UK electronic passports cloned within minutes

Unbreakable documents prove anything but

Written by Iain Thomson in San Francisco

An investigation by The Times has shown that the supposedly secure electronic passports used by the UK government can be cracked and cloned in minutes.

The passports use a radio frequency chip and antenna to send out the holder’s ID and biometric details when questioned by a reader.

Advertisement

Security researcher Jeroen van Beek, from the University of Amsterdam, used his own software – a publicly available programming code – a £40 card reader and two £10 RFID chips to hack two passports.

He then inserted the details of Osama Bin Laden and a Palestinian suicide bomber. The process took less than an hour.

They were accepted as genuine by Golden Reader, the standard software used by the International Civil Aviation Organisation to test passports.

“We’re not claiming that terrorists are able to do this to all passports today or that they will be able to do it tomorrow,” said Mr van Beek.

“But it does raise concerns over security that need to be addressed in a more public and open way.”

If the method becomes known then legitimate passports handed in at hotels, for example, could be cracked and the biometric data changed to that of the passport’s buyer, making the electronic protection useless.

The crack will also raise new doubts over the proposed UK national identity card, which uses the same technology to store over 50 items of data.

Dominic Grieve, the Shadow Home Secretary, has called on ministers to take urgent action.

“It is of deep concern that the technology underpinning a key part of the UK’s security can be compromised so easily.”

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Ministry of Defence

MoD data loss total could hit 1.7 million

New figures far higher than initial estimates   More...

Sun Microsystems

Sun Sparc server shatters seven standards

T5440 sets new benchmark records   More...

Gary McKinnon

Home Office turns down latest McKinnon appeal

Home Secretary informs lawyers of arrangements for US extradition   More...

Network cables

Network Instruments touts nanosecond apps troubleshooting

Observer 13 offers upgraded performance and forensic network analysis   More...

Primary Navigation