OFweek smart home network News May 20, 2017 National Science and Technology Week and Beijing Science and Technology Week at home games in Beijing National Cultural Palace opened. The theme of this year's Science and Technology Week is “The Dream of Science and Technology, Innovation and Dreamsâ€. It showcases many technological innovation products and interactive science experience facilities. In the “Creative Thinking†exhibition hall, the “Internet Smart Door Lock†project exhibited by Beijing Yaoguang Intelligent Technology Co., Ltd. won the attention of many audiences due to its innovative technology and novel design experience.
In recent years, smart door locks have frequently appeared in various types of exhibitions such as smart home exhibitions, and Expo fairs. The attention is very high. But what features of smart door locks are really useful and what are the security risks? These are issues that the industry and users need to seriously think about.
It is understood that there are mainly three types of door locks on the market today. The most common type is a mechanical lock, which is unlocked daily with a key. The second type is a fingerprint coded lock, which is an electronic lock. It does not carry a key, it uses a fingerprint entered in advance or Set the password to open the door; the third category is the smart lock, usually with networking capabilities, providing mobile phone App for remote rights management, when the door is being warned.
“The door lock is different from other smart homes. It is a security product and it is related to the personal and property safety of consumers. We hope to be a responsible product and truly solve the pain points of users without introducing new hidden dangers. Not only does it do a smart lock, but we also hope that every family can feel the safety and protection brought by science and technology through a light lock," said Yu Mianjun, the founder of Shaker.
The members of Yaoguang Intelligent's technical team are from Tsinghua University, Beihang University, Shanghai Jiao Tong University, and other institutions. Yaoguang Intelligent Company is the founding team's second venture. Talking about the direction of entrepreneurship, team members said that although the door lock is a hardware product, it looks like there is no temperature, but it is a psychological security barrier for users. Through scientific and technological innovation, users can be informed of information at any time and anywhere. Feel free to feel the convenience and closeness brought about by science and technology. It is a goal pursued by Yaoguang Intelligent.
In this technology week, the "interconnected intelligent door lock" products exhibited by Yaoguang Intelligent Co., Ltd. have proposed characteristic solutions in remote unlocking, offline passwords, and key storage.
According to reports, in order to solve the problem of not having a key or sending a key, some smart lock manufacturers have designed a remote unlock function, but this function also has a security risk. Therefore, the Smart Lock developed by Shakmul Intelligent Company firmly prohibits the remote unlocking function, but it also provides a safe solution for the case without a key—a one-time password.
A one-time password means that when a friend has arrived at the door and the owner is not at home, the owner can send a one-time password to the other party via SMS via the APP. This password will automatically expire after one time, and the limitation will be limited. It will expire automatically. Failure.
Sending a password remotely is another solution for a smart lock manufacturer to solve a keyless or keyless problem, and may choose to send a one-time password or a limited-time password for a certain period of time. This kind of password, if you use the "online password" mechanism, is essentially equivalent to "remote unlock" security risks. Once the door lock manufacturer's server is controlled by the attacker, all of the brand's door locks can be set to the most simple and consistent password, such as "123456", and be permanently valid. This systemic risk is absolutely unacceptable to families.
To this end, the realization mechanism of the “off-line password†technology path of SWK Smart: When the door lock is registered, the door lock and the APP/server system will negotiate an algorithm seed and corresponding algorithm. Afterwards, at any time, if a password is to be used, the door lock and the APP/server system will be calculated according to the algorithm seeds and algorithms negotiated at the time of registration, so even when the door lock is not connected to the network, a one-time password can be sent to the other side through the APP. The door lock can identify its identity. If, on the other hand, the door lock is also networked when the password is sent, it can only be called an "online password."
The relevant personnel of Yaoguang Intelligent Company also stated that some smart lock manufacturers' plans will save the unlock key of the user directly on the server. Once this mechanism is attacked, the server will have the risk of data leakage. On the other hand, there are also factory workers. Monitor the risk of self-possession.
According to reports, the mechanism used by Shaker Light Intelligent is not to store user keys on its own server. No matter whether it is insiders or hackers, it cannot obtain the key to unlock the door locks.
However, the relevant person of Yaoguang Intelligent Company also reminded that can not simply believe that some of the smart keys of the smart door locks advertised by the manufacturers, home locks are primarily to ensure safety. To achieve a complete security strategy, a lot of technical means are needed behind the guarantee. The technical strength of the manufacturers is still very important.