by Unknown
concealed by the inner cam slide. The outer slide has a tab that matches the radial groove in the cover plate, which restricts the actuation of the cam slide.
To expose the drive cam and contact points, you must return to 0 and withdraw the inner cam slide with the pointed knob in the center of the dial. Now if you turn the dial COUNTERCLOCKWISE you should feel a contact point,
98
Advanced Criminal Investigations and Intelligence Operations
but the radial groove in the cover plate restricts dial rotation with the tab on the outer slide. This does not permit the lever nose to touch the contact points (Anonymous, 1978, pp. 35–36).
Combination Dial Lock
Combination locks are used on everything from padlocks and luggage
to safes and vaults. They may use a simple series (three to five) of wheels (Figures 6.2 through 6.4) or a dial (Figures 6.5 through 6.9). Padlocks and luggage may use a simple set of wheels that can be defeated with a little effort and patience. If you have the time and patience, a rotary combination lock with three dials (each side) can be opened simply by dialing in all 1000 possible combinations (000–999). This takes about a half hour of perseverance.
Figure 6.2 Sesame combination locks.
180°
90°
Figure 6.3 Combination locks and change pin.
4
3
1
7
Figure 6.4 Many items of luggage use rotary combination locks.
Safes, Combinations, and Automobile Locks
99
More combination locks
use a wheel pack
Drive pin
Fence
Wheel notch
Spindle
DIAL
Wheel fly
Drive cam
Figure 6.5 Most combination locks use a wheel pack like this.
Internal spindle
External spindle
yellow
silver
Backset
(usually 2-3/8 inches or 2-3/4 inches)
2-3/8
inches
Backset size
2-3/4 inches
Figure 6.6 Spindle safe.
Figure 6.7 Digital and dial lock safes.
100
Advanced Criminal Investigations and Intelligence Operations
Figure 6.8 Dial lock file cabinet, safe, and vault.
Changing index
Opening index
Changing index
Figure 6.9 Combination lock dial.
Safes and Vaults
Safe and vault panels earn UL (Underwriters Laboratories) approval by withstanding severe torch and tool attacks and meeting insurance standards.
They are rated as follows:
• Class M—15 minutes
• Class I—30 minutes
• Class II—60 minutes
• Class III—120 minutes
Safes, Combinations, and Automobile Locks
101
A cutaway view of a dial combination lock (Figure 6.10) shows the key parts and functions of such a lock. When the combination has been dialed in and the dial is returned to the drop in position, the lever nose drops into the cam gate. With the three wheels lined up, the fence drops into the cam gate and the lever nose engages the cam drive. With the fence dropped in and the drive cam engaged, a clockwise turn of the dial will retract the lock bolt, unlocking the lock (note: If the cover is removed from your practice lock, you may need to manual y disengage the relock lever before retracting the bolt) (Figure 6.11).
To manipulate the lock (with the cover plate still removed), first, move
the dial and wheels so that all of the gates are away from the fence. The lever nose contacts the drive cam and holds the fence from contacting the wheels ( wheel pack and wheel combination gate). Second, rotate the dial and cam Wheel 3
Fence
Level nose Cam gate
Lever
combination gate
Lock
bolt
Wheel
pack
Lever
screw
Drive
cam
Relocker
Figure 6.10 Dial combination lock.
Lever
Fence
and
lever
nose
Cam gate
Figure 6.11 Fence lever and gate.
102
Advanced Criminal Investigations and Intelligence Operations
drive (without moving the wheels) until it reaches the drop-in position. The lever is now lower and the fence makes contact with the wheels.
Any variation in the wheel diameters will vary the degree to which the
lever nose protrudes into the opening of the drive cam. The variance in lever travel can be read on the dial by turning it to the contact point and taking a reading (Anonymous, 1978, p. 15).
The lever pivots on the shoulder screw or lever screw. To pivot freely there must be some clearance in the diameter between the hole in the lever and the screw, also giving the lever a little sideways wobble. To demonstrate this, set up the practice lock again, with the gates away from the fence, the lever nose in the drop-in position of the drive cam, and the fence resting on the wheels. Take a reading on both contact points and record the readings. Rotate the third wheel only until its gate aligns with the fence. You should see the lever wobble enough to allow the nose to drop a little more into the cam opening. Take another set of readings on the contact points
and compare them with the first set. One will be lower and one higher.
The contact point is usually the best to use for manipulation (Anonymous, 1978, pp. 15–16).
Changing the Combination of a Dial Combination Lock
Caution: Never insert the Changing Key in the lock when the cover is removed. Make certain that the wing of the Changing Key is entirely in the lock before turning the key (Figure 6.12).
Figure 6.12 Change keys.
