How secure are Swipe Cards

The type of chip used in swipe card determines what type of information is required for access.  Transponder chips have progressively been getting more sophisticated over the years.  Early chips had a fixed code that was read and matched to saved data for comparison.  Swipe cards with a fixed code had 2 problems.  The first is the card was easy to read and duplicate.  The second being that the data was retrievable from the card reader or security system.

Most swipe cards now use challenge /response codes.  With a challenge response system the card is sent a number or set of numbers and must give the correct answer to be acknowledged as the correct card. Eg the numbers 7 and 3 might be sent and the correct response is 21 (7*3)  The equation is unknown to everyone except the card and the reader.  The equation and the numbers are much more complicated then this example and there are trillions of possible combinations.  The cards also can store information such as a biometric scan or other data.

Challenge /Response codes are much harder to copy then fixed codes.  The problem is once they are decrypted and the equation known the whole system is compromised.

Over the years most swipe cards have been cracked, making them vulnerable to attacks.  The most widely used swipe cards today are the Mifare system.  Mifare has been cracked and it has left most government and corporate buildings vulnerable.  Swipe cards can be easier to copy then a key.  With a key you have to physically copy it.  Swipe cards can be copied from a distance.  If you have a transponder copier you just need to walk close by a person with a swipe card in order to read the data on the card.  If can then be copied onto a new card.

There are newer swipe card systems on the market that offer higher security.  The problem is that the hackers who decrypt these systems are very good at what they do.  A fixed system is vulnerable as once it is cracked once, it can be repeated over and over.  Most systems now rely on obscurity to hide the codes.  If you hide the mechanics of the system it is much harder to crack.

The other consideration with swipe card systems is the physical security aspect.  What is the swipe card system attached to?

Most electronic security systems activate an electric strike.  The electric strike is fitted on the door frame and the latch of the mechanical lock closes into the strike hole.  When the electric strike is released the latch pushes past the opening in the strike.  Electric strikes are use because they can operate with existing locks and they are relatively cheap.

Electric strikes have some major drawbacks when it comes to physical security.  I do not want to point out their vulnerabilities for security reasons.

Personally I would not secure my property with an electric strike.  They are far too easy to compromise.  Most buildings are secured this way including our most high security government buildings. 

A better alternative to an electronic strike is an electronic lock.  There are a range of electronic locks, unfortunately most of them are absolute junk that is not a viable option to secure a door.  There are however a few high quality electronic locks that are reliable and difficult to compromise. 

Magnetic locks are another good alternative to secure doors.  Magnetic locks need to have power going to them at all times which is a drawback.  Their power consumption is very low and they can be run with a battery backup. The holding force of magnetic locks does vary greatly.  Magnetic locks should be fitted in a way that bending of the door id kept to a minimum.

All in all swipe cards give a lot in convenience and management.  Security of a system should not be taken for granted and a locksmith who as no financial interest in the installation of the system called to check for flaws.