I-NFC kanye ne-cloning yekhadi: izingozi zangempela nokuthi ungazivimba kanjani izinkokhelo ngaphandle kokuthinta

Ubuchwepheshe be-Proximity buye benza izimpilo zethu zaba lula, kodwa futhi zivule iminyango emisha yabakhwabanisi; yingakho kubalulekile ukuqonda ukulinganiselwa kwabo futhi Sebenzisa izinyathelo zokuphepha ngaphambi kokuba umonakalo wenzeke.

Kulesi sihloko uzothola, ngaphandle kokushaya amahlathi, ukuthi i-NFC/RFID isebenza kanjani, yimaphi amaqhinga izigebengu eziwasebenzisayo emicimbini nasezindaweni eziminyene, yiziphi izinsongo ezivele kumakhalekhukhwini nasezikhungweni zokukhokha, futhi ngaphezu kwakho konke, Uzivimba kanjani noma uzinciphise kanjani izinkokhelo ezingathintwa uma kukufaneleAke siqale ngomhlahlandlela ophelele ku: I-NFC kanye ne-cloning yekhadi: izingozi zangempela nokuthi ungazivimba kanjani izinkokhelo ngaphandle kokuthinta.

Iyini i-RFID futhi i-NFC yengeza ini?

Ukubeka izinto ngombono: I-RFID iyisisekelo sakho konke. Iwuhlelo olusebenzisa imvamisa yomsakazo ukuhlonza omaka noma amakhadi ebangeni elifushane, futhi ingasebenza ngezindlela ezimbili. Ngokwehluka kwayo, ithegi ayinayo ibhethri futhi Icushwa ngamandla omfundi.Kujwayelekile kumaphasi okuthutha, ukuhlonza, noma ukulebula komkhiqizo. Enguqulweni yayo esebenzayo, ithegi ihlanganisa ibhethri futhi ifinyelela amabanga amakhudlwana, okuyinto evamile kwezokuthutha, ukuphepha, nezimoto.

Ukukubeka kalula, i-NFC iwukuziphendukela kwemvelo okuklanyelwe ukusetshenziswa kwansuku zonke ngomakhalekhukhwini namakhadi: ivumela ukuxhumana okubili, ilungiselelwe amabanga amafushane kakhulu, futhi isibe indinganiso yokukhokha okusheshayo, ukufinyelela, nokushintshisana kwedatha. Amandla ayo amakhulu ukushesha.: uyisondeze eduze futhi kunjalo, ngaphandle kokufaka ikhadi ku-slot.

Uma ukhokha ngekhadi ngaphandle kokuthinta, i-chip ye-NFC/RFID idlulisela ulwazi oludingekayo endaweni yokukhokha yomthengisi. Kodwa-ke, uma ukhokha ngeselula yakho noma ngewashi, ukuligi ehlukile: idivayisi isebenza njengomxhumanisi futhi yengeza izendlalelo zokuphepha (i-biometrics, i-PIN, ithokheni), okuyinto Yehlisa ukuvezwa kwedatha yangempela yekhadi..

Amakhadi angathintwayo aqhathaniswa nezinkokhelo ezinamadivayisi

• Amakhadi aphathekayo angathintwa: Mane uwasondeze eduze kwetheminali; ngamanani amancane, i-PIN ingase ingadingeki, kuye ngemikhawulo ebekwe yibhange noma izwe.
• Izinkokhelo ngeselula noma iwashi: Basebenzisa izikhwama zedijithali (i-Apple Pay, i-Google Wallet, i-Samsung Pay) ngokuvamile edinga izigxivizo zeminwe, ubuso noma i-PIN, futhi esikhundleni senombolo yangempela ngethokheni yokusebenzisa kanye. okuvimbela umthengisi ukuthi abone ikhadi lakho langempela.

Iqiniso lokuthi zombili izindlela zabelana ngesisekelo esifanayo se-NFC akusho ukuthi zibeka ubungozi obufanayo. Umehluko uphakathi nendawo (ipulasitiki uma iqhathaniswa nedivayisi) kanye nasezithiyo ezengeziwe ezengezwe yi-smartphone. ikakhulukazi ubuqiniso kanye namathokheni.

Kwenzeka kuphi futhi kanjani ukukhwabanisa okungaxhunywanga?

