Jim Fenton

1

Opening your garage doorwith public-key signatures

Video

2

• Video is at: https://www.youtube.com/watch?v

=1dw12DsCMGU

What just happened?

• Authentication, not just a button press• Garage requests authentication and user’s

name from browser• Two signatures are returned:

- Browser signs indicating user’s consent- User’s “repository” signs indicating

authorization of browser• Website verifies signatures against stored

keys• Website checks authorization of user• Opens door and logs (in syslog) who did it

3

2

6

5

1

3

4

Browser

CloudMobile EncryptedRepository

Message Flow

What’s the point?

• Fun project with a Raspberry Pi!- Very straightforward project written in Python- Simple to interface to through GPIO port

• Show that OneID works on very small devices• Demonstrate easy-to-use authentication on

mobile• Play with authorization methods

- How to authorize users- Time-based, one-time access, etc.

5