Peter,

You are absolutely correct.

But many existing products use iButtons as security keys. The only security it offers is from anyone that doesn't consider defeating it with a micro. There are already internet sites setup with software for hacking iButtons. This is bad news for many products.

The matter is made even worse with "human engineering" as hackers terms it. The pattern has been established in many past news reports. For example, if a company used iButtons as a security badge for employees to access certain areas, you could easily accumulate badge numbers with a fake reader. All one would need to do is mount a fake badge reader enclosure over the existing one and do either:

(1) read and store or forward each badge identification and enclosed data records and display a MALFUNCTION message. They'll go to another entry point but later report to building maintenance.

(2) read and store or forward each badge identification and enclosed data records and then emulate the data transfer with the underlying badge reader. This has the advantage of not alarming anyone as the overlay can have a sign stating it is "for their greater ergonomic comfort." :)

> Thus also why modern electronic keys
> always build with a micro inside,
> which can execute a user programmed
> secret key algorithm.

Do you have a favorite? We'd need one for rugged environments. We have one in our lab for evaluation.

-Jay C. Box

PS: Truth is, you could get badge IDs from a less secure area by merely mounting your badge reader out in the parking lot with a sign, "For Parking Reimburrsement Use Your Employee Badge Here" :)

I bet that merely labeling a big sign over the reader stating FREE PARKING even in a free parking lot would still motivate a certain percentage of BOZOS to use their badges on it.

I'd even bet that a big sign labeled, "BADGE CLEANER" over the reader in the parking lot would motivate many people to put the badges into it. Humans are so amusing. :)