No edit summary |
|||
| Line 15: | Line 15: | ||
Other types of authentication require a different approach. Obviously, just getting the genuine article is the best method. A legitimate authentication fob (card, RFID, etc.) or an actually authorized person for the various biometric scanners works best. Munging the electronics as described above is always an option, too, but there's no special device to assist like there is with a keypad. Instead, if the character can get their hands on a legitimate article temporarily, they can make a duplicate. | Other types of authentication require a different approach. Obviously, just getting the genuine article is the best method. A legitimate authentication fob (card, RFID, etc.) or an actually authorized person for the various biometric scanners works best. Munging the electronics as described above is always an option, too, but there's no special device to assist like there is with a keypad. Instead, if the character can get their hands on a legitimate article temporarily, they can make a duplicate. | ||
Regardless of the authentication scheme, the process is the same. First, whether by hook or crook, the character needs to get a sample to be duplicated. With the sample in hand, the character uses uses a '''Collector''' to assemble the information needed to create the '''Exemplar'''. The equipment and test required varies by the type of authentication attempting to be duplicated — if it's a device, use the rating of the device as the limit, if it's a kit use the character's Mental Limit. This sets the Rating of the Exemplar. | Regardless of the authentication scheme, the process is the same. First, whether by hook or crook, the character needs to get a sample to be duplicated. With the sample in hand, the character uses uses a '''Collector''' to assemble the information needed to create the '''Exemplar'''. The equipment and test required varies by the type of authentication attempting to be duplicated — if it's a device, use the rating of the device as the limit, if it's a kit use the character's Mental Limit. This sets the Rating of the '''Exemplar'''. | ||
This information is the used with the '''Duplicator''' to create the '''Duplicate'''. The character | This information is the used with the '''Duplicator''' to create the '''Duplicate'''. The character makesthe indicated test to physically create the Duplicate or program the device used to create the Duplicate. If the character is pressed for time, they can stop rolling before reaching the target Threshold and take whatever success they've achieved by that point. The result is the Rating of the '''Duplicate'''. | ||
To bypass the authentication, make an {{Test|Opposed Duplicate Rating × 2 vs. Maglock Rating Test}}. If the Duplicate is successful, the lock opens. If the Maglock wins, it remains closed — but see [[Security_Devices#Anti-Tamper_Systems|anti-tamper system]]s. | To bypass the authentication, make an {{Test|Opposed Duplicate Rating × 2 vs. Maglock Rating Test}}. If the Duplicate is successful, the lock opens. If the Maglock wins, it remains closed — but see [[Security_Devices#Anti-Tamper_Systems|anti-tamper system]]s. | ||
| Line 23: | Line 23: | ||
====Card Reader==== | ====Card Reader==== | ||
* '''Collector''': Keycard Copier w/ {{Test|Matrix + Logic [Rating] Test}} | * '''Collector''': Keycard Copier w/ {{Test|Matrix + Logic [Rating] Test}} | ||
* '''Duplicator''': Electronics Kit w/ {{Test|Electronics + Logic [Mental]}} | * '''Duplicator''': Electronics Kit w/ {{Test|Extended Electronics + Logic [Mental] (Examplar Rating, 10 Minutes) Test}} | ||
This is probably the easiest authentication device to bypass — getting the original key and swiping it through the copier collects the data required to make a duplicate with an Electronics Kit. | This is probably the easiest authentication device to bypass — getting the original key and swiping it through the copier collects the data required to make a duplicate with an Electronics Kit. | ||
====Voice Recognition==== | ====Voice Recognition==== | ||
