Bank Locker Security System Based on Two-Factor Authentication Project Report by S.sutharshan

(1)

BIRMINGHAM CITY UNIVERSITY

Faculty of Technology, Engineering and the

Environment

BSc [Hons] Computer Networks and Security

Individual Project Final Report

CMP6102

Bank Locker Security System Based on Two-factor

Authentication

Student Name

: Sivasankar Sutharshan

Student Number

: T31401079/ 14144065

Supervisor

:

Professor. N G J Dias

(2)

DECLARATION OF ORIGINALITY

This is to certify that this project, the entire design and creation of Bank locker system based on two-factor authentication was carried out and submitted as true work of Sivasankar Sutharshan of registration number 14144065 under the supervision of Prof. N G J Dias and Dr. Hesiri Dhammika Weerasinghe from the Faculty of Technology, Engineering and the Environment, Birmingham City University.

Signed: Sivasankar Sutharshan 14.09.2015

(3)

ABSTRACT

The main objective of this report is to convey and implement a bank locker security system based on two-factor authentication that improves the safety and security of bank lockers. In this system only the authentic user recover the possessions from the lockers and the two independent authentication used, which are fingerprint biometric and one-time password send over GSM network. The fingerprint biometric can deliver a high level of security by discounting the need of remember PINs, multiple password and no necessity of carrying keys and identify proof. The one-time password is required to access the locker even if fingerprint biometric compromised.

The rapid application development methodology project life circle is followed in order to develop the system efficiently. The program was developed in Arduino Integrated Development Environment.

This report presents the details on architecture, integration and different design aspects of Bank locker security system. Wide operating rage, low cost of equipment, high security and reliability are some of the major advantages of this project. It is envisioned that the bank locker security system based on two-factor authentication shall eventually replace the manual traditional methods followed in bank locker systems and hence provide feasible way for a better locker service.

(4)

ACKNOWLEDGEMENT

I would like to thank my Professor. N G J Dias and Dr. Hesiri Dhammika Weerasinghe for offering their precious time, continuous help and support regarding this project for its success. My heartfelt of gratitude goes to you for helping me at every step with necessary guidance.

Secondly, I wish to thank Auston library for providing books efficiently which helped me extremely, to gain knowledge on the subject matters and as guidance for the assignment. Thirdly, I would like to thank my friends and batch mates for everything that they have done to help me with this project, and also my parents for providing me with all necessary equipment and support.

Finally, I thank Birmingham City University to giving me such project to gain my knowledge most practical in Individual Project CMP6102.

(5)

LIST OF TABLES

Table 1 Comparative study of existing system ... 11

Table 2 Pin definition of I2C LCD ... 31

Table 3 Pin definition of 4x4 keypad ... 32

Table 4 Pin definition of buzzer ... 33

Table 5 Pin definition of RTC ... 33

Table 6 Pin definition of relay and solenoid ... 34

Table 7 Pin definition fingerprint scanner ... 35

Table 8 Pin definition of Fona GSM module ... 36

Table 9 Pin definition of PIR sensor ... 37

Table 10 Pin definition of vibration sensor ... 38

Table 11 Pin definition of Metal on/off switch... 39

Table 12 Enrollment testing ... 53

(10)

Table 14 Two-factor authentication testing ... 56

Table 15 Sensor testing ... 57

Table 16 Processing time of each function ... 81

Table 17 Specifications of Arduino mega 2560 ... 93

Table 18 Flow chart dictionary ... 99

Table 19 Bank locker system complete coding ... 100

LIST OF FIGURES

Fig. 1 Bank locker system product description ... 5

Fig. 2 Block diagram of locker system based on RFID and GSM ... 8

Fig. 3 Block diagram of locker system based on fingerprint technologhy ... 9

Fig. 4 Block diagram of lokcer system based on RFID, fingerprint,password and GSM 10 Fig. 5 Rad development methodologhy ... 15

Fig. 6 Block diagram of proposed bank locker system ... 18

Fig. 7 Flow chart of complete bank locker system ... 19

Fig. 8 Flow chart of enrollment phase... 20

Fig. 9 Arduino Mega 2560 ... 22

Fig. 10 Arduino Meg pin definition. Alberto [undated] ... 23

Fig. 11 I2c lcd module. Malpartida [undated] ... 23

Fig. 12 Keypad. Anon. [undated] ... 24

Fig. 13 Buzzer. Anon. [undated] ... 24

Fig. 14 RTC module. Anon. [undated] ... 25

Fig. 15 Relay ... 26

Fig. 16 Fingerprint scanner. Anon. (2013) ... 26

Fig. 17 Fona GSM module ... 27

Fig. 18 Polymer batter ... 27

Fig. 19 PIR sensor ... 28

Fig. 20 Vibration sensor ... 28

Fig. 21 Solenoid ... 28

Fig. 22 Metal on/off switch ... 29

Fig. 23 Arduino IDE ... 30

Fig. 24 Circuit diagram of I2C LCD ... 31

Fig. 25 Circuit diagram of 4x4 keypad ... 32

Fig. 26 Circuit diagram of buzzer ... 33

(11)

Fig. 28 Circuit diagram of relay and solenoid... 35

Fig. 29 Circuit diagram of fingerprint scanner ... 36

Fig. 30 Circuit diagram of fignerprint scanner ... 37

Fig. 31 Circuit diagram of PIR sensor ... 38

Fig. 32 Circuit diagram of Vibration sensor ... 39

Fig. 33 Circuit diagram of Metal on/off switch ... 39

Fig. 34 Circuit diagram of complete bank locker system ... 40

Fig. 35 Project prototype ... 41

Fig. 36 Keypad coding ... 42

Fig. 37 Real time module coding ... 43

Fig. 38 Random number generator coding ... 44

Fig. 39 Fingerprint enrollment coding ... 45

Fig. 40 Fingerprint enrollment coding continuation ... 46

Fig. 41 Delete and ID coding ... 46

Fig. 42 Fingerprint verification coding ... 47

Fig. 43 Fona GSM coding ... 48

Fig. 44 Vibration sensor coding ... 49

Fig. 45 PIR sensor coding ... 50

Fig. 46 Relay coding ... 51

Fig. 47 LCD coding ... 52

Fig. 48 Testing data of case 1 ... 58

Fig. 52 Actual output of case 1 ... 59

Fig. 63 Locker status ... 63

(12)

