Secure IoT Entrance Using Mobile Application

Abstract

The impact of cyber security attacks increased globally, implementing proper security standards to protect data in the cyber environment has been prioritized, while assets are also at risk of being exploited through physical security breaches. Considering the potential risk of Radio Frequency Identification (RFID) cards being lost or stolen, third parties can effortlessly gain the privileges of an authorized person. In this paper, we propose a design for a secure access control system that operates on an Android phone with multi-factor authentication to enable secure access control systems. For this purpose, the authorized users are registered in a database that can be accessed by the access control system when the user authenticates his\her credentials with a login/password as well as biometric data from his\her smartphone. This system works when the user is 10 meters away from the access control system, after that the user will be asked to submit his\her biometric credentials. The database then compares the user's keys and grants access if authentication is successful. This design is intended to reduce the number of cases in which unauthorized access to a restricted area. The observed results clearly meet the required security of physical access control systems.