Izigebengu zisebenzisa iqiniso lokuthi ukufundwa kwe-NFC kwenzeka ebangeni elifushane kakhulu. Ezindaweni eziminyene—izithuthi zomphakathi, amakhonsathi, imicimbi yezemidlalo, imibukiso—umfundi ophathwayo angaya emaphaketheni noma ezikhwameni ngaphandle kokuphakamisa izinsolo futhi athwebule ukwaziswa. Le ndlela, eyaziwa ngokuthi i-skimming, ivumela ukuphindwaphindwa kwedatha, ebese isetshenziselwa ukuthenga noma ukuhlanganisa. nakuba ngokuvamile bedinga izinyathelo ezengeziwe ukuze benze ukukhwabanisa kuphumelele.

Enye i-vector ukuguqulwa kwamatheminali. Itheminali yokukhokha elungisiwe enesifundi esinonya se-NFC ingagcina idatha ngaphandle kokuqaphela, futhi uma ihlanganiswe namakhamera afihliwe noma ukubuka okulula okubukwayo, abahlaseli bangathola ulwazi olubalulekile olufana namadijithi namadethi okuphelelwa yisikhathi. Akuvamile ezitolo ezinedumela elihle, kodwa ingozi iyanda ezindaweni zokudayisa..

Akufanele futhi sikhohlwe ukwebiwa kobunikazi: ngedatha eyanele, izigebengu zingayisebenzisela ukuthenga ku-inthanethi noma imisebenzi engadingi isici sesibili. Ezinye izinhlangano zinikeza isivikelo esingcono kunezinye—zisebenzisa ukubethela okuqinile namathokheni—kodwa, njengoba ochwepheshe bexwayisa, Lapho i-chip idlulisa, idatha edingekayo yokwenziwayo ikhona..

Ngokuhambisanayo, kuye kwavela ukuhlasela okungahlosile ukufunda ikhadi lakho emgwaqweni, kodwa ukulixhumanisa ukude nesikhwama semali yesigebengu. Kulapho ubugebengu bokweba imininingwane ebucayi, amawebhusayithi mbumbulu, kanye nokulangazelela ukuthola amagama ayimfihlo esikhathi esisodwa (OTPs) kuqala khona. okuyizihluthulelo zokugunyaza ukusebenza.

Ukwenza i-Cloning, ukuthenga ku-inthanethi, nokuthi kungani kusebenza ngezinye izikhathi

Kwesinye isikhathi, idatha ethwebuliwe ifaka inombolo ephelele ye-serial kanye nosuku lokuphelelwa yisikhathi. Lokho kungase kwanele ekuthengeni ku-inthanethi uma umthengisi noma ibhange lingadingi ukuqinisekiswa okwengeziwe. Emhlabeni wenyama, izinto ziyinkimbinkimbi kakhulu ngenxa yama-chips e-EMV nezilawuli zokulwa nokukhwabanisa, kodwa abanye abahlaseli Bazama inhlanhla yabo ngokuthengiselana ezindaweni ezivumela imvume noma ngemali encane.

Ukusuka ekudongeni kuya ekukhokheni: ukuxhuma amakhadi antshontshiwe kumawallet eselula

Iqhinga elikhulayo lihlanganisa ukusetha amanethiwekhi amawebhusayithi omgunyathi (inhlawulo, ukuthunyelwa, ama-invoyisi, izitolo zomgunyathi) ezicela "ukuqinisekiswa" noma inkokhelo yamathokheni. Ohlukunyeziwe ufaka imininingwane yekhadi lakhe futhi, ngesinye isikhathi, i-OTP (Inkokhelo Yesikhathi esisodwa). Eqinisweni, akukho lutho olukhokhiswayo ngaleso sikhathi: idatha ithunyelwa kumhlaseli, obese ezama uku... xhuma lelo khadi ku-Apple Pay yakho noma ku-Google Wallet ngokushesha okukhulu

Ukuze izinto zisheshiswe, amanye amaqembu akhiqiza isithombe sedijithali esiphindaphinda ikhadi ngedatha yesisulu, "lithwebule" lisuka esikhwameni, bese liqedela ukuxhumanisa uma ibhange lidinga kuphela inombolo, idethi yokuphelelwa yisikhathi, isibambi, i-CVV, ne-OTP. Konke kungenzeka ngeseshini eyodwa..

Kuyathakazelisa ukuthi abasebenzisi ngokushesha ngaso sonke isikhathi. Baqongelela inqwaba yamakhadi axhunyiwe ocingweni futhi baphinde bayithengise kuwebhu emnyama. Emavikini kamuva, umthengi uzosebenzisa leyo divayisi ukuze akhokhe ezitolo eziphathekayo ngaphandle kokuthintwa noma aqoqe inkokhelo yemikhiqizo engekho esitolo sakhe ngaphakathi kwenkundla esemthethweni. Ezimweni eziningi, ayikho i-PIN noma i-OTP ecelwa kutheminali ye-POS..

