Chinese consumer test finds 12 smart locks vulnerable to cloned ID cards
A comparative test by Beijing, Tianjin, and Hebei consumer associations found that 12 of 30 smart lock models could be unlocked with cloned IC cards, three models transmitted sensitive data unencrypted, and three models could be spoofed by facial photographs, exposing consumers to unauthorized access and privacy risks.
What happened
Beijing, Tianjin, and Hebei consumer associations tested 30 smart lock models from 20 brands and found security vulnerabilities. Of 19 models that shipped with IC cards, 12 could be unlocked with cloned cards, affecting brands including Lechoice, Delixi, VOC, Dais, Yinsuo, Boke, Asia-Pacific Tianeng, Alpha Aurora, and Phantai.
Three models—Asia-Pacific Tianeng A9pro/Nano Gray, Alpha Aurora P14Ultra, and Phantai T7—transmitted user accounts, passwords, and remote unlock commands in unencrypted plain text, risking network interception. Three models—Qingke, Boke, and Phantai—could be unlocked by infrared photographs of faces, indicating insufficient liveness detection.
Reported impact
Loss or brief contact with an IC card could allow unauthorized copying and unlocking. Unencrypted data transmission exposed login credentials and remote commands to network interception, potentially enabling illegal unlocking or privacy leaks. Vulnerability to photograph-based spoofing defeated facial recognition security.
Index analysis
The test found that facial recognition algorithms in some products had clear defects in liveness detection and anti-spoofing capability, unable to effectively resist simple forgery attacks. IC card cloning and plaintext data transmission represented failures in physical and digital access control security.
Governance controls
Consumer associations recommended selecting products with 3D structured light or dual infrared liveness detection, purchasing through official channels or reputable platforms, properly safeguarding IC cards, disabling IC card unlock when not in frequent use, and choosing products with explicit security commitments.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.