* '''Collector''': Microphone w/ {{Test|Extended Socialize + Charisma [Social] (Microphone Limit, 5 minute) Test}} | * '''Collector''': Microphone w/ {{Test|Extended Socialize + Charisma [Social] (Microphone Limit, 5 minute) Test}} | ||
* '''Duplicator''': Voice Synthesizer w/ {{Test|Performance + Logic [Mental]}} | * '''Duplicator''': Voice Synthesizer w/ {{Test|Extended Performance + Logic [Mental] (Exemplar Rating, 10 Minutes) Test}} | ||
Generating an appropriate voice print generally involves acquiring a high-fidelity recording of the target saying words that include the appropriate {{wp|phoneme}}s needed to recreate the passphrase, typically by engaging the target in conversation. The challenge is getting them to say what you need said without revealing why. As with the Duplication Test, the character can abandon the attempt before reaching the limit of their recording equipment and hope what they have is enough. | Generating an appropriate voice print generally involves acquiring a high-fidelity recording of the target saying words that include the appropriate {{wp|phoneme}}s needed to recreate the passphrase, typically by engaging the target in conversation. The challenge is getting them to say what you need said without revealing why. As with the Duplication Test, the character can abandon the attempt before reaching the limit of their recording equipment and hope what they have is enough. | ||
| Line 36: | Line 36: | ||
====Facial Recognition==== | ====Facial Recognition==== | ||
* '''Collector''': Camera w/ {{Test|Extended Sneaking + Charisma [Social] (Camera Limit, 1 minute) Test}} | * '''Collector''': Camera w/ {{Test|Extended Sneaking + Charisma [Social] (Camera Limit, 1 minute) Test}} | ||
* '''Duplicator''': Synthskin Mask w/ {{Test|Matrix + Logic [Mental] Test}} | * '''Duplicator''': Synthskin Mask w/ {{Test|Extended Matrix + Logic [Mental] (Mask Rating or Exemplar Rating, 10 Minutes) Test}} | ||
Synthskin masks can be programmed from a high-fidelity video recording of the target's face. Getting sufficient angles to program the mask properly can take some time, so it's an Extended Test. As with the Duplication Test, the character can abandon the attempt before reaching the limit of their recording equipment and hope what they have is enough. | Synthskin masks can be programmed from a high-fidelity video recording of the target's face. Getting sufficient angles to program the mask properly can take some time, so it's an Extended Test. As with the Duplication Test, the character can abandon the attempt before reaching the limit of their recording equipment and hope what they have is enough. | ||
| Line 46: | Line 46: | ||
{{Box|Medical Records vs. Security Records|float=right|width=50%|color=red}} | {{Box|Medical Records vs. Security Records|float=right|width=50%|color=red}} | ||
* '''Collector''': Forensics Kit w/ {{Test|Sleight Of Hand + LOG [Mental] Test}} | * '''Collector''': Forensics Kit w/ {{Test|Sleight Of Hand + LOG [Mental] Test}} | ||
* '''Duplicator''': Cellular Glove Molder w/ {{Test|Extended Medicine + Logic [Molder or Exemplar | * '''Duplicator''': Cellular Glove Molder w/ {{Test|Extended Medicine + Logic [Mental] (Molder Rating or Exemplar Rating, 10 Minutes) Test}} | ||
Fingerprints are among the easiest biometric data to gather because they can be lifted from anything the target has touched with bare skin. | Fingerprints are among the easiest biometric data to gather because they can be lifted from anything the target has touched with bare skin. | ||
| Line 53: | Line 53: | ||
====Retina Scanner==== | ====Retina Scanner==== | ||
* '''Collector''': Retinal Scanner w/ {{Test|Medicine + Logic [Rating] Test}}<ref name="retinal adjuster">{{src|cf|151}} has the Retinal Adjuster nanoware, which can function as collector and duplicator, but that technology does not exist in 2059.</ref> | * '''Collector''': Retinal Scanner w/ {{Test|Medicine + Logic [Rating] Test}}<ref name="retinal adjuster">{{src|cf|151}} has the Retinal Adjuster nanoware, which can function as collector and duplicator, but that technology does not exist in 2059.</ref> | ||