Fig. 68 Locker status ... 65

Fig. 76 Keypad output ... 69

Fig. 77 Keypad serial output ... 69

Fig. 78 LCD output ... 70

Fig. 79 OTP serial output ... 70

Fig. 80 RTC output ... 71

Fig. 81 RTC serial ouput ... 71

Fig. 82 Solenoid output ... 72

Fig. 83 Solenoid serial output ... 72

Fig. 84 Fingerprint scanner output ... 73

Fig. 85 Serial output of fingerprint enrollment ... 73

Fig. 86 Serial output of fingerprint verification ... 74

Fig. 87 Output of Fona GSM module ... 74

Fig. 88 Fona testing output ... 75

Fig. 89 Vibration sensor output ... 75

Fig. 90 Serial output of Vibration sensor ... 76

Fig. 91 PIR sensor output ... 76

Fig. 92 Serial output of PIR sensor ... 77

Fig. 93 Status of existing bank locker system ... 78

Fig. 94 Failures of existing bank locker system ... 78

Fig. 95 Solution to overcome current issues ... 79

Fig. 96 Flexibility of bank locker system ... 79

Fig. 97 Performance of the bank locker system ... 80

Fig. 98 Overall test results ... 80

Fig. 99 Success and error rate of the locker system ... 81

Fig. 100 features. davide et al (2009, p.98) ... 90

(13)

Fig. 102 Landmarks (Davide et al (2009, p.100) ... 91

Fig. 103 Image-processing steps. Wen and Srik (2011, p.3) ... 92

Fig. 104 system architecture. Wen and Srik (2011, p.1) ... 92

Fig. 105 Schematic diagram of keypad ... 94

Fig. 106 Schematic diagram of buzzer ... 95

Fig. 107 Schematic diagram of RTC module ... 96

Fig. 108 Schematic diagram of relay ... 96

Fig. 109 Schematic diagram of Fona GSM ... 97

Fig. 110 Schematic diagram of PIR ... 98

Fig. 111 Schematic diagram of vibration sensor ... 98

(14)

GLOSSARY

IDE Integrated Development Environment RTC Real Time Clock Module

I2C Interface to Communicate LCD Liquid-crystal display VDC Volts Direct Current GND Ground

SDA Serial Data Line SCL Serial Clock Line

ADC Analog to Digital Convertor DC Direct Current

LED Light Emitting Diode PWM Pulse Width Modulation

Rx Receiver

Tx Transmitter V Voltage

Vcc Positive Supply Voltage

EEPROM Electrically Erasable Programmable Read-Only Memory OTP One-time password

GSM Global System for Mobile communication SMS Short Message Service

(15)

1.0 INTRODUCTION

In today’s world, people are more concerned about their safety of valuable things and accessories which are hardly earned like jewelry, cash, certificates and etc. The bank lockers are the safest place to protect them, but recent years, bank robberies are increasing day by day due to traditional methods and security laps. The present bank locker system security is not very efficient and it can be easily breakable by a smart larceners as they can get the key or PIN code. The solution to overcome this type of frauds can be met with the proposed bank locker security system based on two-factor authentication.

The two factor authentication system is used in Bank ATM transactions and web based login systems such as Google provide the two factor authentication for their online users, and also Facebook, MSN and Yahoo that is evolving technology. The idea of two factor authentication system for bank locker is enabled, to ensure the security and portability of the information or possessions. One-time password and Fingerprint biometric based two factor authentication system will be a solution for above discussed requirement that can be able to eliminate the weaknesses of existing system. In term of security, significant improvement can be provided by this system.

This system will reduce the fraud and misuse by stealing keys, passwords, PINs and ID proofs. The PIR and Vibration sensor used in this system to alert in case of theft. If any unauthorized access is detected by PIR sensor or vibration sensor, the system can raise alarm to alert bank staff. In this project, the locker provided with simple and low power consumption Solenoid that controls the lock to the locker instead of a key.

The proposed system would overcome the drawbacks of the existing systems and provide high security to bank lockers with the use of two independent authentication methods which are fingerprint biometric and one-time password. When a customer wants to open a bank locker, he/she supposed to get their fingerprint scan done. If the fingerprint matches, the system sends the one-time password to the authenticated customer through the registered phone number and required it to type in the locker system. If the entered password by the customer matched, the bank locker could be accessed, otherwise the system sends warning signals and remain in locked status.

The establishment of this bank locker system would reduce time wastage, better use of replacement with double security, reduction in cost of labor, satisfaction for customers, reduction of frauds, easy accessibility and overall better service for customers of the bank.

(16)

1.1 Problem definition

Bank lockers are plays important role in today’s life and it is considered the safest place to store jewelry, documents, stock certificates and etc. The traditional methods used for most of banks rely on manual lock and PIN number/ password which are not fully secure. In manual lock systems, whenever a customer uses the locker, he/she should assist by the bank staff. This may lead to waste of time for both the customer and the staff. The major drawback of such manual locker systems are lack of security because the key can be duplicated. This would lead to theft of the entire valuable possessions in the bank lockers.

The password, Personal Identification Number (PIN) or smart cards are used for personal identification to access lockers. Anyhow, the smart cards can be stolen, the password and PIN numbers can be forgotten or might be guessed. Still many banks struggle to prevent illegal access, intrusions and stopping secret information disclosure. These all become problems of traditional bank lockers and leads to bank robberies. The safety of this lockers need to be ensured and verified through the strong authentication mechanisms in order to restrict the unauthorized access.

1.2 Scope

The scope of the project is concentrated at two-factor authentication in order to access the Bank locker system. The project is mainly focused on restricting the unauthorized access and alerting in case of theft. The fingerprint biometric and one-time password authentication implemented. The accuracy of fingerprint scanner is depended on fingerprint sensor specification. More accuracy of fingerprint sensor will provide strong fingerprint authentication which cannot be forged. The one-time password depended on the method of random number generation. The project will have software, hardware implementation and limitations.

1.2.1 Software

The analysis of software implementation need to be identified in order to work on this project. The primary works for software searching as follows:

 Learn the usage of Arduino C, C++ language and its criteria based on the project objectives.

 Identifies the memory usage required by the project that will develop whether it suits with Arduino Mega 2560 R3 microcontroller or not.

 Identifies the software that will be used to load the program to the Arduino Mega 2560 R3 microcontroller using boot loader methods.

