Haɓaka Tsaro da Keɓancewa tare da Manyan Katunan Watsa Labarai marasa inganci

May 27, 2026

Bar sako

Me yasa Sayen Katin Smart Blank Ya Samu Rikici

A cikin 2024, masu bincike na tsaro a Quarkslab sun bayyana kayan bayan gida a cikin miliyoyin katunan samun damar RFID da aka sayar da su a matsayin "MIFARE Classic masu jituwa." Otal-otal, ofisoshin kamfanoni, da wuraren zama a cikin nahiyoyi uku sun gano cewa za a iya rufe katunan wayo a cikin makullin ƙofa a cikin mintuna, ba saboda katunan jabu ba ne, amma saboda ainihin siliki a ciki ya fito ne daga wani masana'anta daban-daban fiye da abin da takamaiman takaddar ta yi iƙirarin (Makon Tsaro).

 

Wannan bayanin ya canza tattaunawar sayayya. Kasuwancin katin IC na duniya yana girma da kusan 8% kowace shekara kuma ana hasashen zai kai dala biliyan 45.7 nan da 2030 (GlobeNewsWire), wanda ke haifar da hanyar shiga mara waya, jigilar kaya, da jigilar kaya. Amma haɓaka kuma yana nufin ƙarin masu samar da kayayyaki, ƙarin bambance-bambancen guntu, da ƙarin dama don rashin daidaituwa tsakanin abin da kuka yi oda da ainihin abin da ke jigilar kaya. Katin wayo mara kyau tare da guntu ya zo kama da haka ko da kuwa ya ƙunshi siliki na NXP na gaske ko kuma na uku - maye gurbinsa. Bambancin yana fitowa ne kawai lokacin da katin ya gaza a cikin filin ko kuma ya sami cloned a binciken tsaro.

 

Wannan jagorar ta ƙunshi yanke shawara waɗanda ke ƙayyade ko ƙaddamar da kati mara kyau ya yi nasara ko ya gaza: zaɓin guntu, abubuwan tsaro, buƙatun gyare-gyare, kurakuran saye na gama gari, da abin da za a tabbatar kafin sanya hannu kan kwangilar mai siyarwa.

High-quality blank smart cards with embedded chips undergoing security verification and cloning vulnerability analysis after the Quarkslab backdoor disclosure.

 

Daidaita Nau'in Chip zuwa Abubuwan Buƙatunku na Gaskiya

 

Zaɓin guntu shine inda mafi yawan ayyukan katunan wayo ko dai suna kulle cikin dogon nasara na dogon lokaci ko kuma a hankali su tsara kansu don sake{1}} bayan watanni shida. Teburin da ke ƙasa yana tsara mafi yawan iyalai da aka samo guntu zuwa girman da ke haifar da yanke shawara a zahiri.

 

Iyali Chip

Mitar / Standard Aikace-aikace na yau da kullun Matsayin Tsaro Maɓalli Maɓalli
MIFARE Classic 1K/4K 13.56 MHz / ISO 14443-A Hanyar shiga ta asali, katunan aminci Ƙananan (Crypto-1, karye) Abubuwan da aka sani; cloneable
MIFARE DESFire EV2/EV3 13.56 MHz / ISO 14443-A Amintaccen kulawar shiga, wucewa, biyan kuɗi Babban (AES-128, EAL{1}}) Farashin naúrar mafi girma
MIFARE Plus 13.56 MHz / ISO 14443-A Haɓaka hanya daga tsarin Classic Matsakaici – Babban (yanayin SL3) Yana buƙatar sabunta firmware mai karatu don SL3
NTAG 213/215/216 13.56 MHz / ISO 14443-A NFC hulɗar wayar hannu, alamar kadari Ƙananan-Matsakaici Ƙwaƙwalwar ƙwaƙwalwar ajiya; ba don sarrafa shiga ba
Saukewa: SLE4442 Adireshin / ISO7816 Adana{0}}katunan ƙima, tsarin ID na gado Matsakaici (PIN{0}}an kiyaye shi) Tuntuɓi{0}kawai; babu damar sadarwa
T5577 125 kHz (LF) Samun kusancin Legacy, cloning Ƙarƙashin Ƙasa Babu boye-boye; kwafi kadan

 

Cire lambar ƙirar daga masu karatun ku da aka shigar kafin yin odar kowane katin MIFARE don tsarin shiga kofa. Idan mahaɗin ku ba zai iya tabbatar da goyan bayan yarjejeniya a cikin awanni 48 ba, ɗauki hakan azaman haɗarin dacewa, ba rashin jin daɗi ba. Wurin da ke tafiyar da masu karatu na mallakar gado yawanci ba za su iya amfani da katunan DESFire ba tare da sauye-sauye na tsakiya ko sauya kayan aikin ba, kuma gano wannan bayan jigilar katunan 2,000 matsala ce ta adadi biyar.

