Content deleted Content added
Card technology changed to DESFire EV2 Tags: Visual edit Mobile edit Mobile web edit Advanced mobile edit |
Jeraxmoira (talk | contribs) mNo edit summary |
||
| (6 intermediate revisions by 3 users not shown) | |||
Line 32:
| homepage = [http://rejsekort.dk/ rejsekort.dk]
|}}
'''Rejsekort''' (Official translation: ''[[Travel card
The total cost of the system will be between [[euro|€]]200 and €270 million.
Line 49:
It was expected that [[Skånetrafiken]] in [[Skåne|Scania]] in [[Sweden]] would implement a system akin to the Danish. Therefore, the Rejsekort system was prepared to work with the Scanian, so as to allow passengers to easily travel over the [[Øresund Bridge]]. The current cross border paper tickets are also accepted on local traffic, and should do so also in the future. Skånetrafiken did in 2009 introduce a different electronic card system, which is incompatible with Rejsekort, leading to separate Danish Rejsekort check-in/check-out readers being installed at [[Øresundståg]] stops in Malmö (i.e. Hyllie, Triangeln, and Malmö C stations). The current Skånetrafiken system is electronic only for buses (card or QR code on the Skånetrafiken app), while for trains either an electronic ticket (card or app) or a paper ticket can be used. Neighbour counties in the north introduced the same system but under their own names.
The implementation of Rejsekortet is considered to be one of the biggest IT scandals in Denmark. This is due to the not very successful end product, the doubled price-tag and the extreme delay in the original project plan.
==Technology==
Line 55:
The original card technology is [[MIFARE|MIFARE Classic]].<ref name=1eye /> The card has a 4 kilobyte [[electrically erasable programmable read-only memory]] (EEPROM) which can be written to using [[RFID]]. The original cards also contains a chip by [[NXP Semiconductors]] which implements a proprietary cryptography scheme called [[CRYPTO1]], which was fully reverse-engineered in 2008.<ref name=1eye /> ''A Practical Attack on the MIFARE Classic'' was published in 2008 by a group at [[Radboud University Nijmegen]].<ref name=1eye />
▲Newer cards{{When|date=May 2023|reason=Unknown when this began}} uses [[MIFARE|MIFARE DESFire EV2]], which stores card contents encrypted. The contents of these cards cannot be read without the appropriate decryption keys, which are not public information.
On the original card technology, the ride history is stored unencrypted and can be read by anyone. There are mobile apps made by third parties which can achieve this.<ref>{{Cite web |title=Rejsekortlæser - Apps on Google Play |url=https://play.google.com/store/apps/details?id=com.bangbits.rejsekortscanner&hl=en_US&gl=US |access-date=2022-05-01 |website=play.google.com |language=en}}</ref>
Line 63 ⟶ 61:
==Timetable for implementation==
{{Update|date=July 2011}}
The Rejsekort system was tested between [[Roskilde]] and [[Tølløse]] in December 2007.
* Testing between [[Taastrup]] and [[Holbæk]] at the end of 2008
Line 75 ⟶ 73:
* In 2015 old paper punch cards aren't sold anymore, leaving rejsekort and more expensive single tickets as the main options.
* Since 2018 it has been planned to replace [[MIFARE#MIFARE Classic family|MIFARE Classic]] with [[MIFARE#MIFARE DESFire family|MIFARE DESFire]].<ref name=1eye>{{cite web|url=https://oneeyedtechs.com/post/rejsekortet-an-obsolete-smart-card|title=Rejsekortet — an obsolete smart card|publisher=OneEyedTechs|date=2020-11-20}}</ref> DESFire was shown to be vulnerable to [[side-channel attack]]s in 2011.<ref>{{cite web|url=https://www.iacr.org/workshops/ches/ches2011/presentations/Session%205/CHES2011_Session5_1.pdf |title=Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World |website=Iacr.org |access-date=9 February 2016}}</ref> More info at [[MIFARE#MIFARE DESFire attacks]].
* As of June 2022, the migration to MIFARE DESFire has begun for Rejsekort. Both card types are still in production and valid for travel.<ref name="1eye" />
==See also==
| |||