(17)

 Check and explore the entire techniques in the developed program in order to achieve the project objectives.

1.2.2 Hardware

There are several analysis carried out before proceed to the project requirements for the hardware implementation as follows:

 Designing the bank locker with the lock style solenoid attached to it.

 Searching for the material that will be used for project such as wood, nail and locker opener door.

 Built the prototype based on the design and project requirements to facilitate the system easier.

1.2.3 Limitation of this project

The limitations of this project are identified through the initial system analysis, development environment and based on the equipment’s specifications as follows:

 Limited time, high commitment and limited technical source and support.

 Noise in fingerprint sensed data and spoof of attack.

 The continuous power supply needed for the system in order to work lifetime.

 The system only focusing on two-factor authentication and alerting. The physical security is not concerned.

1.3 Rational

By frequent observations and analysis the existing system, questioning and interviewing people about their personal experience about existing system’s drawbacks and solution for that, the idea of a new and improved system was manifested. In terms of security two factor authentication is much better solution for solution for bank locker systems that can be able to provide ease of access, portability, flexibility and reliability. Due to the above mentioned issues, the proposed solution is based two factor authentication system for bank lockers.

The main purpose of proposed bank locker security system is to detect and restrict the access of an unauthorized person who is trying to unlock the bank locker and alerts in the case of theft.

This proposed system provides double security by using fingerprint and on time password through GMS module. The fingerprint collection and capturing are done in minimum time due to optical sensor and the small template size. The major benefit are harder to fake,

(18)

guess, misplace and forget when compared to user selected password. James and Prasad (2011, pp. 4-5)

The random number generated by the microcontroller is sent to lockers’ user’s phone with the help of GSM module and eliminate the necessity to remember the password. The random number is a “one-time password” with time expiration and once it is used, the code will be expired. Within the time limit, the password must be entered to the system. This ensures that the password cannot be hacked and gives added value to the system. When the banks proceed with the locker system, it would benefit through high level of security, unique among its competitors who operate only PIN system in its technological operation. The internal strength of the banks would seek a rapid increase in customer confidence in the bank, brand image and degree of reach in its performance would be at its best because of improved security.

1.4 Aim of the project

The aim of the project is to come up with a low cost and efficient model of security locker system which provides more reliability and restrict the access of unauthorized person who is trying to unlock the bank locker system and alerts in the case of theft.

1.5 Objectives of the project

The focus of this project is to develop a locker system based on two-factor authentication. The objective of the project as follows:

 Develop a locker system that can replace the current traditional methods such as manual lock, PIN number and password.

 Improve the security with automate locker system based on two-factor authentication.

 Making the bank customers feel safe about their possessions in the safe.

 Eliminating the need to remember multiple passwords, PINs and not carry identity proof and keys.

 Eliminate the frauds which are done by smart larceners.

 Provide user friendly and easier system to banks to do their jobs efficiently.

 Save the time by the process of withdrawal of possessions faster and ultimately make the services pleasant for the bank customers.

(19)

1.6 Product description

The developed bank locker systems verify and validate user based on two factor authentication: fingerprint biometric and on time password send through GSM module. In the initial stage, the enrollment takes places where the user's fingerprint is scanned, analyzed and then minutiae features will be extracted as a template on a memory to be utilized for future comparison.

When a customer wants to open the bank locker, the user has to place their finger on a scanner. The scanner will capture the fingerprint, the system checks it in line with the fingerprint that is stored in the database. If it matches, the user will be allowed to enter the code which is a “one-time password”, send thorough the GSM network that is generated randomly for each access with time expiration. If the correct password is entered, the bank locker would be accessed. If not, the system would send warning signals and remain in locked status.

Fig. 1 Bank locker system product description

The bank locker system process illustrated in the figure 1. In addition, the vibration sensor and motion detector sensor function during the non-working hours of the bank that help in safeguarding the locker area and alerts in the case of any theft.

(20)

1.7 Organization of this thesis

Bank locker security system is based on two-factor authentication project’s final thesis consist of nine chapters that contains and elaborate specific topics regarding project as follows:

 The chapter one is the Introduction of the project. The explanation of the project given in general term. The objectives of the project will be explained. It is followed by the explanation of problem definition, aim, rational and scope of the project.

 Chapter two is the Literature review for the development of bank locker system. Explanation will be based on security authentication system related researched and security conceptual ideas. Some of current existing bank locker systems and its comparison are also discussed for further improvements in this project.

 Chapter three is about Methodology of how to work on this bank locker project and all kind of measure that was considered as well as the details, specification of entire project components used. This include the hardware design and software implementation. Flow chart of the bank locker system and how it is executed are explained in detail.

 Chapter four is about the Testing of the project that was conducted. This includes all the results with appropriate explanation.

 Chapter five is Discussion regarding bank locker system project. The problems that are faced and its solution is discussed.

 Chapter six is the Conclusion that include summary of findings.

 Chapter seven is about Recommendations for further development of the project.

(21)

2.0 LITERATURE REVIEW

There are number of bank locker security systems in the market. These type of systems are studied in order to obtain ideas for the system that was built. Even though a system in the market at the present time is compliment with new technology and more advanced idea must be acquired through the literature review.

In this report, the review of literature is explained with the guidance of the existing projects conducted by researchers on development of bank locker security system. The technologies such as GSM, RFID and biometrics that are used in different types of security system is further discussed.

2.1 Existing system related work

Over the years, locker security system is implemented in various places. A security plays an important role in day to day life. Some of the researchers have successfully developed various types of locker systems using different technology as follows.

2.1.1 Bank locker security system based on RFID and GSM technology

This system can be organized in bank and secured offices. The only registered user can recover the money or accessories from bank locker. The system works based on RFID and GSM technology that can authenticate, validate a user and unlock the door for bank locker access in real time basis.

This system consists of microcontroller AT89c51, GSM modem, LCD, keyboard, power supply, RFID tag and RFID reader. The id of a user is stored in the passive tag. The RFID reader reads the id number to validate and send to the microcontroller. If the id is valid then the authentic person needs to enter the password through keypad to the bank locker system.

If the password get valid, the system send SMS request to the authentic user mobile number. Then the user sends the password to the microcontroller through mobile phone using GSM modem.

