hold the phone next to the device to turn it on/off if permission is granted.
However, most of the access controls I've found are only for 125kHz. As far as I know NFC uses the ISO/IEC 14443 standard which communicates with 13.56MHz. What confuses me though is that some sources say it works with the NXP Mifare Ultralight C chipset but not with the Mifare Classic 1K. Can anyone explain why that is? But even more important to me is: has anyone a good suggestion on the access control I should use in my case?
I'd be happy about any reply!
Regards,
-knucKles
Click to expand...
Click to collapse
Just an Idea and hear me out...
As far as I remember most access control (Which I used to use about 7 years ago when I was working for a plant as a part time IT) is nothing but the right string of 101011010, a few bits of data stored on a magnetic strip on a card, or the older NFC chips that could changed, but only store 1 "Tag" at a time.
With most NFC chips in our newer smart phones we have the control to change the information that is broadcast by our NFC on the fly, and even better it is a two way transmission (Which is what makes Google wallet possible.)
If you were going to attempt to make a stove or other device turn off and on with an NFC chip, you would be better off not looking for an access control solution. I would try using another computer. Something that can be programmed with an NFC chip to receive a certain bit of code that says "Turn on front right burner at 50%" and then reply with a conformation saying when the action is complete.
A small Linux box, with an NFC and a single program, and Knowledge of external interfacing.
A smart phone with preset tags that can be chosen to do different actions, and wait for a confirmation.
I think that would be something new and applicable to the real world.
Hope this give you some ideas
After I get done with my current project I am going to make an android app that lets you create an NFC tag and write it to any tag, so people can program there router, stick an NFC Sticker to the side of your router any anyone with an NFC chip will have instant access to there network by touching the router.

Switching on a device using NFC
I have a similar requirement; i.e. to activate a device using NFC from a phone or smart tag. My question is whether the induction power of the NFC from the phone is sufficient to turn on a device that is an off state prior to this.

ilsol said:
I have a similar requirement; i.e. to activate a device using NFC from a phone or smart tag. My question is whether the induction power of the NFC from the phone is sufficient to turn on a device that is an off state prior to this.
Click to expand...
Click to collapse
Yes , but such tag isn’t available online, such tag can be only order from specialized manufacturer, we are making some stuff will turn on & off bluetooth device, and it work like a charm. Need soldering to bypass the existing on/off button.
hope that help

ilsol said:
I have a similar requirement; i.e. to activate a device using NFC from a phone or smart tag. My question is whether the induction power of the NFC from the phone is sufficient to turn on a device that is an off state prior to this.
Click to expand...
Click to collapse
Probably not, you will need something (small chip) that just listens for the right tag and handles it for you.
Thrown far across the web with the power of Hercules and Tapatalk 2