* '''Duplicator''': Retinal Duplication Cyberware w/ {{Test|Matrix + Logic [Mental]}}<ref name="retinal adjuster" /> | * '''Duplicator''': Retinal Duplication Cyberware w/ {{Test|Extended Matrix + Logic [Mental (Impalant Rating or Exemplar Rating, 10 Minutes) Test}}]}}<ref name="retinal adjuster" /> | ||
A retinal scan is probably the hardest biometric to acquire and the hardest to fake. It can only be recorded with a purpose-built retinal scanner, and it requires the subject to remain still while the image (both a visual capture of the inside of the eye and a thermal scan of the blood vessels behind it) is captured. Actually making use of the scan requires a relatively uncommon cybereye modification, Retinal Duplication<ref name="retinal adjuster" />{{src|sr5|ref=453}}. | A retinal scan is probably the hardest biometric to acquire and the hardest to fake. It can only be recorded with a purpose-built retinal scanner, and it requires the subject to remain still while the image (both a visual capture of the inside of the eye and a thermal scan of the blood vessels behind it) is captured. Actually making use of the scan requires a relatively uncommon cybereye modification, Retinal Duplication<ref name="retinal adjuster" />{{src|sr5|ref=453}}. | ||
| Line 59: | Line 59: | ||
====DNA Scanner==== | ====DNA Scanner==== | ||
* '''Collector''': Forensics Kit w/ {{Test|Extended Medicine + Logic [Mental] (Sample Rating, 10 minutes) Test}} | * '''Collector''': Forensics Kit w/ {{Test|Extended Medicine + Logic [Mental] (Sample Rating, 10 minutes) Test}} | ||
* '''Duplicator''': Chemistry Kit w/ {{Test|Chemistry + Logic [Mental] Test}} | * '''Duplicator''': Chemistry Kit w/ {{Test|Extended Chemistry + Logic [Mental] Test (Exemplar Rating, 10 Minutes) Test}} | ||
DNA scanners generally work by breath (sampling tissue and saliva aspirated into a tube) or a small blood sample. Creating a serum to fake out one of these sensors involves getting a sample from the target | DNA scanners generally work by breath (sampling tissue and saliva aspirated into a tube) or a small blood sample. Creating a serum to fake out one of these sensors involves getting a sample from the target. Blood is best, but skin, hair, or other bodily fluids can do the job. The Rating of the Sample is based on it's age and size — a single drop of fresh blood is Rating 6, while a week old hair follicle is only Rating 1. | ||
===Anti-Tamper Systems=== | ===Anti-Tamper Systems=== | ||
Revision as of 16:13, 17 November 2022
These rules modify those found under Security Devices in Shadowrun Fifth Edition Core Rulebook (p. 358).
Doors, Windows, & Locks
The rules for security devices (and bypassing them), specifically the section on Doors, Windows, & Locks in Shadowrun Fifth Edition Core Rulebook (p. 359) and the tools used in conjunction with them are quite inconsistent.
Key Locks & Transponder-Embedded Keys
This section is fine as-is, with one caveat — in line with the changes to Active Skills, use Electronics + LOG Test for dealing with transponder-embedded keys. Also, note that if the character is Untrained in the Locksmithing skill and is relying entirely on the capabilities of an Autopicker, roll only the Autopicker's Rating.
Maglocks
Cracking a maglock's case to access the electronics requires a Locksmith + Agility [Physical] (Maglock Rating × 2, 1 Combat Turn) Extended Test. Reassembling the case afterwards requires the same test.
Whether or not physical violence (treat it as attempting to destroy a Barrier with Structure and Armor equal to the Maglock's Rating) is beneficial to bypassing a maglock depends on the site's security design. If the lock is designed to fail-safe, smashing it will in fact open whatever it is securing, but will also inform the security system of the breach. If the system is instead designed to fail-secure, destroying the lock will not open whatever it is securing... and it will still inform the security system of the breach.