The microcontroller compares the password entered by keyboard and received through the authentic user mobile phone for decision making to provide access. If these passwords are matched the bank locker will be opened otherwise it will remain in locked status. Ramani et al (2012, pp. 15-19)

(22)

The figure 2 illustrates the block diagram of locker security system based on RFID and GSM technology.

Fig. 2 Block diagram of locker system based on RFID and GSM. Ramani et al (2012: 17)

Strengths

 System works based on RFID and GSM technology whereas two types of authentication are used.

 Two password are referred which provides double security.

 System becomes user friendly due to use of RFID and GSM technology. All type of users are well aware about these technologies because their day to day activities include smart phones and ATM cards usage.

Weakness

 Strong and unique authentication method like biometrics such as fingerprint, face and iris are not concerned.

 The RFID card can be stolen/duplicated/misplaced easily.

 The referred two password for this system are same and the old model GSM SIM300 V7.03 is used. This leads to more time consuming when sending messages through the GSM.

(23)

2.1.2 Bank locker system using microcontroller based on fingerprint technology

This bank locker system implemented based on fingerprint technology using P8V51RD2 microcontroller. When it comes to system the user’s fingerprint which is authorized to access the locker will be stored in the module with a unique ID. The fingerprint scanner is interfaced to 8051 microcontroller. A user has to scan his/her finger in the initial stage. If the fingerprint get match then, the user need to enter the password given to him/her with the help of a keypad. Otherwise, the indication will be alert by a buzzer due to password or fingerprint being mismatch.

The figure 3 depicts the block diagram of fingerprint based locker system. This mainly contains of P8V51RD2 microcontroller, 16 x 2 LCD module, fingerprint sensor, buzzer, switch and relays. Pavithra et al (2014, pp. 155-159)

Fig. 3 Block diagram of locker system based on fingerprint technologhy. Pavithra et al (2014: 157)

Strengths

 System work based on fingerprint biometrics and password mechanism to authenticate a user.

 Fingerprint is unique for each user and it cannot be replicate easily with today’s technologies.

 Easy to use and does not require additional training.

 No manual errors and false intrusion. Weakness

 A password can be stolen/guessed/forgotten. This leads to lack in security.

 The referred password for the system is permanent and it remains unchanged. Therefore, password can be easily hacked and the entropy of a general 8 character password is low.

(24)

2.1.3 Locker system based on RFID, fingerprint, password and GSM technology

This system includes all the technologies and mechanisms such as RFID, fingerprint sensor, password and GSM where four different type of authentications used.

RFID reader acts on the ID number from passive tag and transfers it to the system, if the ID number is legal then it lets a user to access the fingerprint biometry if not the process will be stopped. If the fingerprint is matched the system would send the password to the registered phone number. Once the user gets the password, he/she requires to enter the password which was previously given to the user and received through the GSM. If these entered two passwords are in line, then the locker could be accessed if not the system will send the alert SMS to the relevant user’s phone number and the locker will be remained in locked status. Raghuram and Subhramanyasarma (2013, pp. 142-144) The figure 4 shows the block diagram of locker system based on RFID, fingerprint, password and GSM. This system mainly contains of LPC2148 microcontroller, 16 x 2 LCD display, fingerprint sensor, GSM, buzzer, RFID reader, relay, DC motor and power supply.

Strengths

 System work is based on RFID, fingerprint biometrics, GSM and password mechanism to authenticate a user. Four independently authentication methods used that will provide high security for lockers.

Weakness

 Hard to use and require additional trainings for End users due to process of four authentication methods.

 Manual errors may occur frequently due to more processing time in terms of authentication.

 System function may get slowly because of more hardware involvement in the system.

Fig. 4 Block diagram of lokcer system based on RFID, fingerprint, password and GSM. Raghuram and Subhramanyasarma (2013: 144)

(25)

2.1.4 Proposed bank locker system based on Two-factor authentication

The proposed bank locker system will authenticate a user based on two factor authentication. The two independent authentication methods would be implemented which are fingerprint biometric and one- time password send through GSM module. This system mainly contains of Arduino Mega 2560-R3, GT-511C3 fingerprint scanner, SIM900 Quad-band GSM module, I2C LCD module, lock style solenoid, PIR sensor, vibration sensor, relay and buzzer.

Strengths

 The system work is based on two-factor authentication leads to more security. The fingerprint biometric and on time password send through the GSM module are concerned.

 The necessity of three security concerns are followed in the proposed system in order to provide high secure access which are “something you know” (PIN), “something you are” (fingerprint biometric) and “something you have” (phone).

 The system is user friendly because it uses fingerprint technology which is widely known and phone in order to retrieve the PIN to the locker access.

Weakness

 Better advanced devices can be used to provide flexibility.

 The accuracy and capacity of motion detection and vibration detection can be increased further.

2.2 Comparative study of existing system and proposed bank locker

system

Table 1 Comparative study of existing system Comparison parameters Locker system based on RFID and GSM technology Locker system based on fingerprint technology Locker system based on RFID, fingerprint, password and GSM technology Proposed Locker System based on two-factor Authentication Authentication approach “Something you know” Examples: user account Two password are used in this system whereas a user require to enter the given

An 8 character password is used to authenticate a user. Referred A user needs to enter the 8 character password which is send to

A user need to enter the 6 character PIN which is send to authenticated user mobile number.

(26)

names, password, PIN and passcode.

password through the keypad and

the same password must be send to microcontroller using GSM modem. The entropy of 8 character password is low and it can be stolen/guessed/fo rgotten. password for the system is permanent which can be easily breakable. authenticated user mobile number.

The given PIN is generated randomly for each access has a limited time span.

This type of PIN eliminate the necessity in remembering the PIN/password. Authentication approach “Something you have” Examples: smart cards, token cards, phone and RFID cards.

RFID card is used as one of the authentication in this system. The RFID card can be stolen/duplicated. No authentication used in the type of Something you have.

RFID card is used as one of the authentication as earlier system. A user might be forgot to bring the RIFD card.

A phone is used for the authentication purpose. A user must bring the phone in order to see the PIN when he/she receives it through the GSM. A user can forget to bring the phone but today’s world it’s rare to see people without phone. Authentication approach “Something you are” Examples: fingerprint, face, hand geometry, iris, retina, voice and signature.

