Two-Factor Authentication for Keyless Entry System via Finger-Induced Vibrations
Hongbo Jiang, Panyi Ji, Taiyuan Zhang, Hangcheng Cao, Daibo Liu
Abstract
Keyless entry systems (KES) have become popular due to their high user-friendliness, while fingerprint and digital password authentication are two of the most widely used unlocking ways. However, current KES are vulnerable to security threats, such as fingerprint films that deceive fingerprint sensors and stolen passcodes. To address these issues, this paper presents <inline-formula><tex-math notation="LaTeX">${\sf Fingerbeat}$</tex-math></inline-formula>, a two-factor authentication system to defend the security risks of the current widely deployed KES devices. <inline-formula><tex-math notation="LaTeX">${\sf Fingerbeat}$</tex-math></inline-formula> combines original credentials, such as fingerprints and passcodes, with unique and persistent finger-induced vibrations to create a two-factor secure authentication model, while ensuring user-friendliness. <inline-formula><tex-math notation="LaTeX">${\sf Fingerbeat}$</tex-math></inline-formula> leverages the fact that each person's finger structure is distinct and can be represented in distinct vibration patterns. During authentication, FIV is triggered and embodied in the mechanical vibration of the force-bearing body (i.e., KES panel), which can be captured by a low-cost accelerometer. We develop a proof-of-concept prototype of <inline-formula><tex-math notation="LaTeX">${\sf Fingerbeat}$</tex-math></inline-formula>, extracting FIV features from mixed vibration recordings and eliminating the impacts of variable behaviors and external disturbance. Finally, we conduct extensive experiments to demonstrate its security and effectiveness.