thankyou very jedan

Related

We can connect (and use) external NFC readers to our phones through USB OTG

You can find pictures and a description of my set up here:
http://www.nfcbrief.com/2012/07/acr122-and-galaxy-nexus-connected-via.html
Basically, ACS released an application called Smart Biz Card that allows you to read and write contact NFC tags with the popular ACR122 connected via USB host. The application is only for tablets, so it will look strange on phone screens, but this can be fixed by entering tablet mode.
I'm sure many of you viewing this sub-forum also have a ACR122, so maybe this application will provide some clues as to unlocking more advanced features through external readers?
NFC Guy said:
You can find pictures and a description of my set up here:
http://www.nfcbrief.com/2012/07/acr122-and-galaxy-nexus-connected-via.html
Basically, ACS released an application called Smart Biz Card that allows you to read and write contact NFC tags with the popular ACR122 connected via USB host. The application is only for tablets, so it will look strange on phone screens, but this can be fixed by entering tablet mode.
I'm sure many of you viewing this sub-forum also have a ACR122, so maybe this application will provide some clues as to unlocking more advanced features through external readers?
Click to expand...
Click to collapse
hi good job but i don't see the point ?? Nexus for example already have NFC so why connect ACR 122 ??
Bardamuz said:
hi good job but i don't see the point ?? Nexus for example already have NFC so why connect ACR 122 ??
Click to expand...
Click to collapse
My thinking was that this sort of thing would be ideal for NFC hacking. The documentation for the ACR122 states that it can do card emulation (but everyone seems to be having trouble with it). If we could somehow get the drivers for the ACR122 working fully with Android, it would provide a good alternative to trying to access our phones' secure elements for card emulation.
This could also have some more practical uses, e.g. for event ticketing on a small scale?
NFC Guy said:
My thinking was that this sort of thing would be ideal for NFC hacking. The documentation for the ACR122 states that it can do card emulation (but everyone seems to be having trouble with it). If we could somehow get the drivers for the ACR122 working fully with Android, it would provide a good alternative to trying to access our phones' secure elements for card emulation.
This could also have some more practical uses, e.g. for event ticketing on a small scale?
Click to expand...
Click to collapse
i some point i agree with you, but i think will be (maybe) simpler to use the ACR122 in pc (mac/winbooze) and transfer it in some Android apps
but at least you are right card emulation it's a problem currently
ACS USB NFC reader
Hi
Have you actually had this working on a tablet? I have tried with a Samsung Galaxy tab 10.1 (2) and the reader is not recognised. Some other readers which have chipsets Samsung support are recognised and show up as an HID. But the ACR122U doesnt appear.
Ted
Basically, ACS released an application called Smart Biz Card that allows you to read and write contact NFC tags with the popular ACR122 connected via USB host. The application is only for tablets, so it will look strange on phone screens, but this can be fixed by entering tablet mode.
I'm sure many of you viewing this sub-forum also have a ACR122, so maybe this application will provide some clues as to unlocking more advanced features through external readers?[/QUOTE]
tedhurlock said:
Have you actually had this working on a tablet? I have tried with a Samsung Galaxy tab 10.1 (2) and the reader is not recognised. Some other readers which have chipsets Samsung support are recognised and show up as an HID. But the ACR122U doesnt appear.
Click to expand...
Click to collapse
I would guess they are missing the mandatory drivers to use them. Btw, are you sure they are recognized as HID? They actually should be recognized as CCID, if I remember correctly. Can you confirm they actually work?
ACR122 on Galaxy
I have no idea where I would get drivers. ACD who produce the device have only given a lava library for access which seems to use direct USB calls. And it seems to have been broken with ICS.
Tjis Android world looks quite muddy from my first experiences
Damastus said:
I would guess they are missing the mandatory drivers to use them. Btw, are you sure they are recognized as HID? They actually should be recognized as CCID, if I remember correctly. Can you confirm they actually work?
Click to expand...
Click to collapse

NFC tags - What will you use them for?