No biometrics authentication type is used in this system. The fingerprint technology is used as one of the authentication in this system. It’s harder to fake, guess, misplace and forget when The fingerprint authentication is used in this system. The fingerprint verification is used in this system to authenticate a user. Fingerprint authentication is strong mechanism since even the identical twins who share the same DNA

(27)

compared to user selected password.

has different fingerprints and this

gives high

distinctiveness. James and Prasad (2011: 4) Type of authentication used overall Something you know (Password) + Something you have (RFID) Something you know (Password) + Something you are (Fingerprint) Something you know (Password) + Something you have (RFID) + Something you are (Fingerprint)

Something you know (One time Password) +

Something you have (Phone) +

Something you are (Fingerprint) One-time password Password implemented with no time expiration and require a user to remember it. Password implemented with no time expiration require a user to remember it Password implemented with no time expiration and require to remember a user PIN is implemented with time expiration. PIN is generated randomly for each access, it has a limited time span and this eliminates the remembering of the PIN/password. The PIN is send to the user’s phone number. Sensors Not implemented Not

implemented

Not implemented PIR and vibration sensors implemented to detect theft during the non-working hours.

Microcontroller AT89C51 P8V51RD2 LPC2148 Arduino Mega

2560-R3 Platform Assembly Language and Embedded C Assembly Language and Embedded C C programing language Open Source

platform, code can be written in Java. Fingerprint

Scanner

Not implemented R303A scanner

(28)

GSM Module SIM300 V7.03 module

Not

implemented

SIM300 module SIM800L Fona GSM module

2.3 Executive summary

The literature review data collection helps to expose and generate skills of searching for the information from a various sources. These skills are very important in order to solve the problems that encountered in the future during project work. The strengths and weakness of existing systems are discussed in this report and identified to improve on proposed system.

Throughout the comparative study, the proposed system improvements and different from the existing systems justified. By analyzing existing systems by its strengths and weakness, the bank locker system will be created to overcome the past systems disadvantages and possible new improvements added to this proposed system as discussed in the comparative study. The proposed system method use two different independent authentication mechanisms to access the locker; which are fingerprint biometrics and on time password.

When it comes to fingerprint sensor, the proposed system fingerprint scanner provides high accuracy due to 3.0 fingerprint algorithm and capable enough to store 200 fingerprints compare to existing system scanners. The latest SIM900 Quad-band GSM module is used for sending PIN that leads to less time consuming.

The password is generated randomly for each access has a limited time span where the other existing system solutions fail. In comparison to the existing solutions, the proposed locker system uses a vibration sensor and a PIR motion sensor that is set during the non-working hours to protect the locker area and alerts in the case of any theft.

(29)

3.0 METHODOLOGY

It is an approach to manage project life circle from the beginning to end and provide framework for continuous improvement to the project. This include selection of methodology, system overview, system process flow chart, software implementation and hardware implementation.

3.1 Approach

Fig. 5 Rad development methodologhy

The figurer 5 illustrate The RAD methodology phases applied through the project life circle. This approach has chosen because it is a decentralized development model where many activities are split into separate stages. This contributes to reduced cycle time and improved productivity with lower cost.

It has a well-defined start, end point and progress process can be conclusively identified by developer and client with necessary requirements. This shows the importance given on requirements and design phase and it’s ensure minimal wastage of time, effort and reduces the risk of that customer expectations not being met. This model reduces risk due to client involvement all along the complete project life cycle. As a result before the project completion any alteration in requirement is possible.

The selection of methodology is strong enough for the development of locker system and would improve the system quality as requirements of the clients are met at each stage by providing a significant reduction in the errors with the help of prototyping and tools. If there any failures occurs in this methodology, the project can be restart from the user design phase. (Rraguse 2012)

(30)

This model will be easy to manageable because each phase has specialized deliverables and a requirement analysis process. The deliverables of the proposed project with this model will be have better value because each phase will be well shown to the client. The use of this model helpful to follows:

 Problems are more easily solved.

 Large bodies of code will be more manageable.

 Human works will be always verified.

The phases of RAD methodology that followed in complete project life cycle as follows:

3.1.1 Project requirements planning phase

The feasibility study requirements processed in the beginning stage to test system in certain factors of its operation, handling user’s requirements, use of resources and the cost effectiveness. The aim is to check the development of the system is possible or not. Throughout the literature review and requirement analysis the proposed bank locker system development become possible and identified as achievable. In this phase, the requirements identified based on following criteria in order to proceed further:

 Users of bank locker system.

 Way of using the bank locker system.

 Data inputs and outputs of the bank locker system.

The planning phase involved a complete study of the existing bank locker system, leading to specifications of a new bank locker system with more enhancements. The main factors to be discussed in this analysis are:

 The functions that requires to be executed by the proposed system and their bond with each other.

 Identifying the current problems of bank locker system and recommending achievable suggestions for improving the new proposed system.

 List of attributes of the entities of entire bank locker system.

The document will be created by having all of this requirements and will be used in the design phase.

(31)

3.1.2 Project user design phase

In this phase, the physical system will be designed from the requirement gathering which were discussed in the first phase. The user interface design will be addressed, issues related to accessibility will be discussed, hardware and system requirements will be specified and overall system architecture will be designed.

At this stage, computer oriented work will be processed. The design of the system becomes more structured and its makes better quality for new bank locker system deliverables. The programming language and the hardware and software platform in which the new bank locker system will run are also decided. This would be reduce the risk of software platform selection.

3.1.3 Construction phase

After designing the bank locker system, the whole system is required to be converted into computer understanding language. The software creation processed in this phase where the locker system functions are transformed into control specifications by the help of an open source integrated development environment. The programs developed in categorized way. This would lead to fast development and can easily adopt change in future if requirements get updated.

3.1.4 Cutover phase

This includes testing and implementation of the system. A test plan developed and will be proceed to make sure that developed system is actually solving the needs that addressed and gathered during the requirements planning phase. The main objective of this testing is removing all the bugs of the system. This would lead bank lockers system to process efficiently in its services to customers.

Once done with the testing, the implementation takes place. All the programs of the bank locker system are loaded into real environment and if it runs smoothly without any fault then it will be launched. The steps involved in this phase are:

 Installation of Hardware and Software must be made fully operational before implementation.

 Conversion - The data from the old system needs to be converted to operate in the new format of the bank locker system based on two-factor authentication.