Kunamazwe lapho ungakwazi nokukhipha imali kuma-ATM anikwe amandla yi-NFC usebenzisa umakhalekhukhwini wakho, wengeze enye indlela yokwenza imali. Khonamanjalo, isisulu singase singakhumbuli ngisho nomzamo wokukhokha ohlulekile kuleyo webhusayithi futhi ngeke siqaphele noma yimaphi amashaji "ayinqaba" kuze kube yilapho sekwephuze kakhulu. ngoba ukusetshenziswa kokuqala komgunyathi kwenzeka kamuva kakhulu.

Ghost Tap: ukudluliselwa okukhohlisa isifundi sekhadi

Enye indlela okuxoxwe ngayo ezinkundleni zokuphepha i-NFC relay, ebizwa ngokuthi i-Ghost Tap. Ithembele kumaselula amabili kanye nezicelo zokuhlola ezisemthethweni njenge-NFGate: oyedwa uphethe isikhwama semali ngamakhadi antshontshiwe; enye, exhunywe ku-inthanethi, isebenza "njengesandla" esitolo. Isignali evela ocingweni lokuqala idluliswa ngesikhathi sangempela, futhi umnyuzi usondeza ifoni yesibili kumfundi wekhadi. okungahlukanisi kalula phakathi kwesignali yoqobo kanye nedluliselwe kabusha.

Iqhinga livumela iminyuzi eminingana ukuthi ikhokhe cishe ngesikhathi esisodwa ngekhadi elifanayo, futhi uma amaphoyisa ebheka ifoni yomnyuzi, abona kuphela uhlelo lokusebenza olusemthethweni ngaphandle kwezinombolo zekhadi. Idatha ebucayi ikwenye idivayisi, mhlawumbe kwelinye izwe. Lolu hlelo lwenza kube nzima ukukhokha futhi lusheshise ukushushumbiswa kwemali..

Uhlelo olungayilungele ikhompuyutha kanye necala le-NGte: uma ifoni yakho ikwebela

Abacwaningi bezokuphepha babhale imikhankaso e-Latin America—njengomkhonyovu we-NGate e-Brazil—lapho uhlelo lokusebenza lwebhange lwe-Android lomgunyathi lukhuthaza abasebenzisi ukuthi bavule i-NFC futhi "basondeze ikhadi labo" ocingweni. Uhlelo olungayilungele ikhompuyutha luphazamisa ukuxhumana futhi luthumele idatha kumhlaseli, obese elingisa ikhadi ukuze enze izinkokhelo noma ahoxise. Okudingekayo nje ukuthi umsebenzisi athembe uhlelo lokusebenza olungalungile..

Ubungozi abukho ezweni elilodwa kuphela. Ezimakethe ezifana ne-Mexico naso sonke isifunda, lapho ukusetshenziswa kwezinkokhelo eziseduze kukhula futhi abasebenzisi abaningi bafaka izinhlelo zokusebenza kusuka kuzixhumanisi ezingabazisayo, umhlabathi uvundile. Nakuba amabhange eqinisa ukulawula kwawo, Abadlali abanonya baphindaphinda ngokushesha futhi basebenzise noma yikuphi ukugada..

Le mikhonyovu isebenza kanjani isinyathelo ngesinyathelo

1. Kufika isexwayiso somgibe: umlayezo noma i-imeyili "edinga" ukuthi ubuyekeze uhlelo lokusebenza lwebhange ngesixhumanisi.
2. Ufaka uhlelo lokusebenza oluhlanganisiwe: Ibukeka ingokoqobo, kodwa inonya futhi icela izimvume ze-NFC.
3. Ikucela ukuthi uvale ikhadi: noma uvule i-NFC ngesikhathi sokusebenza, bese uthwebula idatha lapho.
4. Umhlaseli ulingisa ikhadi lakho: futhi wenze izinkokhelo noma ukuhoxisa, ozokuthola kamuva.