I'm very intrigued by the Nexus 5's NFC feature. I have ordered 10 tags from eBay, and plan on playing around with them.
Here are some ideas that I will be exploring:
you could store a URL on then so when someone places there phone near the tag, it loads a webpage, or, better yet, a YouTube video
You could also put an NFC sticker on the back of your business card that contains a VCard so when scanned by a phone, will add a new contact with name, address, email, and phone number
You can also use it to launch app or various actions like NFC Task Launcher
Use a nfc tag to open a photo of your list of medications for a diabetic and then be stick onto a braclet for emergency services to use
Switching on my WiFI and changing my lock screen from "pattern" to "None" when I enter my home
Switching BT on and starting Google Music when I get into my car
Putting my mobile into Aeroplane Mode at night
I have one at work setting the phone to dock mode, wifi on etc
I have one located in my entrance hall so when I get home my mobile data turns off, wifi turns on and a SMS is sent to the wife letting her know I'm home
I have one in my sofa cushion which I use on my Galaxy S3 to run a Tasker script to wake my media center and start a remote control app
Got one on my wallet as my contact card, so if some one asks for my number, I just NFC it onto there phone, works through the wallet, so you can stick it on the inside or to a card in side, or even just slip it into a pouch.
Got one on my work ID badge. So when going into work in morning, after breaks and lunch etc, swipe the phone over my badge, and it shuts everything down, leaving the phone exactly how I specify.
Put one inside the battery cover of my tv remote and if I touch my phone to it it brings up a tv guide on my phone.
On my bedside cabinet, the sticker opens IMDB as me and my girlfriend are always like "OMG who is that?!" when watching films
I have one by my bed to turn phone to silent and load up Music Streaming and then tap it again in the morning and it turn it back to "day mode"
log visitors into your home wifi network without them needing the password.
I can now connect my phone to my car cradle, and the tag on it automatically increases screen brightness to max, increases media volume to max, turns on bluetooth, and loads my sat nav app Waze
The Car
I've attached this tag to the dashboard in our car and it does the following to my phone:
Turns off wifi and enables mobile data
Turns up all of the volume settings to max
Opens my Google Music app, so I can choose a playlist to listen to
Welcome Home!
This tag is located on the bookcase just inside my front door. When I swipe my phone over it, the following happens:
Mobile data is turned off and wifi is turned on
Volumes are turned down to 50%
My phone forces a sync to check for new emails / updates etc.
Bed Time
Attached to the headboard of our bed, this tag sets my phone up for the night, it:
Sets my phone to silent
Turns off vibrate
Sets my alarm volume to full
I could also have it set an alarm, but I have a wife who is far more successful at waking me up than an alarm!
Washing Machine!
This one is my favourite, for out and out unnecessary geekiness! Attached to our washing machine, it:
Set the alarm on my phone for when the washing cycle is due to finish (I worked the length out) and this means I'm less likely to forget to dry stuff once it's washed.
It also sends an sms to my wife, telling her "I've put a load in the washing machine x".
This scores me some husband points and also remind her that there's a load in the washing machine that needs drying if I'm out when she gets home. Domestic bliss!
The Keyring
Along with the 10 tags I purchased came an additional tag on a keyring. I've programmed this one to check into Foursquare. Whenever I swipe my phone over the keyring, it opens up the list of nearby Foursquare locations and I simply tap the correct one to check in.
Darkfire2024 - Right now I have one on my laundry basket to set alarm for 30 minutes to tell me the laundry is done. i also use the keychain as a vibrate/ringer toggle for when I leave and enter meetings.
Is there a list of what others have done? Is there anything more interesting that people have already done?
I can see the potential, and am looking for other's ideas to explore.
Oh, and is Trigger (nee NFC Task Launcher) what everyone is using?
NFC Tags with 1k Chip 10 Pack + Keychain + Free Bonus Tag - Android Writeable & Programmable - Adhesive Sticker Back - Samsung Galaxy S3 Note 2 - HTC One First One X Droid DNA - Sony Xperia - Lg Optimus G - Smart Tags - Best Money-Back Guarantee!
Here is a 10 pack with prime shipping. I'm going to put one in my car to turn on BT and launch my podcast app and max out the media volume. I will have one at work to change the volume on the phone and turn on wifi. I Might keep on in my wallet to turn on a outdoor style mode.
grndc2gsr said:
NFC Tags with 1k Chip 10 Pack + Keychain + Free Bonus Tag - Android Writeable & Programmable - Adhesive Sticker Back - Samsung Galaxy S3 Note 2 - HTC One First One X Droid DNA - Sony Xperia - Lg Optimus G - Smart Tags - Best Money-Back Guarantee!
Here is a 10 pack with prime shipping. I'm going to put one in my car to turn on BT and launch my podcast app and max out the media volume. I will have one at work to change the volume on the phone and turn on wifi. I Might keep on in my wallet to turn on a outdoor style mode.
Click to expand...
Click to collapse
"Not compatible with the SAMSUNG S4, Moto X, Note 3, Nexus, Blackberry and Nokia products. "
http://www.amazon.com/TagsForDroid-...e=UTF8&qid=1384032172&sr=8-6&keywords=nfc+tag
I got those because of the cool stickers. Right now I have one on my laundry basket to set alarm for 30 minutes to tell me the laundry is done. i also use the keychain as a vibrate/ringer toggle for when I leave and enter meetings.
That laundry and meeting idea is great. That could be very useful.
Here are some UK based sellers
http://www.amazon.co.uk/RapidNFC-NTAG203-29mm-Clear-Tags/dp/B008JW5QZ0/ - £4.80+£1.50 del
http://www.amazon.co.uk/Kamor®-NFC-tags-Waterproof-Stickers/dp/B00DRDZ08E/ - £9.99 inc del
Any advice on which type to go for? Pros and Cons for each type?
Just some info incase you guy didn't already know. When buying NFC tags for the Nexus 5, make sure they say NTAG203 or you will have problems writing them.
I got a 5 pack about a year ago to use with my S2. Have yet to use them.
Sent from my Nexus 5
Just bought this 10+1 pack $12 with Prime: http://www.amazon.com/Kamor®-NFC-tags-Waterproof-Stickers/dp/B00DRDZ08E
Could use one to fetch news and turn on music in the morning
I bought 4 from Tagstand and have set up 2 for the car - one for my car dock which will turn on BT, GPS, and auto brightness and launch Maps, and the other I will put on the dash or something to turn off BT and GPS and set my brightness lower.
The laundry one is a great idea!
The novelty wears off pretty quickly. I purchased a few wrist tags to use with my nexus 7, with the idea to automatically unlock when in close proximity. Turns out it's easier to enter a pin.