(32)

3.2 Overview of bank locker system design and its process

Fig. 6 Block diagram of proposed bank locker system

The Bank locker system based on two-factor authentication implementation on Arduino Mega 2560 R3 is proposed as shown in the figure 6. The Arduino Mega 2560 controller will be taken action according to Fingerprint scanner GT-511C3 input, once it is verified, Arduino sends SMS details to GSM module in order to send a PIN to owner’s mobile phone, when it receives confirmation through keypad, Arduino sends open signals to Solenoid to provide access to the bank locker system. The Ywrobot relay (5VDC) is used to switch off/on the Solenoid to work with electronic locker system. I2C real time clock module is used to take the current time and date which is used to be count for session time out regarding one-time password. The PIR and vibration sensors used to detect in case of theft. This system can be extended in future without changing any hardware, just by reprogramming the system it can be enhanced for banks.

This system is aimed to overcome the limitation of the existing bank locker system. The existing system can be replaced by designed system that will be provided more security and eliminate time delay in effective manner. The new system will be delivered more security which will be provided almost twice safety as earlier systems.

(33)

3.2.1 Complete Flow chart of bank locker system based on two-factor authentication

Fig. 7 Flow chart of complete bank locker system

As for the Flow chart illustrate in figure 7, the operation of the system takes place in an automated progress. Firstly the user has to place their finger on a scanner. The scanner capture the fingerprint, the system checks it against the fingerprint that is stored in the database. If it matches, the verified id will be display and the user will be allowed to enter the code which is a “one-time password” send thorough the GSM network that is generated randomly for each access with time expiration. If the correct password is entered, the bank locker would be accessed, otherwise the system sends warning signals and remain in locked status. The flow chart dictionary presented in Appendix 9.3 for further understanding.

(34)

3.2.2 Enrollment phase of bank locker system

Fig. 8 Flow chart of enrollment phase

The figure 8 illustrate the enrollment stage and delete an ID process. Enrollment is where the system studies about all the users it will have to recognize each time. The enrollment phase is proceed by a bank administrator. Therefore it require administrator password. In the initial stage, a user's account id will be typed. Once typed, a user fingerprint will be scanned, analyzed then minutiae features will be extracted as a template on a memory to be utilized for future comparison. The delete an ID process will be also require admin password as enrollment and the account ID to get deleted if valid ID is given into the system.

(35)

3.2.3 Fundamental stages of bank locker systems

Data acquisition:

This is the phase where the data (fingerprint) are taken from the users by the fingerprint scanner. The received fingerprint image is stored in the fingerprint database as template. Acquisition can be done through the fingerprint GT511C3 optical scanner.

Feature extraction:

The features of fingerprints are figured and stored with its characteristics in the database. The captured fingerprint images are assisted to feature extraction component and its features are stored to the database as template by using an extraction algorithm to the fingerprint image. This is the stage where capture image, enhance ridge and extract minutiae are processed (which is known as image enhancement).

Fingerprint Verification:

Involvement of decision making takes place. The user, in order to access the bank locker, he/she places the finger on the fingerprint scanner device. Once a fingerprint image is taken, it’s served to a process of matching component and that extracts the minutiae features of the fingerprint image scanned and ties with the individual’s fingerprint template that saved earlier in the system database.

If both matches, the user will be allowed to enter the password. If it doesn’t match, the user access will be denied and locker system will be remained in lock status. James and Prasad (2011, pp. 6-7).

One-time password:

This password is valid only for one login session and each password generated randomly has a time expiration. Once the fingerprint verification is done, the user need to enter the password which is sends through GSM module. If the OTP get matched, the user will be granted to access the bank locker otherwise the access will be denied.

All of these stages are required in order to access the bank locker. The type of fingerprint measurements and feature measuring process are present in Appendix 9.1 for further evidence.

(36)

3.3 Hardware Design Specifications

3.3.1 Arduino Mega 2560

The Arduino Mega 2560 is a microcontroller board. It is based on the ATmega2560 which has 54 digital input/output pins. It has 15 PWM pins, 16 analog inputs and 4 UART ports. It is connected to the computer through the USB cable or it can be powered up with the AC to DC adaptor or it can be powered up by the battery.

The Mega 2560 R3 also adds SDA and SCL pins next to the AREF additionally. There are two pins near RESET button. One is the IOREF and other one pin is not connected to the board where it is reserved for future purposes. The IOREF is used to shield to adapt the voltage provided by the board. The Arduino microcontroller is implemented with the boot loader. This avoids the use of the external programmer device to the computer for programming. This boot loader provides the true Read-While-Write operation.

The Mega2560 R3 differs from all previous boards in that it uses ATmega16U2 instead of using the FTDI USB-to-serial driver chip. This allows the user with more memory and high transferring rate. Revision 2 of the Mega2560 board has a resistor pulling the 8U2 HWB line to ground, making it easier to put into DFU mode. Anon. [undated]

This Mega 2560 R3 Arduino board has chosen for Bank locker security system project because Arduino based locker systems has many advantages over existing microcontroller based locker systems, some of these advantages are; simple structure, high reliability, speed, an open-source platform, flexible, easy-to-use hardware and software, number of input/output ports, performance and less power consumption which are all very important in every design. It has more flash memory and extended features which makes easier to use in projects to control the system. Further, the Mega specifications are explained in the Appendix 9.2.1.

(37)

Fig. 10 Arduino Meg pin definition. Alberto [undated]

The figure 10 indicates the pin configuration on the Arduino Mega 2560 controller board. The pins were connected, to form the bank locker system function properly by using this pin configuration datasheet. This will also use to find the number of input /output pins, number of power pins, number of UART pins.

3.3.2 I2C Serial Enabled 16x2 LCD Module Display Screen

The LCD display is used to display two rows of characters and each row contain 16 characters.

It is a high-speed I2C interface and including LCD with negative blue type is a white case with low background.

(38)

I2C has four pins. They are power, ground, SCL and SDA. The text and the numeric characters are interfaced with the SCL and SDA.

The I2C LCD contract can be adjusted by using the trumpet and this module uses only two wires to expose all the characters into the LCD display. This is simple and easy to handle while using in the project.

3.3.3 4x4 Matrix 16 Key Switch Keypad

The keypad has 16 buttons in Matrix form. It is thin and flexible membrane with the adhesive backing. It is compatible and very easy to interface with any microcontroller. Only need 8 microcontroller pins (4-columns and 4-rows) need to be scanned through the key pad. This 4x4 Matrix keypad has chosen for bank locker project to provide a useful human interface component for the people who are using it to enter the inputs to the system. The specifications and its schematic diagram presented in Appendix 9.2.2.

