Security evaluation of smart door locks

Abstract: Smart locks are a part of the up and rising Internet of Things (IoT). They’re used as a complement to traditional locks in order to make it easier to share keys electronically, rather than physically. Smart door locks are mounted on a existing door and enables users to control the state of the lock with their smartphone. In this report we want to investigate if previous acknowledged attacks on smart locks still exists in today’s available locks for the Swedish market. By studying previous work and conduct a threat model, we create attacks to apply on the locks in order to answer what deficiencies exist in smart door locks today.The results conclude that there are several deficiencies in today’s smart locks, where the most severe has been reported under responsible disclosure to the manufacturer. The locks investigated shows vulnerabilities in state consistency, password policies and password reset mechanism.