Idan kuna samo asaliblank katunan NFC a girmadon sabon turawa, mita da tabbatar da yarjejeniya ba za a iya yin shawarwari ba{0}. Amma ga ɓangaren mafi yawan jagororin zaɓin guntu sun bar: ko da a cikin rukunin mitar guda ɗaya, ISO 14443-A (MIFARE, NTAG) da ISO 15693 (ICODE) suna amfani da ka'idojin sadarwa daban-daban. Mai karatu da aka saita don ɗaya ba zai gano ɗayan ba. Hanya guda tabbatacciyar hanyar tabbatar da dacewa ita ce gwada ainihin katunan samfur akan ainihin masu karatun ku da aka shigar, ba don kwatanta takaddun bayanai ba. Syntek yana jigilar samfuran batches a cikin ainihin bambance-bambancen guntu da kuka ƙayyade; ganiakwai saitunan katin wayo mara kyaukafin yin juzu'i.

 

Idan kuna samo katunan NFC da yawa don sabon turawa, mita da tabbatarwa ba za'a iya yin shawarwari ba{0}. Amma ga ɓangaren mafi yawan jagororin zaɓin guntu sun bar: ko da a cikin rukunin mitar guda ɗaya, ISO 14443-A (MIFARE, NTAG) da ISO 15693 (ICODE) suna amfani da ka'idojin sadarwa daban-daban. Mai karatu da aka saita don ɗaya ba zai gano ɗayan ba. Hanya guda tabbatacciyar hanyar tabbatar da dacewa ita ce gwada ainihin katunan samfur akan ainihin masu karatun ku da aka shigar, ba don kwatanta takaddun bayanai ba. Syntek yana jigilar samfuran batches a cikin ainihin bambance-bambancen guntu da kuka ƙayyade; duba samammun saitunan katin wayo kafin yin ƙara.

 

Matakan Tsaro: Haɗarin da kuke karɓa tare da kowane Zaɓin Chip

 

Anan akwai matsayi mafi yawan masu siyar da katin da ba za su faɗi a sarari ba:MIFARE Classicbaya zama zaɓi mai karewa ga kowane aikace-aikacen inda cloning katin ke wakiltar haɗari mai ma'ana.Wannan ya haɗa da shiga kofa na kamfani, maɓallan ɗakin otal, tsarin ajiye motoci, da ainihin kowane yanayin amfani inda katin kwafin ya ba da izinin shiga jiki.

 

Wannan ba damuwa ce ta ka'idar ba. A cikin 2024, masu binciken tsaro a Quarkslab sun bayyana wani kayan aiki na bayan gida a cikin guntun FM11RF08S, bambance-bambancen Sinanci da ake amfani da shi da yawa wanda aka tallata a matsayin "MIFARE Classic masu jituwa." Ƙofar bayan gida tana ba da damar cikakken rufe katin a cikin mintuna, ba tare da wani kayan aiki na musamman ba wanda ya wuce mai karatu na kasuwanci (Makon Tsaro). Otal-otal a duk faɗin Amurka, Turai, da Indiya an gano suna amfani da waɗannan guntu ba tare da sanin katunan su ba na gaske na NXP-MIFARE Classic ICs da aka ƙera. Ƙungiyoyin sayayya waɗanda suka sanya waɗannan umarni sun kimanta farashi kuma sun faɗi dacewa, amma ba ainihin silicon a cikin katin ba.

 

Upgrading to secure MIFARE DESFire EV3 blank smart cards using high-level AES-128 encryption to replace vulnerable MIFARE Classic infrastructure.