3.3.4 Piezo buzzer

Piezo buzzer is used for making beeps, tones and alerts. It generates sound by altering the electric field either stretching or compressing. This will alter the frequency of the signal and therefore it produce sound.

Fig. 12 Keypad. Anon. [undated]

(39)

It is powered up with DC voltage. It is covered with the cylindrical plastic coating. It has small holes through which the sound propagate. Further, the buzzer schematic diagram, features and its specifications are present Appendix 9.2.3.

This Piezo buzzer has chosen for bank locker system project for making loud beeps sound when theft occurs. This has been used because less weight, ordinary construction and low cost make it usable in various applications compare to other buzzers.

3.3.5 Real time clock module

This is the Real Time Clock (RTC) Module which uses the DS1307 to keep track of the current year, month, day as well as the current time with leap year Compensation. It automatically adjusts the month and days according to the leap year.

It can operate either in 24 hours clock or 12 hours clock. The DS1307 RTC module has a built-in power circuit which sense the power failure and automatically switch itself to the backup power. Anon. [undated]

This RTC DS1307 Real Time Clock module has chosen for bank locker security system project because it’s widely used in data logging, clock-building, time stamping, timers, and alarms to keep track of time even if it is reprogrammed, or if the power is lost. This includes a small CR1225 Lithium coin cell battery that will run the RTC for a minimum of 9 years without an external 5V power supply.

As per proposed project, this allows Arduino microcontroller to provide seconds, minutes, hours, day, date, month, and year information for the bank users and used for “one-time password” time expiration. Moreover, the RTC specifications and schematic diagram described in Appendix 9.2.4 to get better understanding.

(40)

3.3.6 YWRobot Relay (5VDC)

This is a 5V 1-Channel Relay interface board which be able to control various appliances, and other equipment with large current. It can be controlled directly by most of the Microcontrollers. Anon. [undated]

The relay requires 15-20mA driver current. The LED indicates the relay output status. YWROBOT 1 RELAY (5VDC) has been chosen for this project as it is widely used, equipped with high-current relaymand compatible with Arduino. This relay has been used as on/off switch to the solenoid in electronic bank locker system. The relay specifications and schematic diagram described in Appendix 9.2.5 for more explanation.

3.3.7 Fingerprint Scanner - TTL (GT-511C3)

This fingerprint module from ADH-Tech that communicates over TTL Serial. . The module has an on-board optical sensor and 32-bit CPU.

The initial register has been done to store each of the finger prints by sending the commands and by pressing the finger thrice against the scanner. It can store different finger print. These fingerprint template can be retrieved in the image format. It can store up to 200 different fingerprints and it is capable of 360° recognition.

This module has been chosen for this project this is because it’s an updated version of the GT-511 which has an increased storage capacity to 200 different fingerprints, use SmackFinger 3.0 algorithm and it has the ability of 360° recognition.

Fig. 15 Relay

(41)

3.3.8 SIM800L Fona Mini Cellular GSM module

It is a GSM module controlled via AT commands and fully compatible with Arduino Mega. It uses Quad band 850/900/1800/1900 MHz and can be connected to any GSM network with any 2G SIM. Anon. [undated]

The Fona GSM module is been chosen for this project in order to send the one-time password to owner’s phone when accessing the bank locker. The less processing time for sending messages adds value to this GSM module. The GSM features and schematic diagram presented in Appendix 9.2.6 for in depth details.

3.3.9 Lithium Ion Polymer Battery

Lithium ion polymer batteries are thin, light and powerful. The output ranges from 4.2V to 3.7V when completely charged. The Lipo batter has a capacity of 2500mAh for a total about 10 Wh. The battery come with a 2 pin connector. Anon. [undated]

This battery used for the bank locker system to provide power to Fona GSM module to be powered up during sending SMS.

Fig. 17 Fona GSM module

(42)

3.3.10 Passive Inferred Sensor

The PIR sensor detect motion up to 20 feet away by using a Fresnel lens and infrared sensitive element to detect changing patterns of passive infrared emitted by objects. Anon. [updated]

The PIR sensor is compatible with all microcontrollers. The PIR sensor set during bank off times to detect motions of thief. This sensor chosen for this project due to inexpensive, easy to use and it is ideal for security system. The PIR specifications and schematic diagram presented in Appendix 9.2.7 for further details.

3.3.11 Vibration Sensor

The vibration sensor is often used for vibration, touch and shock measurements. A small AC and large voltage up to 90V is made when the film goes backward and forward. A resistor get the voltage down to ADC levels. Anon. [undated]

The vibration sensor used for shock and vibration detection that prevent stealing possessions in the bank locker. Green led is indicated when vibration detected. This sensor specifications and schematic diagram presented in Appendix 9.2.8 for further knowledge.

3.3.12 Lock style solenoid (12V)

A solenoid designed for bank locker door. It is made out of a big coil of copper wire with a metal in the middle. When the coil is heated, the slug is pulled into the middle of the coil. This lets the solenoid to pull from one end. When 9 - 12 VDC is applied, the door can be opened. The solenoid is used for bank locker door electronic access to open and close. The Solenoid specifications and schematic diagram presented in Appendix 9.2.9 for more details.

Fig. 19 PIR sensor

Fig. 20 Vibration sensor

(43)

3.3.13 Metal on/off switch (5V-12V)

Fig. 22 Metal on/off switch

The metal on/off switch require 5V - 12V to be powered up. This switch is used for bank locker system to turn on fingerprint scanner, I2C LCD and GSM. This lead to reduce power consumption when locker is in off mode. Anon. [undated]

3.4 Software design specifications

Software programs are called sketches. Theses sketches will be formed on a computer using the Arduino integrated development environment (IDE). The IDE tool leads to edit, write and convert the code into guidelines that Arduino hardware will recognize depending on the codes that are programmed. The IDE also transfers those guidelines to the Arduino board to work smoothly and efficiently. Further, the bank locker system design process previously explained in the chapter 3.2.