The Android Beam feature which uses NFC (and bluetooth) is very handy. Find myself using that most days.
What's the difference between the NTAG203 (Type 2) and Topaz 512 NFC (Type 1) tags?
The site I looked at said both should work on all NFC devices.
The only difference I can see is the memory: 168b v 450b. Anything else?
eastpac said:
What's the difference between the NTAG203 (Type 2) and Topaz 512 NFC (Type 1) tags?
The site I looked at said both should work on all NFC devices.
The only difference I can see is the memory: 168b v 450b. Anything else?
Click to expand...
Click to collapse
I am not sure either - like you suggest, I would have hought both types are compaitable with all devices. More intelligent people may be able to explain it better..
http://forum.xda-developers.com/wiki/NFC_Tags
http://www.nfc.cc/technology/nfc-tag-types/
My oh my, why on Earth does this happen all the time.
Come out with new technology.
Oh no, let's make two standards of NFC chips!
:silly:
I'll use it for car, work and home but more creative ways, I don't know yet.
PunchTheLion said:
My oh my, why on Earth does this happen all the time.
Come out with new technology.
Oh no, let's make two standards of NFC chips!
:silly:
I'll use it for car, work and home but more creative ways, I don't know yet.
Click to expand...
Click to collapse
Yeh, I know... This looks useful
http://rapidnfc.com/nfc_enabled_phones
sohell said:
I am not sure either - like you suggest, I would have hought both types are compaitable with all devices. More intelligent people may be able to explain it better..
http://forum.xda-developers.com/wiki/NFC_Tags
http://www.nfc.cc/technology/nfc-tag-types/
Click to expand...
Click to collapse
Below I found an explanation of the different tag types. Basically what I took from it is that type 1 &2 are meant to have a more disposable nature because they're not able to store enough information to perform complex tasks and are inexpensive to make. Type 3 & 4 are meant for more difficult things (i.e. probably things like Google Wallet reader where significant amounts of info are being passed around), are set at manufacture and thus can't be programmed as well as are more expensive.
Took the following from http://www.radio-electronics.com/info/wireless/nfc/near-field-communications-tags-types.php
NFC tag type definitions:
There are four basic tag types that have been defined. These are given designations 1 to 4 and each has a different format and capacity. These NFC tag type formats are based on ISO 14443 Types A and B which is the international standard for contact-less smartcards) and Sony FeliCa which conforms to ISO 18092, the passive communication mode, standard).
The advantage of keeping the NFC tags as simple as possible is that they may be deemed to be disposable in many instances, often embedded in posters that may only have a short life, etc.
The different NFC tag type definitions are as follows:
Tag 1 Type: The Tag 1 Type is based on the ISO14443A standard. These NFC tags are read and re-write capable and users can configure the tag to become read-only. Memory availability is 96 bytes which is more than sufficient to store a website URL or other small amount of data. However the memory size is expandable up to 2 kbyte. The communication speed of this NFC tag is 106 kbit/s. As a result of its simplicity this tag type is cost effective and ideal for many NFC applications.
Tag 2 Type: The NFC Tag 2 Type is also based on ISO14443A. These NFC tags are read and re-write capable and users can configure the tag to become read-only. The basic memory size of this tag type is only 48 bytes although this can be expanded to 2 kbyte. Again the communication speed is 106 kbit/s.
Tag 3 Type: The NFC Tag 3 Type is based on the Sony FeliCa system. It currently has a 2 kbyte memory capacity and the data communications speed is 212 kbit/s. Accordingly this NFC tag type is more applicable for more complex applications, although there is a higher cost per tag.
Tag 4 Type: The NFC Tag 4 Type is defined to be compatible with ISO14443A and B standards. These NFC tags are pre-configured at manufacture and they can be either read / re-writable, or read-only. The memory capacity can be up to 32 kbytes and the communication speed is between 106 kbit/s and 424 kbit/s.
From the definitions of the different NFC tag types, it can be seen that type 1 and 2 tags are very different to type 3 and 4 tags, having different memory capacity and makeup. Accordingly it is expected that there is likely to be very little overlap in their applications.
Type 1 and type 2 tags are dual state and may be either read/write or read-only. Type 3 and Type 4 tags are read-only, data being entered at manufacture or using a special tag writer.
Wait...there's three standards of NFC chips? :silly:
Thankfully they can get some things standardised though.
eastpac said:
What's the difference between the NTAG203 (Type 2) and Topaz 512 NFC (Type 1) tags?
The site I looked at said both should work on all NFC devices.
The only difference I can see is the memory: 168b v 450b. Anything else?
Click to expand...
Click to collapse
I just bought a 10 pack of Topaz ones. I think they'll both work with the N5, its just the memory capacity thats different. If you use the app Trigger (formally known as NFC launcher) and make your tasks or actions, it tells you how many bytes they are, so you can buy your tag accordingly.
Also as a side note, dont buy the 1K tags as they arent compatible with the newer smartphones. They do have almost double the memory capacity but i rather not take a risk.
Will update everyone once i play around with my tags.
rohin26 said:
Will update everyone once i play around with my tags.
Click to expand...
Click to collapse
Nice, most people on the sites/ebay opt for the NTAG203 (Type 2) instead of the Topaz 512 so there's not much feedback on it yet.
In terms of memory, the higher it is the more complex the task/action the tag can hold? Haven't had the chance to use Trigger yet so I don't know how many bytes a usual task would require but I'll get onto that soon.
For those in the UK, an eBay seller has 10 sticker NFC tags for £6. Not tried them myself, but will be placing an order later today.
http://www.ebay.co.uk/itm/271279788892
eastpac said:
Nice, most people on the sites/ebay opt for the NTAG203 (Type 2) instead of the Topaz 512 so there's not much feedback on it yet.
In terms of memory, the higher it is the more complex the task/action the tag can hold? Haven't had the chance to use Trigger yet so I don't know how many bytes a usual task would require but I'll get onto that soon.
Click to expand...
Click to collapse
Yeh i was going to go for the NTAG203 but then i used trigger and created some dummy actions that i would use, they were well over the 144bytes mark. The Topaz 512's arent that much more expensive, only a couple of dollars. I dont mind paying for quality.