Ngaphezu kwalokho, kuvele enye i-twist ekupheleni kuka-2024: izinhlelo zokusebenza eziwumgunyathi ezicela abasebenzisi ukuthi babambe ikhadi labo eduze kwefoni yabo futhi bafake i-PIN yabo "ukuze bayiqinisekise." Uhlelo lokusebenza lube seludlulisela ulwazi esigebengwini, esithenga noma sikhiphe imali kuma-ATM e-NFC. Lapho amabhange ethola okudidayo kwe-geolocation, kwavela okuhlukile okusha ngo-2025: Bakholisa isisulu ukuthi sifake imali yabo ku-akhawunti okuthiwa ivikelekile. Kusuka ku-ATM, kuyilapho umhlaseli, nge-relay, ethula ikhadi lakhe; idiphozithi iphelela ezandleni zomkhwabanisi futhi uhlelo lokulwa nokukhwabanisa luyibona njengokuthengiselana okusemthethweni.

Izingozi ezingeziwe: amatheminali okukhokha amakhadi, amakhamera, nokwebiwa komazisi

Amatheminali awoniwe awagcini nje ngokuthwebula eziwadingayo nge-NFC, kodwa angagcina namalogi okwenziwayo futhi awangezele ngezithombe ezivela kumakhamera afihliwe. Uma bethola inombolo ye-serial kanye nosuku lokuphelelwa yisikhathi, abathengisi abathile abaku-inthanethi abangathembekile bangamukela ukuthengwa ngaphandle kwesici sesibili sokuqinisekisa. Amandla ebhange nebhizinisi enza umehluko.

Ngokuhambisanayo, izimo ziye zachazwa lapho othile ethwebula ikhadi ngobuhlakani noma eliqopha ngomakhalekhukhwini wakhe njengoba ulikhipha esikhwameni sakho. Nakuba kungase kuzwakale kuyisisekelo, lokhu kuvuza okubonakalayo, kuhlanganiswe nenye idatha, kungaholela ekukhwabaniseni kobunikazi, ukubhaliswa kwesevisi okungagunyaziwe, noma ukuthenga. Ubunjiniyela bezenhlalakahle buqeda umsebenzi wezobuchwepheshe.

Ungazivikela kanjani: izinyathelo ezisebenzayo ezisebenza ngempela

• Setha imikhawulo yokukhokha ngaphandle kokuthinta: Yehlisa amanani aphezulu ukuze, uma kukhona ukusetshenziswa kabi, umthelela ube mncane.
• Yenza kusebenze i-biometrics noma i-PIN kumakhalekhukhwini wakho noma iwashi: Ngale ndlela, akekho ongakhokha ngedivayisi yakho ngaphandle kokugunyazwa kwakho.
• Sebenzisa ama-wallet amathokheni: Bashintsha inombolo yangempela ngethokheni, begwema ukudalula ikhadi lakho kumthengisi.
• Vala ukukhokha ngaphandle kokuthinta uma ungayisebenzisi: Amabhizinisi amaningi akuvumela ukuthi ukhubaze lowo msebenzi ekhadini okwesikhashana.
• Vala i-NFC yefoni yakho uma ungayidingi: Yehlisa indawo yokuhlasela ngokumelene nezinhlelo zokusebenza ezinonya noma ukufundwa okungafunwa.
• Vikela idivayisi yakho: Ikhiye ngephasiwedi eqinile, iphethini evikelekile, noma i-biometrics, futhi ungayishiyi ivuliwe kunoma iyiphi indawo yokubala.
• Gcina yonke into ibuyekeziwe: uhlelo, izinhlelo zokusebenza kanye ne-firmware; izibuyekezo eziningi zilungisa iziphazamisi ezisebenzisa lokhu kuhlasela.
• Yenza kusebenze izexwayiso zokwenziwe: Push kanye ne-SMS ukuthola ukunyakaza ngesikhathi sangempela futhi usabele ngaso leso sikhathi.
• Hlola izitatimende zakho njalo: nikela isikhathi samasonto onke ukuhlola izindleko nokuthola amanani amancane asolisayo.
• Njalo qinisekisa inani kutheminali ye-POS: Bheka isikrini ngaphambi kokuvala ikhadi bese ugcine irisidi.
• Chaza amanani aphezulu ngaphandle kwephinikhodi: Lokhu kuphoqa ukufakazela ubuqiniso okwengeziwe ekuthengeni inani elithile.
• Sebenzisa imikhono evinjiwe ye-RFID/NFC noma amakhadi: Abawona amaphutha, kodwa bandisa umzamo womhlaseli.
• Uncamela amakhadi abonakalayo ukuze uthenge ku-inthanethi: Gcwalisa ibhalansi yakho ngaphambi nje kokukhokha futhi ukhubaze izinkokhelo ezingaxhunyiwe ku-inthanethi uma ibhange lakho likuhlinzeka.
• Vuselela ikhadi lakho le-virtual njalo: Ukuyishintsha okungenani kanye ngonyaka kunciphisa ukuchayeka uma ivuza.
• Xhuma ikhadi elihlukile esikhwameni sakho kunaleli olisebenzisa ku-inthanethi: ihlukanisa ubungozi phakathi kwezinkokhelo ezingokwenyama neziku-inthanethi.
• Gwema ukusebenzisa amafoni anikwe amandla yi-NFC kuma-ATM: Ngokukhipha imali noma ukufaka imali, sicela usebenzise ikhadi elingokoqobo.
• Faka i-suite yokuvikela ehloniphekile: Bheka ukuvikelwa kwenkokhelo nezici zokuvimbela ubugebengu bokweba imininingwane ebucayi kuselula naku-PC.
• Landa izinhlelo zokusebenza ezitolo ezisemthethweni kuphela: futhi uqinisekise unjiniyela; qaphela izixhumanisi nge-SMS noma umlayezo.
• Ezindaweni eziminyene: Gcina amakhadi akho ephaketheni langaphakathi noma esikhwameni esivikelekile futhi ugweme ukuwadalula.
• Okwebhizinisi: I-IT icela i-IT ukuthi ibuyekeze amaselula ezinkampani, isebenzise ukuphathwa kwedivayisi, futhi ivimbe ukufakwa okungaziwa.