3.4.1 Sketch Overview in the concern of Bank locker system

Arduino IDE stands for Integrated Development Environment and it’s a note text editor similar to program which enable us to write a code for the Arduino board, in other way the IDE programme coded is considered as the OS of Arduino board when working in projects. In Arduino, the file is known as sketch. Written developed codes are stored in the sketch. The Arduino IDE sends the developed code to a compiler on PC that checks code contrast to some rules and creates a file which can be uploaded on the Arduino board. Arduino IDE agrees the uploaded code and makes decisions on how the Arduino board execute information and uses the hardware. Arduino development language is a shortened from C/C++ programming language that use common development structures, variables and functions. Afterwards this is transformed into legal C++ program.

Compare to other boards, in the Arduino, the electric signals can be controlled, the Arduino can interface with it very simply in comparison to other micro controllers. Even if it is not controlled by electric signals, probably motors, relay and electromagnets, to interface with it. So, the selection of board is strong enough and capable to work with Bank locker system’s all hardware components. The Arduino IDE makes easier to write programs to the Arduino board than other text editors. Anon. [undated]

(44)

3.4.2 Arduino IDE overview in the concern of Bank locker system

The figure 23 illustrate the Arduino IDE. The button with Arduino IDE of which appears like any checkmark is known as “verify”. If that get press, the code will be compiled and any errors will be displayed in the IDE window at the bottom. So that errors can be solved efficiently with the help of IDE. The shortcut key for verify is Control + R. The button appears like an arrow right pointing right the upload button. If this get press, the sketch will be uploaded to Arduino board as coded. The shortcut key for upload is Control + U. The button on the right side of the screen in the IDE is the serial button. If this get press, the serial monitor will be function, it is possible to send and receive information on serial from Arduino board while it is executed. The shortcut key for serial monitor is Shift + Control + M. The bottom right corner of the window displays the current board and serial port that have been used. The toolbar buttons allows to verify and upload programs, create, open, and save sketches, and open the serial monitor. Anon. [undated]

Additional commands can be found within the five menus which are File, Edit, Sketch, Tools, and Help. The actual choices in the menu are sensitive where items relevant to the code currently being carried out are only available.

(45)

3.5 Hardware Implementation

The Arduino Mega 2560 R3 is the microcontroller where the code wrote for the system is performed. The board can only control and respond to electric signals, so hardware components are physically connected to deal with so many purposes. These components can be sensors or devices. The hardware implementation is considered as pin configurations of components attached to Arduino Mega as follows:

3.5.1 I2C LCD

Pin definition of I2C LCD:

Table 2 Pin definition of I2C LCD

I2C Serial Enabled 16x2 LCD Module

Arduino Mega 2560

Wire 1 GND

Wire 2 VCC (+5V)

Wire 3 SDA ( Pin 20)

Wire 4 SCL ( Pin 21)

Circuit diagram of I2C LCD on Arduino Mega R3 board:

(46)

3.5.2 4x4 Matrix 16 Key Switch Keypad

Pin Definition of 4x4 keypad:

Table 3 Pin definition of 4x4 keypad

4x4 Matrix Keypad Arduino Mega 2560

Pin 1 (Colum) Digital Pin 26

Pin 5 (Row) Digital Pin 22

Circuit diagram of 4x4 keypad on Arduino Mega R3 board:

(47)

3.5.3 Piezo Buzzer

Pin definition of buzzer:

Table 4 Pin definition of buzzer

Piece Piezo Buzzer Arduino Mega 2560

Black Wire GND

Red Wire Digital Pin 9 or as set on the controller

Circuit diagram of Piezo Buzzer on Arduino Mega R3 board:

Fig. 26 Circuit diagram of buzzer

3.5.4 Real time clock module

Pin definition of RTC:

Table 5 Pin definition of RTC Tiny RTC-Module DS1307 Arduino Mega 2560 VCC 5V (VCC) GND GND SDA D20 (SDA) SCL D21 (SCL)

(48)

Circuit diagram of RTC on Arduino Mega R3 board:

Fig. 27 Circuit diagram of RTC

3.5.5 YWRobot Relay (5VDC) and lock style solenoid

Pin definition of relay and lock style solenoid:

Table 6 Pin definition of relay and solenoid YWROBOT Relay (5VDC) Arduino Mega 2560

VCC 5V (VCC)

GND GND

IN D2 (Any Digital Pin)

+ + wire from the power supply

need to be connected

- - wire from the solenoid need

(49)

Circuit diagram of relay and solenoid on Arduino Mega R3 board:

Fig. 28 Circuit diagram of relay and solenoid

3.5.6 Fingerprint Scanner - TTL (GT-511C3)

Pin definition of fingerprint scanner:

Table 7 Pin definition fingerprint scanner GT-511C3 Scanner Arduino Mega 2560

Tx D11 (Rx)

Rx (3.2V) D12 (Tx, 4.7K ohm, 2.2K

resistor used)

GND GND

(50)

Circuit diagram of GT-511C3 fingerprint scanner on Arduino Mega R3 board:

Fig. 29 Circuit diagram of fingerprint scanner

3.5.7 SIM800L Fona Mini Cellular GSM module

Pin definition of Fona GSM Module:

Table 8 Pin definition of Fona GSM module Fona GSM Module Arduino Mega 2560

Vio 5V (VCC) GND GND Key GND Rx D2 (Tx) Tx D3 (Rx) RST D4

Bank Locker Security System Based on Two-Factor Authentication Project Report by S.sutharshan

BIRMINGHAM CITY UNIVERSITY

Faculty of Technology, Engineering and the

Environment

BSc [Hons] Computer Networks and Security

Individual Project Final Report

CMP6102

Bank Locker Security System Based on Two-factor

Authentication

Student Name

: Sivasankar Sutharshan

Student Number

: T31401079/ 14144065

Supervisor

:

Professor. N G J Dias

DECLARATION OF ORIGINALITY

ABSTRACT

ACKNOWLEDGEMENT

TABLE OF CONTENTS

LIST OF TABLES

LIST OF FIGURES

GLOSSARY

1.0 INTRODUCTION

1.1 Problem definition

1.2 Scope

1.3 Rational

1.4 Aim of the project

1.5 Objectives of the project

1.6 Product description

1.7 Organization of this thesis

2.0 LITERATURE REVIEW

2.1 Existing system related work

2.2 Comparative study of existing system and proposed bank locker

system

2.3 Executive summary

3.0 METHODOLOGY

3.1 Approach

3.2 Overview of bank locker system design and its process

3.3 Hardware Design Specifications

3.4 Software design specifications

3.5 Hardware Implementation