Possibility to apply a position information as part of a user’s authentication

1. Possibility to apply a position information as part of a user’s authentication David Jaroš, Radek Kuchta, Radimír Vrba Security and Protection of Information 2009

2. Contents • Introduction • Position determination • GPS (Global Positioning System) • Bluetooth • Authentication process • Authentication device • Conclusions

3. Introduction • authenticationnecessity • downloademails, • fill out forms for the government, • access to company private information • position as factor of authentication (FOA) • GSM network, • Wi-Fi AP, • GPS or theother navigation system • GPS as one of usefulpossibilities of FOA

4. Position determination Three basic conditions • space description • anchor points with known position • distance between subject and anchor point

5. GPS • protocol - NMEA 0183 • interfaces– UART, IIC, USB, SPI • update position up to 4 Hz • developed in the 1970s by U.S. Department of Defense • initially designed for 24 satellites (about 32 satellites on the present) • 20 200 km AGL • 3.8 kms-1 • extremely accurate clock (atomic clock in satellites and pseudoatomic clock in receiver) • visibility at least 4 satellites (3-dimensional position) • transmition time stamp in specially coded signal

6. Bluetooth • wireless low-power technology for dataexchange over short distances • The other suitable wireless technologies: • Wi-Fi • Zigbee • IQRF

7. Authentication process Communication sequence used for user authentication with position information

8. Authentication device • authentication device is connected to user’s terminal via USB • fingerprint reader • alpha numeric display • secure data repository • GPS receiver

9. Conclusion • position as new factor of authentication • basic principle of position determination • exploitation of GPS and Bluetooth • authentication process • authentication device