HCE/APDU-sniffing problem

Here's my problem: I want to be able to primitively emulate some function of a Desfire EV1 card by playing back the APDUs it receives/sends to a card reader. The problem is I don't know what kind of APDUs the reader is sending out.
I can't use KitKat because KK HCE requires the app to specify the SELECT AID APDU that the reader sends out, and I have no idea what that is or whether the reader is even sending a SELECT AID out.
I figured I could use Eddie Lee's NFCProxy on a modified build of CM9 to analyze the card/reader interactions, but every time I put my phone up to the reader, it says "invalid card."
My guess is that the reader is picking up some other NFC signal from the phone, possibly Android Beam-related. In fact, if I try to run a card emulation app on 1 phone and have another phone try to read it, both of the phones start buzzing. Even though I have Android Beam turned off, the OS's NFC scanning cycle is set to detect other Android peer-to-peer devices regardless.
Modifying the app's manifest for android.nfc.disable_beam_default doesn't disable it either.
Does anybody know what I have to modify in the CM source code to disable peer-to-peer NFC completely? Then I could build a version of CM with proper emulation. OR, does anybody have any other ideas?
I've been tearing my hair out with this one lol

[Q] Using NFC to acces control

Hi guys,
There is a question to Smartwatch owners.
Does anyone tried to use NFC tag in the watch to open a door or gain access on other RFID device?
I'm considering to buy a watch and the main reason to do it is abillity to use it at work, where I have to go through many doors where I use my Nexus 5 or just simple keyfob with Mifare chip.
I don't really understand, why companys like Sony, LG or Samsung cannot see this, that is a game changing feature .... There is until now, just one company which thinking about that.. but theirs watch isn't smart : http://www.winwatchtrade.com/the-key-nfc-mifare/
Be something that would be very cool, would have to see if NFC Tagwrier can be sideloaded..
Even if it worked on the watch, it may not create workable NFC tags,
Hope somebody tries this. I did try but was not able to read any NFC tags
AstroDigital said:
Be something that would be very cool, would have to see if NFC Tagwrier can be sideloaded..
Even if it worked on the watch, it may not create workable NFC tags,
Hope somebody tries this. I did try but was not able to read any NFC tags
Click to expand...
Click to collapse
Tried and worked with an HID iClass R10 Card Reader. Problem is that the watch's nfc sends the same info from all Sony SW3's, so not secure.

[Q] NFC transmitter device configuring from windows

i am interesting in NFC development. I did watch and read some topics about the NFC tag, it is wonderful how could you change your phone|table by just tap on the tags. But the tags are kind of passive.
I want a NFC device live-data configure from windows (using USB cable or something) then transmit that data to user (smartphone). The device would be read-only mode.
Would you guys give me some example device available? Thanks a ton
I was also looking for something like that... Have you found anything?
Sent from my SM-N9005 using Tapatalk

Categories

Resources