[UrMomReadsHN]

Theres insurance issues to consider...

If you report to your insurance company you have a deadbolt and then your house gets broken into. (Perhaps due to a flaw in the software?) Now your insurance company finds out you have a Bluetooth dohicky on your door rather than a physically locked deadlock lock. Your insurance now won't pay up.

I'm not sure how much those Proxcards that every business in the world uses costs, but they sure are time tested and convenient. Probably expensive though. I believe they are RFID.

Don't put this on your rental property either until you consult your local laws regarding requirements for doors and locks for rentals to see if this meets the requirements.

[blisterpeanuts]

No offense but what's the evidentiary basis for these statements? Are you in the insurance business, or in the lock business?

I work for a company that makes many types of locks and currently is developing NFC and BLE solutions.

The fact is, any kind of lock is vulnerable to a determined and skillful attacker. There are BLE locks that "phone home" to check a password before they'll open; there are NFC locks that are actuated by RF-powered NFC chips that are almost un-crackable except by the Chinese Army or similar organizations.

Then there are conventional badges, key cards and physical keys in universal use, that are rather easily cracked or copied.

Vulnerabilities are already factored into insurance rates. The advantage of a connected BLE or NFC entry system is that it can require a remote login before the door will open. For example, enter the BLE region, the app pops up and prompts you for a PIN, then actuates the unlocking mechanism using an encrypted protocol. No technology is perfectly secure, but these technologies do present great possibilities for improving on current approaches to access control.

[UrMomReadsHN]

>No offense but what's the evidentiary basis for these statements? Are you in the insurance business, or in the lock business?

No. It was a hypothetical situation to CONSIDER. Everyone's situation is different. You should consider what insurance ramifications would be and make sure you are reporting accurately to your insurance company, because inaccuracies can potentially have bad consequences. Unknowingly. Unlikely, but worth looking into first. Check the wording on your policy, it may list things that are disallowed. It may have a different category for electronic locks (and you may even get a discount!) Not saying this is insecure or a physical lock is better, but its use may be excluded in your policy for whatever stupid or non stupid reason. Check it. Thats all I'm saying.

You read my post wrong.

[toomuchtodo]

> I'm not sure how much those Proxcards that every business in the world uses costs, but they sure are time tested and convenient. Probably expensive though.

I installed a proximity card system a few jobs ago, and each IP enabled reader from HID (http://www.hidglobal.com/products/readers/iclass/rw400) was about $550 for both the external RFID interface and then the internal in-wall control unit (that used POE Ethernet to connect to the network). The cost per card is fairly trivial.

> Don't put this on your rental property either until you consult your local laws regarding requirements for doors and locks for rentals to see if this meets the requirements.

There are no code issues with this as long as if power fails, internal occupants can still exit the building (fire code).

[UrMomReadsHN]

>There are no code issues with this

How do you know? Landlord tenant laws are incredibly local (you can't possibly know all of them for all locales in the world) and can be very specific and probably haven't gotten caught up to new technology. My town (just the town!) has a 30+ page document on what a landlord has to provide a tenant written in very VERY specific terms. Thats not even considering state laws. And federal.

[fryguy]

Proximity cards themselves are secure, but usually the thing that opens the door isn't: https://www.youtube.com/watch?v=Bttr7fEfxiE

[lotsofmangos]

most RFID proximity cards have some fairly large security issues - http://cq.cx/proxmark3.pl

[UrMomReadsHN]

Thanks for the interesting read. :)

[umsm]

Insurance is designed to cover loss in case of accidents, natural disaster, etc.

You can't say your homeowners insurance won't cover you because your house burned down because you were cooking and you aren't a world-class chef.

[UrMomReadsHN]

Huh?

My insurance covers me in the case of theft. When I applied for my policy the adjuster asked me questions about my physical security. Do I have a deadbolt? Security system? Things like that. These variables (along with others, crime rate of my neighborhood, for example) were plugged in and I was given a policy with a premium tailored to my risk. If I lie about my risk to get a lower premium, then if I make a claim, then I won't be covered.

Consider a 100% purely hypothetical situation where I told my insurance company I have a deadbolt on my door. They issue me a policy based on that information. This policy has language in it that defines what a deadbolt is. I then replace my deadbolt with something that doesn't fit the language of my policy. I make a claim, and an insurance adjuster comes to my house. They notice that I was using a tool to secure my door that didn't fit with my policy language. Now I won't be covered because I didn't follow the policy.

Of course that's entirely hypothetical. Maybe (probably?) not even likely. But since it takes all of 5 minutes to verify if the new lock you are installing is compatible with your insurance policy, it would be braindead to not check.

Just something to consider...

[tw04]

You could literally never lock your doors and your insurance company will still pay up. Your post is painfully misinformed.

[UrMomReadsHN]

My insurance excludes coverage for neglect.

Neglect is defined as "neglect of an insured to use all reasonable means to save and preserve property at and after the time of loss."

My insurance adjuster also asked me specifically about deadbolts.