Tamper-evident technology
Tamper-evident describes a device or process that makes unauthorized access to the protected object easily detected. Seals, markings, or other techniques may be tamper indicating.
Tampering involves the deliberate altering or adulteration of information, a product, a package, or system. Solutions may involve all phases of product production, distribution, logistics, sale, and use. No single solution can be considered as "tamper proof". Often multiple levels of security need to be addressed to reduce the risk of tampering.[1] Some considerations might include:
Tamper-evident designs have been a feature of letters since ancient times, often using wax, clay, or metal seals to signify that the letter had not been opened since it was written.
Similar practices continue today,[2] from examples such as envelopes to carefully designed packaging for payslips. In modern contract law, it is common to see each page of a contract individually initialled and numbered, so that any addition or removal of pages can be detected. Meanwhile, most checks have a variety of features to defeat both tampering and duplication (these are often listed on the back of the check).
Technicians at the National Security Agency developed anti-tamper holograph and prism labels that are difficult to duplicate.[3]
Credit cards, money, stamps, coupons[edit]
In financial terms, tamper-evident design overlaps a lot with anti-forgery techniques, as ways to detect monetary tokens which are not what they seem.
Postage stamps, for example, may contain a layer of ultraviolet-reflective ink which changes state under pressure. The impact from a postmarking machine then leaves a UV-visible mark as well as an ink mark which identifies attempts to reuse stamps.
In a similar vein, asset-numbering labels on corporate equipment (PCs and the like) are often designed to leave an imprint of either the serial number, or the word "VOID" if the label is peeled off. However, this can easily be defeated by warming up the label using a blow dryer so it will be more flexible and forgiving to removal (and reapplication).
Road tax vignettes and price tags are often tamper-evident in the sense that they cannot be removed in one piece. This makes it difficult to move a vignette from one car to another, or to peel off a price tag from a cheaper article and reapply it to a more expensive one.
Money is tamper-evident in the sense that it should be difficult to produce a financial token without authorization, even if starting from a token of lower value. For example, forgers may attempt to clean the ink from a banknote and print the image of a higher-denomination note on it, giving them the carefully guarded "banknote paper" which is otherwise very difficult to obtain. This may be one of the reasons why many countries use banknotes of different size in ascending order of value. A British £5 banknote issued by Bank of England is much smaller than a £50 banknote, and therefore can't be used to create a £50 note.
Physical security[edit]
Tamper-evident physical devices are common in sensitive computer installations. For example, network cabling can be run down transparent conduits and switches can be located in glass-fronted cabinets, allowing for any unusual device attached to the network tending to stand out in plain view.
Despite the easy availability of miniature (hardware) key loggers, tamper-evident design is not often used in personal computers. While transparent computer cases and keyboards are common, they are mainly used for the decorative effect rather than security. Many PCs do have a switch to detect opening of the case, and this provides a visual notification when the computer is next turned on that the case has recently been opened. In any case, it has long been possible to complicate the task of tampering with electronic devices by sealing them with tamper-evident tape or sealing wax. Alternatively, radio-controlled alarm-devices (which transmit a silent alarm) can be installed, or cases can be glued shut in such a manner that tampering attempts will distort or fracture the casing.
Fire alarms and other emergency switches are typically non-reversible, using a piece of glass which must be broken to activate the alarm. For example, panic buttons in burglar alarm systems might require a plastic key to reset the switch.
In very much the same manner as with fire alarms, many emergency handles and levers, or handles that are not meant to be opened regularly, are enclosed in a thin metal or plastic security seal. The seal is thin, so as not to prevent the handle from being used (in due time), but only to alert maintenance/security personnel that the handle was indeed used.
Many times, large sea-going shipping containers have such a metal ring or seal attached to them at the source port. After traveling at sea (and perhaps by land as well), the containers reach their destination, where each container is checked to have the seal properly in place (against a list of doublets - container/seal).
In police work, tamper-evident techniques must often be used to guard access to evidence, providing means of storing items and samples in a way which can be used to prove that they were not altered after their collection. Special tamper-evident evidence bags are available, to be used following a strict protocol.[6] Video recordings can be protected to some degree against tampering by recording a timestamp.
Security seals are commonly employed on devices such as electronic voting machines in an attempt to detect tampering. However, testing by Argonne National Laboratory and others demonstrates that some existing seals can be quickly defeated by a trained person using low-tech methods.[7] They offer ideas on countermeasures, and are exploring the promising option of "anti-evidence" seals.
To prevent gas and electricity meters from being interfered with to show lower chargeable readings, they may be sealed with a lead or plastic seal with a government marking, typically fixed to a wire that passes through part of the meter housing. The meter cannot be opened without cutting the wire or damaging the seal.[8][9]
Computer systems[edit]
In cryptographic terminology, cryptographic hash functions and cryptographic signatures are used to add a tamper-evident layer of protection to document, often referred to as an electronic signature.
Hardware-encrypted full disk drives utilise tamper-evident cases, so when it is retrieved the owner can be assured that the data has not been compromised, thus preventing costly further actions such as notifying the data owners.[10]
The document, email, or file to be protected is used to generate a signed hash, a number generated from the contents of the document. Any change to the document, no matter how trivial, such as changing a single bit from a 1 to a 0, will cause it to have a different hash, which will make the signature invalid. To alter a document while purposely maintaining the same hash, assuming the hash function and the program implementing it are properly designed, is extremely difficult .