Safes, Combinations, and Automobile Locks
103
First, refer to the opening index and the changing index on the dial (Figure 6.9). Extreme precision must be used in aligning the combination
numbers with the index. (Note: If, after turning the dial the correct number of revolutions, any of the numbers is turned beyond the opening index, the entire series of combination numbers must be redialed. Do NOT turn
back the dial to try to regain the proper alignment with the numbers.)
Each time a correct number is aligned with the opening index, one revolution is counted.
To unlock the factory settings (often set on 50 at the factory), turn the dial to the left four full revolutions and stop when the factory setting (e.g., 50) is aligned with the opening index, then turn slowly to the right until it stops.
To unlock a three-number combination (e.g., 36–24–34)
• Turn the dial left until 36 is aligned with the opening index after the fourth revolution.
• Turn the dial right until 24 is aligned with the opening index after the third revolution.
• Turn the dial left until 34 is aligned with the opening index after the second revolution.
• Turn the dial slowly to the right until it stops.
To lock again, turn the dial to the left at least four full revolutions.
To change the combination you, obviously, start by choosing the new numbers in the combination. Do NOT select numbers between 0 and 20 for
the last numbers. A more secure combination does NOT use numbers ending
in 0 or 5 and does NOT use numbers in ascending or descending sequence
(e.g., 25, 50, 75 or 50, 40, 30).
• Using the changing index, dial in the current combination numbers (as explained earlier in the unlocking sequence).
• Locks leave the factory with all three numbers set, usually all
three at 50.
• When setting the combination for the first time,
turn the dial left
and stop at the preset number (e.g., 50) after the fourth revolution.
• Hold the dial with the last number at the changing index, and insert the changing key in the hole in the back of the lock until the wing is entirely inside the lock and it comes to a stop.
• Turn the key a quarter turn to the left and with the changing key in this position
• Turn the dial to the left
• Stop at the changing index upon the fourth revolution.
104
Advanced Criminal Investigations and Intelligence Operations
• Turn the dial to the right and stop when the second number is aligned
with the changing index after the third revolution.
• Turn the dial to the left and stop when the third number is aligned
with the changing index after the second revolution.
• Holding the dial in this position, turn the changing key back to the right and remove it.
The new combination is now set. Before closing, try the new combination several times using the opening index to ensure it works correctly before closing the door (and locking yourself out).
If an error is made, contact a certified locksmith or, if one is not available or practical, try the following:
• Remove the two screws on the back of the lock and remove the
cover.
• Using a tool or straightened paperclip, insert the tool into the square keyways or the square slots in the wheels.
• Rotate each wheel until all the slots are in alignment and the square
keyways are over the small hole in the bottom of the case.
• Replace the cover and screws and insert the changing key.
• Repeat the last three steps in the steps described earlier for changing the combination (Figures 6.13 and 6.14).
Front change
luggage combination lock
Figure 6.13 Front change luggage combination lock.
Safes, Combinations, and Automobile Locks
105
Button (normal position)
(Opening position)
(Change position)
OPERATING INSTRUCTIONS
FRONT CHANGE COMBINATION LOCK
The locks are set at the factory to open at O-O-O. They will, however, close on any setting.
TO SET YOUR OWN COMBINATION
(1) Choose 3 digits which you can recall easily—address, phone, birthday, etc.
(2) Press the button in a direction toward the dial with your thumb and holding with your other hand (use point of ball pen) rotate the dials to the desired setting. Then, release the button.
(3) Your lock is now set to open on the three digits engaged at the time you release the button.
CAUTION
(4) Your locks are equipped with SCRAMBLE FEATURE for ADDED SECURITY. They are designed to CLOSE on ANY SETTING.
(5) Rotating the dials (scrambling) after having opened the lock will prevent others from recognizing your set combination while your case stands open.
(6) You need not recall your combination to close the lock.
(7) Accordingly, NEVER rotate the dials with the button held open UNLESS you make careful note of the dial setting upon release of the button.
(8) The manufacturer is not responsible for damage resulting from misuse, abusive handling, or failure to follow instructions.
Figure 6.14 Directions for changing front change luggage combination lock.
Locking System for Automobiles
Locking mechanisms on motor vehicles did not change or evolve much from
their inception through the 1950s. After that, door locks were either (a) push button on the window sill, (b) a lever on the door panel, or (c) a reverse movement of the inside door handle. Windows were either (a) vent and frame windows, (b) one-piece front windows, (c) door post windows (front and rear), or (d) front and rear windows separated by a weather strip. Doors could often be opened with a mere coat hanger. Trucks had locks that were keyed with the door lock keys and were often punched.
Today, door locks are automatic, windows are usual y power operated, and even the trunks have remote control access. Many door locks have combination and keyless entry devices. Some have antitheft mechanisms designed to prevent keyless entry. Since the 1970s steering columns have added security measures to prevent unauthorized operation and steering wheel locks
and GPS trackers have added to automobile security systems (not to mention the constantly annoying car alarms).