A maglock can have one (or more) authentication methods — keypads, card readers, voice recognition, facial recognition, print scanners, retinal scanners, or DNA scanners. Accessing the maglock's electronics is only required if the goal is to bypass the authentication method completely. It's probably worth noting that a great many authentication schemes involve both a keypad and some other form of authentication — this is what's known as multi-factor authentication.
In the case of keypads, either the character has the code or they don't. If they don't have they code, they have to access the innards as described in Cracking the Case. They can then attempt to rewire the circuits and/or bypass the code. The character makes a Extended Locksmithing+LOG [Mental] (Maglock Rating × 2, 1 Combat Turn) Test Test, and may add the rating of a sequencer[1] to their die pool.
Other types of authentication require a different approach. Obviously, just getting the genuine article is the best method. A legitimate authentication fob (card, RFID, etc.) or an actually authorized person for the various biometric scanners works best. Munging the electronics as described above is always an option, too, but there's no special device to assist like there is with a keypad. Instead, if the character can get their hands on a legitimate article temporarily, they can make a duplicate.
Regardless of the authentication scheme, the process is the same. First, whether by hook or crook, the character needs to get a sample to be duplicated. With the sample in hand, the character uses uses a Collector to assemble the information needed to create the Exemplar. The equipment and test required varies by the type of authentication attempting to be duplicated — if it's a device, use the rating of the device as the limit, if it's a kit use the character's Mental Limit. This sets the Rating of the Exemplar.
This information is the used with the Duplicator to create the Duplicate. The character makesthe indicated test to physically create the Duplicate or program the device used to create the Duplicate. If the character is pressed for time, they can stop rolling before reaching the target Threshold and take whatever success they've achieved by that point. The result is the Rating of the Duplicate.
To bypass the authentication, make an Opposed Duplicate Rating × 2 vs. Maglock Rating Test Test. If the Duplicate is successful, the lock opens. If the Maglock wins, it remains closed — but see anti-tamper systems.
Card Reader
- Collector: Keycard Copier w/ Matrix + Logic [Rating] Test Test
- Duplicator: Electronics Kit w/ Extended Electronics + Logic [Mental] (Examplar Rating, 10 Minutes) Test Test
This is probably the easiest authentication device to bypass — getting the original key and swiping it through the copier collects the data required to make a duplicate with an Electronics Kit.
Voice Recognition
- Collector: Microphone w/ Extended Socialize + Charisma [Social] (Microphone Limit, 5 minute) Test Test
- Duplicator: Voice Synthesizer w/ Extended Performance + Logic [Mental] (Exemplar Rating, 10 Minutes) Test Test
Generating an appropriate voice print generally involves acquiring a high-fidelity recording of the target saying words that include the appropriate phonemes needed to recreate the passphrase, typically by engaging the target in conversation. The challenge is getting them to say what you need said without revealing why. As with the Duplication Test, the character can abandon the attempt before reaching the limit of their recording equipment and hope what they have is enough.
Note that the Limit for a Microphone is equal to the Rating of the Microphone plus the Rating of any Audio Enhancement installed in that microphone, and cyberears automatically include a microphone with a rating equal to the implant's rating.
Facial Recognition
- Collector: Camera w/ Extended Sneaking + Charisma [Social] (Camera Limit, 1 minute) Test Test
- Duplicator: Synthskin Mask w/ Extended Matrix + Logic [Mental] (Mask Rating or Exemplar Rating, 10 Minutes) Test Test
Synthskin masks can be programmed from a high-fidelity video recording of the target's face. Getting sufficient angles to program the mask properly can take some time, so it's an Extended Test. As with the Duplication Test, the character can abandon the attempt before reaching the limit of their recording equipment and hope what they have is enough.
High-quality facial recognition scanners (Rating ≥ 5) include a thermal component, based on the pattern of blood vessels under the skin. A camera equipped with thermographic vision can collect this data. If it's needed but not present, increase the Maglock's effective rating by 1.
