in this talk we present our paper
on authentication drivers using
automotive batteries
this is a collaborative work with dr yan
xiao shu
dr yang mung li dr don yao chen and dr
kam shin from university of michigan
let us start our story with keys or key
faults
which are the dominating solutions for
vehicle immobilization
in general this keys or key fobs work in
two steps
recourse authenticator first
communicates wirelessly with the key for
several authentication
and if successful it will notify the
vehicle's power control module to
enable the cranking of engine this way
we can see the key based immobilizers
rely heavily on cyber communications
which however incur significant
vulnerabilities that could be exploited
by seats to steal the vehicle
he released 11 separate instances
occurred with
keys or key fobs in 2019 involving both
white and blackhead attackers these
several vulnerabilities
together with this does cause the real
life incidents
drive us to design a physical
immobilizer without using the vulnerable
wireless communication nor the
in-vehicle network
thus providing vehicles a physical
isolation from common cyber attack
vectors
our design is driven by two key
observations on automotive batteries
first battery response to a given load
with
unique voltage which allows the drivers
to define the authentication code in the
form of customized e-system operations
this way we can use the automotive
battery as a sensor to validate the
driver identity
via behavior-based authentication
second the vehicle engine is not
crankable without sufficient power
allowing the use of battery as
controller to this or enable vehicle
driving
by reducing or restoring the battery's
maximum
output power
following these observations we designed
brs
a battery based second factor driver
authentication system
boss is an add-on module installed
between vehicles and their batteries
which uses the battery to validate
driver's identity
and then this or enable the cranking of
vehicles engine
based on the validation results
bios needs to address three technical
challenges
that is when to activate the
authentication service to reduce the
power consumption
how to extract and match the voltage
fingerprint
to ensure authentication accuracy and
how to control battery power to achieve
reliable vehicle immobilization
we have prototyped and evaluated the brs
on six vehicles
demonstrating its promising performance
as a novel driver authentication
solution
our user study with 174 co-owners
also corroborate the value of bios
instead of going to the technical
details of bios
let me show you a demo video it is
installation and operation
only 2008 honda feed i will sell it
myself during this demo video
to avoid interference
okay
you
please send email to lyandanghi at uc
denver.edu
for any questions thank you