Ring of the Devil electric lock exploit
posted Jun 16th 2008 11:50am by Will O'Brienfiled under: security hacks

[Barry] got his hands on an interesting electronic lock pick. The ‘Ring of the Devil’ is made of aluminum and has four magnets inside. By rotating it against an electric lock, (like the one in our RGB keypad lock How-To) the magnetic force can cause the electric motor inside the lock to turn and unlock. More details and commentary are on [Barry]’s site.





The software update could eliminate some of the threat of this attack. However, only if the lock’s controller is still receiving power.
Without more detailed descriptions of how this lock operates, I assume that the software update would be able to detect this attack by sensing the current generated from the “the ring of the devil”, log that event, and then apply current in the reverse direction to keep the motor from turning. If power was removed (by a determined individual), the attack would still work. If backup power was battery supplied, it is still possible to use the attack long enough to drain the battery to the point where the ring would overpower the controller. However, if the security system is still active, the cops will show up before you can drain it far enough.
I wonder if it also has a solenoid to prevent the motor from turning in the event of an attack?
Another possibility is that if you apply a magnetic field intense enough, the motor’s windings may eventually overheat, short circuit, and disable the controller. The magnets inside of the motor would still respond to the external magnetic field and the lock would open.
Anybody interested in creating a more complicated “ring of the devil”? One could create a toroid (doughnut shape) with multiple windings and then attach a controller to apply current to the coils in a “rotating” manner. This could be made powerful enough to probably overpower the lock controller’s reverse “anti-attack” current. At the very least it would be faster way of draining the backup battery. It would also be silent and less conspicuous than a power drill. Battery and controller in your pockets, toroid in your hand, and a long sleeve shirt to conceal the wires.
Then there’s the issue of how the security system communicates with the lock. If wirelessly and with a battery backup, metal bracelets are a sure thing. If the lock is in the door frame with a battery backup and secure shielding of the wires, metal bracelets are in your near future unless you can detect the communication frequency and jam it and the lock doesn’t continuously communicate with the security system. If wired with a battery back up, then the placement of the wires or contacts inbetween the door and frame would be critical, but could still be suceptible if the lock doesn’t continuously communicate with the security system.
Anyway, I should probably get back to my electrical engineering homework. Thanks for reading my two cents. Ryan
Posted at 12:41 pm on Jun 16th, 2008 by Ryan