 

Tun da farko aikin ilimi daga Jami'ar College London ya riga ya nuna cewa ko da ingantattun katunan MIFARE Classic za a iya rufe su ta hanyar kusanci kawai, babu damar karatu da ake buƙata, ta amfani da abin da masu binciken suka kira "kati{0}} hari kawai" (Rahoton da aka ƙayyade na UCL). Sakamakon binciken na Quarkslab ya tabbatar da cewa matsalar ba kawai ta ci gaba ba amma ta ta'azzara ta hanyar sauya sarkar kayayyaki.

 

Hanyar haɓakawa mai amfani ga ƙungiyoyin da har yanzu ke gudana Classic{0}katunan wayo maras amfani sun dogara da saka hannun jari na kayayyakin more rayuwa:

 

Yanayin A - Kayan aikin Karatu yana goyan bayan MIFARE Plus.Canja zuwa katunan MIFARE Plus kuma saita masu karatu don yanayin Tsaro Level 3 (SL3), wanda ke kunna AES{4}}128 boye-boye. Wannan ita ce hanya mafi ƙasƙanci-hanyar ƙaura saboda tana sake amfani da masu karatu na yanzu, amma yana buƙatar sabuntawar firmware da sake yin rajista na duk katunan.

 

Yanayin B - Masu karatu sun ƙare{1} na{2}}rayuwa ko Classic{3}} kaɗai.Kasafin kuɗi don cikakken maye gurbin mai karatu kuma matsa kai tsaye zuwa MIFARE DESFire EV3. Farashin kowane kati ya fi girma, amma DESFire's EAL{2}} takaddun shaida da sassauƙan tsarin aikace-aikacen yana rage yuwuwar wani ƙaura ta tilastawa idan aka kwatanta da na asali{3}} tushen kayayyakin more rayuwa.

 

Scenario C - Ƙananan{1} tsaro, ba{2}} aikace-aikace mai mahimmanci ba(katunan aminci na cafeteria, bajon baƙo). Classic ko NTAG ya kasance karbuwa, amma kawai lokacin da katin ya ba da izinin samun damar jiki komai. Idan yankin baƙon ku yana raba kayan aikin kofa iri ɗaya kamar wuraren ma'aikata, ko da wani bangare, wannan banda baya aiki, kuma yakamata ku kimanta Scenario A ko B.

 

Tazarar dake tsakanin yanayin A da B shine inda akasarin kasafin sayayya ya tsaya cak. Bambancin farashi tsakanin ƙaura na Plus SL3 da cikakken fiddawar DESFire ya dogara da sauye-sauye na musamman ga shigarwar ku: ragowar sharuddan haya mai karatu, ƙidayar IT don sake yin rajista, da kuma ko ƙungiyar tsaron ku tana da ikon kasafin kuɗi kai tsaye. Amma tsarin yanke shawara a bayyane yake. Idan an shigar da masu karatun ku kafin 2019 kuma kuna da kowane yarda ko buƙatun inshora da ke da alaƙa don samun iko, farashin tsayawa kan Classic ya riga ya wuce ƙaura. Yawancin masu karatu da aka tura kafin jirgin 2019 ba tare da tallafin firmware don matakin Tsaro na MIFARE Plus 3 ba, wanda ke nufin Classic{9}}zuwa{10}}Ƙaura ba zaɓi ba ne kuma cikakken maye gurbin mai karatu ya zama hanyar haɓakawa kawai.

 

Daga Jikin Kati zuwa Rufaffen lamba: Samun Keɓanta Daidai

 

Katin wayo mara komai rabin samfur ne kawai. Sauran rabin shi ne abin da ke faruwa bayan ya zo: bugu, ɓoyewa, laminating, da bayarwa. Takaddun bayanai na sayayya waɗanda suka yi watsi da wannan kashi na biyu suna haifar da matsalolin da ke tasowa yayin samarwa kawai.