A variety of tools are available for entry into automobiles and other
vehicles. Slim jims and other devices are used to open door locks through
106
Advanced Criminal Investigations and Intelligence Operations
windows. Others are used to open the locks themselves. Still others are used on the trunks and ignitions or to disable alarms and other access control devices.
Key Codes
Key code information identifies the keys that go with a particular motor
vehicle. Sometimes you can easily find the key codes on the first or second page of the owner’s manual or warranty book. Key codes may be obtained from the title clerk of the dealership where the vehicle was purchased.
By providing the title clerk with the name of the purchaser, the date of purchase, and the serial number ( vehicle identification number or VIN), the clerk should be able to obtain the key codes from the purchase contract.
Used cars are little harder. It may be necessary to locate the original dealer through the Bureau of Motor Vehicles or DMV (Russell, 1979, p. 62).
Ignition Locking Systems
In popular media, it is common to hot-wire vehicles by twisting two wires together causing ignition. Most vehicles today have antitheft devices making this less practical. Most car thieves simply pop the column next to where the key is inserted (Figure 6.15) and use a screwdriver to activate the ignition like a switch (Figure 6.16). Hot-wiring generally involves connecting the two wires, which complete the circuit when the key is in the on position (turning on the fuel pump and other necessary components), then touching
the wire that connects to the starter (Figure 6.17). The specific method of hot-wiring a vehicle is dependent on the particular vehicle’s electrical ignition system. You may want to experiment with different types of vehicles
(perhaps in a salvage yard or tow lot). Reviewing manufacturer’s manuals
Figure 6.15 Typical ignition and door locks and keys.
Safes, Combinations, and Automobile Locks
107
Figure 6.16 Auto door locks, keys, and a remote.
Figure 6.17 Ignition system.
and replacement parts or catalogs at auto parts stores may be helpful to
update your knowledge as things change (such as keyless entry).
Doors and Trunks
Doors may be opened without manipulating the locks. There are vari-
ous opening devices, slim jims, wedges, and other tools for entry (Figures 6.18
and 6.19). Caution: Use of slim jim type devices may activate air bags in modern vehicles. Bladder and wedge kits may be the preferred method.
Different manufacturers of automobiles use various types of locking systems.
Volkswagen, for example, has commonly used wafer tumbler locks, while Ford and Chrysler have commonly used pin tumbler locks. General Motors (GM) and American Motors (AM) have traditionally used side-bar locks.
Figure 6.18 Auto locksmith tool kits (including slim jims).
108
Advanced Criminal Investigations and Intelligence Operations
Figure 6.19 Auto window bladder, wedges, and shutter tool set.
Pin Tumbler Locks for Autos
Pin tumbler lock systems have been used by Ford and Chrysler ignition and trunk locks for decades. There are some exceptions to this, depending on
the year and model. The pin tumbler has a plug or cam and an outer cylinder or shel . A series of
two-piece tumblers (as many as five) extend into the plug and have a bottom pin and a driver pin (top pin). The springs rest on the top of the driver pin and are held in place by a spring retainer clip (Figure 6.20).
Side-Bar Locks for Autos
Side-bar lock systems have been used by GM and the now-defunct AM.
These too have a plug and a shel . The side-bar lock is a modified wafer system of wafer tumblers or side-bar discs (five in the AM and six in GM products).
Springs
Pins
Shear
line
Keyway
Plug
or
core
Figure 6.20 Pin tumbler system.
Safes, Combinations, and Automobile Locks
109
These side-bar discs are mounted in the plug of the locks and are also spring-loaded and have a spring retainer. The sidebar is also mounted in the plug.
When the key is inserted into the keyway, the side-bar discs or wafers are raised or lowered, allowing the sidebars to hold the discs in a straight line so the plug can turn (Figures 6.21 and 6.22). (Please note that with time, technology and designs change. Newer models of autos may not be equipped with these types of locks.)
Sidebar
Ending
Keyway and core
Pins and springs
Figure 6.21 Side-bar locking system.
Springs
Top pins
Bottom pins
Sidebar
Sidebar springs
Master pin
Finger pin springs
Finger pins
Figure 6.22 Sidebar locks.
110
Advanced Criminal Investigations and Intelligence Operations
Wafer Tumbler Locks for Autos
The wafer tumbler system has rarely been used for automobiles, except
Volkswagens. This lock system, however, has been discussed elsewhere in
this work.
Hacking Car Keyless Entry Systems
Researchers discovered how to break into cars that use radio frequency technology to open the doors and start it. By stringing a piece of cable between the car and the car’s key fob, they were able to open a car and start it, because the cable acts as an antenna and retransmits the signal from the key.
A more sophisticated method involved setting up a radio receiver near the key to pick up the signal the fob transmits or emits. The computer, along with an antenna and of course special software, was able to extract a code that was transmitted by a radio frequency identification (RFID) chip located in the key.