Izincomo ezivela ezinhlanganweni nezindlela ezihamba phambili

• Hlola inani ngaphambi kokukhokha: Ungasondeli ikhadi uze uqinisekise inani lemali kutheminali.
• Gcina amarisidi: Bakusiza ukuthi uqhathanise izindleko futhi ufake izimangalo nobufakazi uma kukhona ukungqubuzana.
• Yenza kusebenze izaziso ezivela kuhlelo lokusebenza lwasebhange: Ziwuphawu lwakho lokuqala oluyisixwayiso lwenkokhiso engaziwa.
• Hlola izitatimende zakho njalo: Ukutholwa kusenesikhathi kunciphisa umonakalo futhi kusheshise ukusabela kwebhange.

Uma usola ukuthi ikhadi lakho lakhiwe noma i-akhawunti yakho ixhunyiwe

Into yokuqala ukuvimba ikhadi lesikweletu elihlanganisiwe Kuhlelo lokusebenza noma ngokushayela ibhange, cela inombolo entsha. Cela okhiphayo ukuthi asuse ukuxhumanisa noma imaphi amawalethi eselula ahlobene ongawazi futhi enze ukuqapha okuthuthukisiwe kusebenze. ngaphezu kokushintsha amaphasiwedi nokuhlola amadivayisi akho.

Edivayisini yakho yeselula, khipha izinhlelo zokusebenza ongazikhumbuli uzifaka, sebenzisa ukuskena ngesisombululo sakho sokuvikela, futhi uma izimpawu zokutheleleka ziqhubeka, buyisela kuzilungiselelo zasembonini ngemva kokwenza ikhophi yasenqolobaneni. Gwema ukufaka kabusha emithonjeni engekho emthethweni.

Faka umbiko uma kudingekile futhi uqoqe ubufakazi (imiyalezo, izithombe-skrini, amarisidi). Uma ukubike ngokushesha, ibhange lakho lingaqala ngokushesha ukubuyisela imali futhi livimbe izinkokhelo. Isivinini siyisihluthulelo sokumisa umphumela we-domino.

Okubi kokungathinteki ukuthi abahlaseli baphinde basebenze eduze. Ukuqonda ukuthi basebenza kanjani—kusuka ekujuleni kwesixuku kuye ekuxhumaniseni amakhadi kuya kumawallet eselula, i-Ghost Tap relaying, noma uhlelo olungayilungele ikhompuyutha oluvimba i-NFC—kuvumela izinqumo ezinolwazi: ukuqinisa imingcele, okudinga ukuqinisekiswa okuqinile, ukusebenzisa amathokheni, ukuvala izici lapho zingasetshenziswa, ukuqapha ukunyakaza, nokuthuthukisa inhlanzeko yedijithali. Ngezithiyo ezimbalwa eziqinile ezikhona, Kungenzeka ngokuphelele ukujabulela izinkokhelo ngaphandle kokuthinta kuyilapho unciphisa ubungozi.