 

Kayan jikin kati da daidaiton firinta sune mafi yawan tushen gazawar gyare-gyare. Taswirar ba ta da hankali, kuma samun shi ba daidai ba yana lalata katunan da buga ribbon:

 

Kayan Kati Nau'in Printer mai jituwa Rashin daidaituwa na kowa
PVC (misali) Kai tsaye -zuwa{1}}canja wurin kati, rini{2}} Babu (mafi yawan firintocin tebur)
PET{0}G Mayar da firinta kawai Ana ciyar da ita kai tsaye -zuwa{1}} firintar kati → abin da aka shafa
Polycarbonate (PC) Sake canja wuri ko zanen Laser Canja wurin thermal → gazawar mannewa a cikin makonni

 

Maganin saman yana da mahimmanci daidaiblank smart chip cards don bugu ID. Katunan da aka yi jigilar su ba tare da mai rufi ba, ƙaramin laminci na bakin ciki wanda ke karɓar tawada kuma yana ba da kariya ga hoton da aka buga, yana samar da kwafin da ke yin ɓarna a cikin makonni kuma yana barewa cikin watanni. Idan ƙayyadaddun siyan kuɗin ku bai fayyace a sarari "filayen da za a iya bugawa tare da rufin kariya," kar a ɗauka an haɗa shi. Cikakken - bugu na zubar jini akan wurin tuntuɓar guntu ko yankin naɗaɗɗen eriya yana buƙatar daidaita matsi na kai; ƙananan rashin daidaituwar yanayin sama akan abubuwan da aka haɗa suna haifar da ɓarna ko tawada idan ba a magance su ba.

 

Desktop badge printer executing direct-to-card dye sublimation on premium blank smart ID cards for corporate employee badges.

 

Kashewa{0}}Katunan ID masu wayo na bugu na ma'aikata suna buƙatar ƙarin kwanaki 10-15 na kasuwanci fiye da farar lokacin jagoran hannun jari, ya danganta da rikitaccen ƙira. Wannan wani mataki ne na daban na samarwa daga kan - keɓance rukunin yanar gizo: masana'anta suna aiwatar da zane-zane na baya ta hanyar bugu kafin saka guntu, wanda ke buƙatar shigar da masu kera katin.OEM/ODM keɓance sabisdon daidaita rajistar zane-zane tare da guntu da jeri na eriya.

 

Rufewa, matakin da ake rubuta bayanan shiga ko bayanan mariƙin zuwa guntu, shine matakin keɓancewa na ƙarshe. Yawancin turawa na kamfani suna yin amfani da rufaffiyar bayanai akan rukunin yanar gizo ta amfani da masu karanta tebur da aka haɗa tare da software ɗin sarrafa asalin su. Tabbatar da cewa mai rikodin ku yana goyan bayan takamaiman guntu bambance-bambancen da ka'idar sadarwa kafin oda katin ku. A cikin gwanintar mu, gano rashin jituwa yayin rajista yawanci yana nufin 3 zuwa 6 makonni na jinkiri yayin da ake samo katunan maye, gwadawa, da sake jigilar kaya. Don otal, wannan yana nufin teburin gaban ba zai iya ba da makullin ɗaki ba a lokacin kololuwar yanayi.

 

Kurakuran Sayi Biyar Da Suke Kuɗin Fiye da Katunan Kansu

 

Rashin daidaiton mitoci shine gazawar da aka fi sani kuma mafi yawan rigakafinta. Karancin Mitar (125 kHz) da Katunan Maɗaukaki (13.56 MHz) suna kama da jiki.: ma'auni iri ɗaya, fararen bayyanar PVC guda ɗaya, nauyi iri ɗaya. Hakanan ba su dace da ƙa'idar ba gaba ɗaya{1} Wurin da ke aiki da masu karatu 125 kHz kuma yana ba da oda 13.56 MHz blank katunan RFID don sarrafa damar shiga zai gano matsalar kawai lokacin da katunan suka kasa yin bincike. Tushen sanadin yawanci nau'in siye ne wanda ke ƙayyadad da "katin shiga RFID" ba tare da faɗin mita ba, da kuma mai siyar da ke jigilar SKU mafi shaharar su. Koyaushe ƙayyade ainihin mitar da yarjejeniya.

 

Rashin daidaiton ƙa'ida a cikin rukunin mitar guda ɗaya ya fi dabara.ISO 14443 -A (MIFARE, NTAG) da ISO 15693 (ICODE, Tag-it) duk suna aiki a 13.56 MHz amma suna amfani da ƙa'idodin hana juna da sadarwa daban-daban. Mai karatu da aka saita don 14443-A ba zai gano katin 15693 ba. Wannan bambance-bambance akai-akai yana kama ƙungiyoyin sayayya waɗanda ke samun fakitin katunan NFC da yawa don ayyukan haɗaɗɗun amfani.

