In most of these crimes, the criminals were taking advantage of a fundamental flaw in the conventional access control systems: the systems do not grant access by who we are, but by what we have, such as ID cards, keys, passwords, PIN numbers, or mother's maiden name.