What is Amazon Key? Amazon Key Review

introduce

The entire Amazon Key system is priced at $249.99, with free installation.

Surveillance footage can be stored for 24 hours, or up to seven days if you're willing to pay an additional $6.99 per month.

Application Scenario

When Amazon's courier delivers the package to the user's door, if the user is not at home, the user can remotely monitor it in real time, open the password lock to allow the courier to deliver the item to their home; or create a temporary password to allow friends and other service personnel to enter the room; Alexa Cloud Cam security camera for monitoring; in addition, when an intruder breaks in, the system will sound an alarm.

develop

In April 2018, Amazon launched the Amazon Key In-Car service, which is an extension of the Amazon Key service.

Customer response

On the one hand, many people are reluctant to let strangers such as couriers into their homes, because Amazon Key relies entirely on the word "trust" in addition to technology;

On the other hand, Alexa Cloud Cam can monitor users' every move in their homes in all aspects.

This makes people worry that once Amazon has a comprehensive understanding of your room, it will make personalized recommendations on products.

Security Vulnerabilities

Vulnerability Introduction

Amazon Key vulnerability: As long as you are within the WiFi range, you can freeze the Cloud Cam by running a certain program on your computer. At this time, the display on the App will only show the door lock status. In other words, no matter who enters or leaves the house, the door that the owner sees through the mobile app is locked, which poses a security risk.

In response to this, researchers from Rhino Security Labs conducted an experiment and successfully made the cloud camera go out of control and only display a single static picture. In this experiment, the attacker disguised himself as a router and was within the WiFi signal coverage of the cloud camera, constantly sending commands to the cloud camera to make it unable to work properly. It is worth noting that any ordinary computer within the WiFi signal coverage of the cloud camera can launch this attack. The "deauthentication attack" method used in this attack can make the attacked device offline, which is very common when conducting LAN attacks. After being attacked and disconnected from the network, this Amazon cloud camera did not shut down, but continued to display the picture before the picture froze.

Amazon responds

Amazon said that security is a fundamental element of Amazon's services. All aspects of this service have been strictly checked by them. All couriers have passed Amazon's security background review and obtained qualification certification before performing delivery tasks. In addition, each delivery task will ensure whether it is delivered to the right address at the right time for a specific driver. If the camera is found to be offline for a long time, the user will be notified immediately. If WiFi is disabled and the camera is not online, the service will not be unlocked.

From this perspective, Amazon's newly launched "door-breaking" service is indeed not mature enough. This smart door lock project should first optimize and check the safety of various indicators before considering adding more door-to-door services. After all, high-tech services need to make more users feel at ease and confident before they can successfully "go on the road."

References

• 1. Hello, Stranger - Amazon Key: Sohu [cited on 2017-11-01T16:00:00.000Z]
• 2. Amazon Key service was exposed to have security vulnerabilities! : Baidu [cited on 2018-03-04T16:00:00.000Z]
• 3. Understand the business layout behind Amazon Key in one article. These points are worth learning for e-commerce logistics companies: Sohu [cited on 2017-11-03T16:00:00.000Z]
• 4. Even if no one is at home, the courier can still get in! Amazon's "Amazon Key" service will be launched soon: Drive China [cited date 2019-11-28T16:00:00.000Z]