Are 125 kHz proximity cards secure?

Simple 125 kHz proximity access control cards have been in use for access control for many years, however with technological advancements they have become outdated and can represent a serious security hazard.

Moving to a newer system using current technology credentials with vastly superior levels of in-built security and functionality can offer several advantages, particularly in terms of security and an advanced level of functionality. Here are some reasons to consider transitioning away from these older systems:

1. Security Vulnerabilities

• 125 kHz proximity cards are relatively easy to clone using cheap ‘available to all’ software and equipment available through legitimate sources. The technology uses simple, unencrypted radio frequency identification (RFID) signals, which can be intercepted and duplicated with virtually no technical expertise. Tools to copy can be as simple as a mobile phone with a publicly available app.  This clearly makes them very vulnerable to abuse when compared to more advanced technologies.
• Newer systems use secure access control credentials with varying levels of greater security built into the chip and user interface. (e.g., MIFARE DESFire EV1/EV2/EV3, HID iCLASS)

2. Encryption

• 125 kHz proximity cards cannot be securely encrypted and typically are used by simply reading the UID.
• Modern access control systems usually employ encrypted communications to ensure that the data transmitted between the credential and the reader is secure. Upgrading to more secure cards or credentials adds a layer of security and protects against unauthorised access.

3. Compatibility

• Modern access control systems often use higher-frequency RFID technologies (like 13.56 MHz) or smart cards/credentials with more advanced features. Transitioning away from 125 kHz cards allows you to integrate with the latest systems that provide greater levels of security and a multitude of additional functionalities.

4. Enhanced features

• Advanced access control technologies can offer features such as multi-factor authentication, integration with other security systems (e.g., video surveillance), and the ability to store more data on the card itself. This will both enhance overall security, and operational efficiency.

5. System Management and Reporting

• Modern access control systems provide better management tools and reporting capabilities. For example, they can offer detailed audit trails, real-time monitoring, and more granular control over access rights. Upgrading can provide better oversight and easier management of access control.

‍6. Scalability and Futureproofing

• Newer technologies offer better scalability and are more adaptable to future advancements. As technology evolves, upgrading to a more modern access control system, phasing out outdated ensures that your access control infrastructure remains relevant and capable of supporting future upgrades.

7. Cost Considerations

• While the initial investment in new technology might be higher, the long-term benefits can outweigh the costs. Improved security, efficiency, and the undefinable potential cost of a breach of security through unauthorised access can lead to huge cost savings over time.

8. Options

There are several access control technologies that offer significant advancements over older 125 kHz proximity cards in terms of security, functionality, and versatility. A list of some of the options is below:

13.56 MHz RFID Cards

• Technology: Utilises high-frequency 13.56 MHz RFID technology.
• Security: Often incorporates encryption, mutual authentication, and secure communication protocols.
• Examples: MIFARE Classic, MIFARE DESFire, and iCLASS.
• Benefits: Enhanced security compared to 125 kHz cards, and the ability to store more data and support additional applications like public transportation or cashless transactions.

JCOP Smart Cards

• Technology: Contains a microprocessor or memory chip embedded within the card.
• Security: JCOP cards are designed with robust security features, including strong cryptographic algorithms for data encryption, digital signatures, and secure key management. This makes them suitable for applications requiring high levels of security, such as banking, government IDs, and corporate access. They offer advanced security features and can handle more complex authentication methods.
• Examples: Commonly used in government IDs, financial cards, and corporate access cards.
• Benefits: Provides high security and versatility, capable of handling multiple applications beyond just access control.

Biometric Systems

• Technology: Uses physical characteristics such as fingerprints, facial recognition, iris scans, or voice patterns for authentication.
• Security: Provides strong, unique identifiers that are difficult to replicate or steal.
• Examples: Fingerprint scanners, facial recognition cameras, and iris scanners.
• Benefits: Highly secure and reduces the risk of lost or stolen cards and can integrate with other access control systems for multi-factor authentication.

Bluetooth Low Energy (BLE) and Near Field Communication (NFC)

• Technology: Uses wireless communication standards for access control.
• Security: Offers encrypted communication and can utilize smartphone apps for authentication.
• Examples: BLE access control systems and NFC-enabled smartphones.
• Benefits: Allows for mobile access control, reducing the need for physical cards and providing convenience for users. NFC is also often used in conjunction with existing smart card technologies.

Biometric and RFID Hybrid Systems

• Technology: Combines biometric authentication with RFID technology.
• Security: Offers the security of biometrics with the convenience of RFID cards or tokens.
• Examples: Systems that require a fingerprint scan in addition to presenting an RFID card.
• Benefits: Provides a high level of security by combining two different authentication factors, making it much harder for unauthorized users to gain access.

These technologies represent a range of options from simple upgrades to highly sophisticated systems. The choice depends on your specific needs, including security requirements, budget, and the desired user experience.

In summary, phasing out 125 kHz proximity access control cards in favour of more secure and advanced technologies can enhance security, offer better features, and provide a more future-proof solution for access control.

‍

A little more about Fixfire®.

Operating nationally, Fixfire® is a market leading independent family business specialising in Life and Property Protection systems and equipment.

As a well-known and trusted brand, Fixfire® is renowned for delivering proven, quality and affordable solutions.

Foundational principles of honesty and integrity firmly remain as core values at the heart of the company ethos.

Driven by a passion to innovate and find better ways, Fixfire® is constantly challenging conventional norms and brings a refreshingly different approach to compliance.

We serve many different verticals including:

1. Healthcare

• Hospitals, Hospices, Nursing Homes, Clinics and Pharmacies

2. Education

• Schools, Universities, Libraries and Student Accommodation Complexes

3. Government and Public Sector

• Government Buildings, Military and Defence Sites, Data Centres, IT Facilities, Law Enforcement Agencies, Emergency Services, National Security Facilities, Legislative Buildings, Judicial Buildings, Public Sector Agencies, Research Facilities, Financial and Economic Offices, Embassies, National Archives and Secure Storage Facilities

4. Financial Services

• Banks and Investment Firms

5. Retail

• Retail Stores and Shopping Centres

6. Manufacturing and Industrial

• Factories, Warehouses, Construction, Energy and Utilities

7. Transportation and Logistics

• Airports, Ports and Shipping

8. Corporate and Business

• Office Buildings and Corporate Campuses

9. Hospitality and Leisure

• Hotels and Resorts and Convention Centres

10. Entertainment and Sports

• Stadiums and Arenas, Motorsport, Theatres and Concert Venues

11. Telecommunications

• Data Centres and Telecom Facilities