Using Various IoT Device Services Securely with Just the Biometric Authentication Function on Smartphones

It is estimated that by the year 2020, 30.4 billion IoT devices will be connected to the Internet, drastically changing our lives and industries (estimation by IHS Technology).

More and more devices such as cars, TVs, refrigerators and washing machines are becoming connected through the Internet. Devices shared between multiple people can offer customized services for each user, while gathering unique information and usage history. This development is expected to lead to an expansion of personalized services that connect individuals to their devices.

In order to make use of such services, personal authentication is required. One method of achieving this is to use IDs and passwords, but as the number of connected devices increases, users must set and manage more IDs and passwords, raising the concern of decreased usability.

Biometric authentication using iris and fingerprint identification is a highly useful method that doesn't require ID and password identification, but to make its widespread use achievable, IoT devices must each be equipped with biometric authentication hardware. This requires implementation of highly secure biometric authentication, which would come at a high cost.

For these reasons, there is a demand for a new method of authentication to replace IDs/passwords and biometric authentication.

Convenience at Your Fingertips - Useful in Various Situations

Fujitsu Laboratories has developed a technology that allows safe and easy use of cloud services through IoT devices, using biometric authentication and near-field communication functions on smartphones.
This works by using online authentication technology (FIDO technology), which identifies an individual with their smartphone without divulging personal authentication information on the Internet.

This technology will open new avenues of application in our daily lives and industries, making them more convenient.

Usage Situations

1. Users can use smartphones to unlock and start company cars and shared cars that are used by multiple people. Furthermore, personal preferences such as air-conditioning and music inside cars can be set in advance using this technology.

2. Smartphones can be used to unlock not only homes, but also hotels and other accommodations.

3. Smartphones can be used to unlock home delivery boxes installed in condominiums and public facilities to pick up delivered packages.

4. When entering security rooms in office buildings, safety and security is ensured as every individual is authenticated before entering.

Bringing a New Level of Convenience to Shared Cars and Hotels - Safe and Convenient Personal Authentication Using Smartphones

Usage Flow

1. As the user holds their smartphone close to the IoT device, each device transmits information to the other, creating a secure connection channel.

2. The user then uses the smartphone's biometric authentication function to send the authentication results and verification of the user's presence to the cloud service.

3. The cloud service performs user authentication of the IoT device and provides service to the user.

By utilizing this technology, the need to input user IDs and passwords is eliminated - personal smartphones can perform biometric authentication, allowing users to use various cloud services through IoT devices.

This, of course, also means that service providers do not need to manage personal biometric authentication information for each device and service, making it easier to provide services.

Moving forward, Fujitsu Laboratories aims to continue testing the newly developed technologies in various scenarios, while further developing the Fujitsu IoT Solution Biometric Sensor Authentication Solution "Online Biometric Authentication Service" and eventually paving the way for its widespread use.