Note that the limit for a Camera is equal to the Rating of the Camera, plus the Rating of any Video Enhancement installed in the camera, and cybereyes automatically include a microphone with a rating equal to the implant's rating.
Print Scanner
The first thought on biometrics might be: "Why don't we just hack the security database to get the profile and build our fake from that?" The problem there is hashing and salting — security databases don't include the original print, only data that can be used to validate a scan. Besides, cracking a lock is often an easier task than cracking the host that controls the lock.
Medical databases are a different story. Because they often need to be compared over time to diagnose medical issues, they tend to include the full data rather than only what's cryptographically useful. The higher the social stratum (and the higher the medical contract) a person has, the more likely they are to have more complete data in their medical profile. Of course, those hosts tend to be more secure, too.
- Collector: Forensics Kit w/ Sleight Of Hand + LOG [Mental] Test Test
- Duplicator: Cellular Glove Molder w/ Extended Medicine + Logic [Mental] (Molder Rating or Exemplar Rating, 10 Minutes) Test Test
Fingerprints are among the easiest biometric data to gather because they can be lifted from anything the target has touched with bare skin.
Full palm scanners (Rating ≥ 5) may include a thermal component, based on the pattern of blood vessels under the skin. A camera equipped with thermographic vision can collect this data as with facial scanners, using the same rules though the interval is only 15 seconds. If it's needed but not present, increase the Maglock's effective rating by 1.
Retina Scanner
- Collector: Retinal Scanner w/ Medicine + Logic [Rating] Test Test[2]
- Duplicator: Retinal Duplication Cyberware w/ Extended Matrix + Logic [Mental (Impalant Rating or Exemplar Rating, 10 Minutes) Test Test]}}[2]
A retinal scan is probably the hardest biometric to acquire and the hardest to fake. It can only be recorded with a purpose-built retinal scanner, and it requires the subject to remain still while the image (both a visual capture of the inside of the eye and a thermal scan of the blood vessels behind it) is captured. Actually making use of the scan requires a relatively uncommon cybereye modification, Retinal Duplication[2][3].
DNA Scanner
- Collector: Forensics Kit w/ Extended Medicine + Logic [Mental] (Sample Rating, 10 minutes) Test Test
- Duplicator: Chemistry Kit w/ Extended Chemistry + Logic [Mental] Test (Exemplar Rating, 10 Minutes) Test Test
DNA scanners generally work by breath (sampling tissue and saliva aspirated into a tube) or a small blood sample. Creating a serum to fake out one of these sensors involves getting a sample from the target. Blood is best, but skin, hair, or other bodily fluids can do the job. The Rating of the Sample is based on it's age and size — a single drop of fresh blood is Rating 6, while a week old hair follicle is only Rating 1.
Anti-Tamper Systems
The extra paranoid may equip their maglocks with Anti-Tamper Systems. Identifying the presence of such a system requires a Locksmith + Intuition [Mental] (Anti-Tamper Rating) Test Test. Failing to identify the system means that an alarm is triggered when the character attempts to crack the case as described above. If identified, add the Anti-Tamper Rating to the required threshold for the Extended Test.
The Anti-Tamper Rating also determines how "paranoid" the system is when it fails to authenticate an access attempt. If present and authentication fails as described above, make a Test using the Anti-Tamper Rating × 2 against a Threshold equal to the false authentication source's Rating. If the Anti-Tamper System is successful, it identifies the fake as an attempted breach and sounds the alarm. If it fails, it assumes user error and asks for a repeat.
References
- ↑ 1.0 1.1 Shadowrun Fifth Edition Core Rulebook (p. 448)
- ↑ 2.0 2.1 2.2 Chrome Flesh (p. 151) has the Retinal Adjuster nanoware, which can function as collector and duplicator, but that technology does not exist in 2059.
- ↑ Shadowrun Fifth Edition Core Rulebook (p. 453)