 

Tsallake gwajin samfurin kafin oda mai yawa yana canza duk haɗari ga mai siye.Ayyukan masana'antu a fadin masana'antar katin RFID babu shakka: da zarar an tabbatar da nau'in guntu kuma an fara samarwa, kurakuran zaɓi alhakin abokin ciniki ne. Masu sana'a masu daraja suna ba da samfurin batches daidai don wannan dalili. Idan mai sayarwa ya hana ko ya yi cajin wuce gona da iri don samfuran, ɗauki shi azaman jan tuta. Kafin yin magana da volume,nemi tsari samfurin katin 10-20kuma gwada kowane kati akan shigar da masu karatun ku da software na ɓoyewa.

 

Yin watsi da ƙarshen kati yana haifar da gazawar ingancin buga.Katunan da ba su da rufi suna samar da kwafi mara inganci. Wannan kuskuren ya zama ruwan dare musamman lokacin da ake samo katunan wayo maras adireshi da yawa daga masu tsaka-tsaki waɗanda suka inganta farashin raka'a maimakon amfanin ƙasa.

 

Samowa daga masu shiga tsakani ba tare da ganin masana'anta shine kuskure mafi tsada, kuma mafi wahalar ganowa.Lokacin da kamfani na ciniki ya zauna tsakanin ku da ainihin masana'anta, kuna rasa ganuwa a cikin tushen guntu. Rashin raunin katin otal na Quarkslab ya samo asali ne kai tsaye zuwa wannan sarkar samar da kayayyaki: ƙungiyoyin sayayya sun ba da umarnin "MIFARE Classic" kuma sun karɓi FM11RF08S silicon daga wani masana'anta na daban, tare da kayan bayan gida na kayan aiki ba su da hanyar ganowa ta hanyar dubawa ta gani ko gwajin aikin asali. Wannan ba haɗari ba ne. Wannan shine dalilin da ya haifar da mafi girman lamarin tsaro na katin shiga RFID a cikin 'yan shekarun nan.

 

Ƙimar Mai Bayar da Katin Smart Blank: Abin da Sheet ɗin Ba Ya Nuna

 

Kowane mai ba da katin RFID yana lissafin farashin raka'a, nau'in guntu, da lokacin jagora. Babu ɗayansu da ya jera guntu{1}}tabbacin ingancin matakin, gwajin ƙarfin lamination, ko abin da zai faru lokacin da farkon samar da ku ya gaza bincikar dacewa. Waɗancan abubuwan layin da ba a iya gani su ne ke raba mai ƙira daga mai siyarwa, kuma menene ke tantance ko fakitin wayowin komai da ruwan ku tare da kwakwalwan MIFARE a zahiri sun ƙunshi silicon NXP da kuka ayyana.

 

Automated IC verification and high-speed CNC lamination lines within a 4,500 square meter factory manufacturing blank contactless smart cards

 

Tambayoyi kaɗan waɗanda ke bayyana bambance-bambance: Shin mai siyarwar yana aiki da nasu guntu na'ura da kayan aikin lamination, ko fitar da samarwa ga wasu mutane da ba a bayyana sunansu ba? Za su iya samar da rahoton gwajin matakin guntu{0} na kowane rukuni, yana nuna ainihin masana'anta na IC da kuma mutuƙar bita, ba kawai "MIFARE Classic masu jituwa" ba? Shin suna ba da katunan samfuri masu rufaffiyar don gwaji na aiki akan masu karatun ku, ko samfuran gani mara tushe kawai?

 

