Arirang AS1201

Classification

Device
Criterion	Value	Proof(s)	Comment
Known hardware tampering	Rare	[1]	The device includes a tamper alarm function that triggers alerts when the casing is opened . Physical modifications are rare due to its sealed design and built-in security mechanisms.
Known vulnerabilities	Rare	[2]	The device includes a tamper alarm function that triggers alerts when the casing is opened . Physical modifications are rare due to its sealed design and built-in security mechanisms.
Prior attacks	None	[]
Updatability	None	[3]	Firmware updates are released periodically (e.g., V1.0.2 in 2022) to improve security and functionality . Users are advised to install updates promptly.
Category score	2

System
Criterion	Value	Proof(s)	Comment
Authentication with other systems	Partial	[4]	Supports integration with Dahua’s cloud platform for remote management but lacks seamless authentication with third-party ecosystems .
Communications	Encrypted with up-to-date encryption	[5]	Uses WPA3 for Wi-Fi connections and TLS 1.3 for network traffic, aligning with industry standards .
Storage	Encrypted with up-to-date encryption	[6]	User data (e.g., cardholder information) is likely encrypted at rest, though specific algorithms (e.g., AES-256) are not explicitly documented
Category score	2

User Authentication
Criterion	Value	Proof(s)	Comment
Account management	Full	[7]	Supports up to 30,000 cardholders and 150,000 event logs, with granular permissions for different user types (e.g., VIP, guest) .非常好
Authentication	Secure	[8]	Combines NFC, fingerprint, and password authentication. Users can enable multi-factor for high-security scenari
Brute-force protection	Basic	[9]	Temporarily locks accounts after multiple failed login attempts, though lockout duration and thresholds are configurable .
Event logging	Access event logged	[10]	Logs all access events (success/failure, card swipes, tamper attempts) with timestamps and user identifiers .
Passwords	Require change after setup with complexity requirements	[11]	New passwords must be 8–32 characters with mixed types (letters, numbers, special symbols), though periodic rotation is not mandatory .
Category score	2

Grade	B