Two-Factor Authentication System for Protecting Metadata and Connected Vehicles

Abstract

Connected vehicles are becoming increasingly common, and they store a significant amount of data about their drivers and their surroundings. This data is attractive to attackers, and there is a need for effective security measures to protect it. This study proposes a two-factor authentication (2FA) system to protect the metadata stored in connected vehicles and the vehicles themselves. The system consists of two main components: the Central Security Unit (CSU) and the AutoGuard (AG) mobile application. The CSU is integrated with the Remote Keyless Entry System (RKES), while the AG is installed on the authorized driver's phone. The 2FA process begins when the remote key is in proximity to the vehicle. This triggers the CSU, which then initiates the second authentication factor. The AG prompts the driver to enter a valid security method, such as a biometric, pattern, or PIN code. If the second authentication is successful, the AG authorizes the CSU and the vehicle doors are opened by the RKES. The driver is notified by CSU through AG if the 2FA process is unsuccessful.  As a result, this system aims to protect the metadata stored in authorized users' vehicles and their vehicles from unauthorized invaders. Furthermore, it is possible to enhance the accuracy of the 2FA system by integrating the location of the phone with AG functionality into the authentication system.