A Syntek, mun gina tsarin tabbatar da mu a kusa da ainihin yanayin gazawar da aka kwatanta a sama. Lokacin da ƙungiyar baƙi a kudu maso gabashin Asiya ta zo mana bayan gano katunan da ke da FM11RF08 sun mutu duk da cewa an biya su azaman MIFARE Classic, mun gudanar da batch - tantancewar matakin IC akan kuri'a mai shigowa, ta tabbatar da sauya FM11RF08 a cikin sa'o'i 48 na farkon katin gwaji na farko, kuma mu maye gurbin cikakken tsari tare da katunan katunan NXP a cikin makonni biyu- . Mai samar da su na baya wani kamfani ne na kasuwanci wanda ba shi da ganuwa a cikin ƙirar guntu. Samfuran mu na cikin{11}}cikin gida, gami da lamination CNC, high{12}}incodeing, da kuma 100% mai sarrafa kansa ta IC a cikin kayan aikin 4,500m², yana wanzu musamman ta yadda lokacin da muka jigilar fakitin wayowin komai da ruwan da aka yiwa lakabin DESFire EV3, silikon da ke ciki yayi daidai da alamar. Mun kera katunan RFID tun 2006, kuma dalilin da yasa muke saka hannun jari a matakin QC shine mun ga abin da zai faru idan ya ɓace. Bincika cikakkenblank guntu katin samfurin linedon ganin samuwan saituna ta guntu iyali da siffa factor.

 

Takaddun shaida na ISO 9001 tushe ne, ba mai bambancewa ba; yawancin masana'antu suna riƙe da shi. Alamar da ke da mahimmanci ita ce ko mai siyarwa zai iya samar da rahoton gwajin matakin guntu{2}} wanda ke nuna masana'antar IC kuma ya mutu bita ga kowane rukunin samarwa. Bayan haka, bincika yarda don samar da damar tantance masana'anta, sassaucin MOQ da aka buga, da kuma rubutattun lokutan jagora don duka farar fata da na al'ada{4}abubuwan katin bugu. Syntek yana ba da odar samfurin ƙasa da guda 100 tare da juyawa kwanaki 3-5, kuma ana ƙididdige ƙimar samfurin akan oda na farko.

Tambayoyin da ake yawan yi

Tambaya: Menene bambanci tsakanin MIFARE Classic da MIFARE DESFire don katunan wayo mara kyau?

A: MIFARE Classic ya dogara da ɓoyewar Crypto-1, wanda aka karye a bainar jama'a kuma yana da rauni ga cloning. MIFARE DESFire yana amfani da AES-128 tare da EAL{3}} takaddun shaida. Don cikakken kwatancen tsaro da takamaiman yanayin haɓakawa guda uku, duba sashin Tiers na Tsaro a sama.

Tambaya: Ta yaya zan tabbatar da wane mitar guntu tsarin kula da shiga na ke buƙata?

A: Duba lambar ƙirar mai karatun ku da aka shigar kuma tabbatar da ƙa'idar da aka goyan baya tare da mai haɗa tsarin ku{0}} kHz da katunan 13.56 MHz suna kama da juna amma ba su dace ba. Nemi samfurin tsari kafin kowane oda mai yawa.

Tambaya: Shin za a iya keɓance katunan wayo mara kyau tare da tambura da bayanan ma'aikata?

A: iya. An ƙera katunan banza don keɓancewar rukunin yanar gizo: bugu ta hanyar firintocin zafi ko sake canja wuri, ɓoye ta hanyar masu karanta tebur. Tabbatar cewa katunan ku sun haɗa da abin rufe fuska don dorewar bugawa. Kayan aiki{4}} Teburin dacewa na firinta a sama yana nuna waɗanne kayan kati ke aiki da wane nau'in firinta.

Tambaya: Menene matsakaicin mafi ƙarancin oda daga masana'anta?

A: Masana'anta{0} kai tsaye galibi suna farawa a guda 200-500 don odar samarwa. Koyaya, takamaiman MOQs sun dogara da nau'in guntu da buƙatun jiyya na saman. Katin DESFire EV3 tare da kashewa{6}}abubuwan zane yana da ƙaramin ƙarami fiye da farar katin NTAG215.Nemi zancedon ƙayyadaddun tsarin ku.

Tambaya: Har yanzu ana karɓar katunan MIFARE Classic don samun damar kofa?

A: Don tsaro -mayan yanayi, a'a. Lalacewar da aka rubuta a bainar jama'a, gami da kayan bayan gida na kayan masarufi a cikin bambance-bambancen guntu da ake amfani da su sosai, suna sanya Katunan Classic{2}} su zama abin rufewa cikin mintuna. Yi la'akari da MIFARE Plus (SL3) ko DESFire EV3 azaman maye gurbin.

Shirya don tabbatar da wanne tsarin guntu ya dace da tsarin ku kafin yin ƙara?Nemi samfurin kyautakuma gwada masu karatun ku da aka shigar.

Aika Aikace-aikacen