Door lock NFC card reader for Android mobile phone

Motivation

Is it possible to use FIDO UAF Standard on an Android mobile + NFC to openning doors?

This project is a simple prototype to verify how FIDO could be used in this scenario (see FIDO Security Reference). This card reader uses NFC to communicate with a specific Android Opening Door App, that emulates a NFC card using Android's Host-based Card Emulation functionality.

The card reader and Android Opening Door App depend of a third-party, called FIDO UAF RP Server.

Figure below shows all necessary components and the relation between them

Requirements

1. One Android mobile phone (with NFC) to acts like a card reader (Android OS >= 5)
2. One Android mobile phone (with NFC) to acts like a card (Android OS >= 6 + Fingerprint sensor)
3. One computer to host FIDO UAF Demo Server

Getting necessary codes

1. FIDO UAF Demo Server

• If you prefer, there is a Docker container ready to use here: https://github.com/emersonmello/docker-fidouafserver

1. Door lock NFC card reader for Android - You are already here!
2. Dummy FIDO UAF Client
3. Opening Door Android App

Setting up

1. Start FIDO UAF Demo Server
2. Install Door lock NFC card reader for Android
3. On Door lock card reader for Android touch on "Settings" on the main application menu and update "server endpoint" field to the IP Address and PORT where you are running the FIDO UAF Demo Server
4. Install Dummy FIDO UAF Client and Opening Door Android App on your another Android phone
5. On Opening Door Android App touch on "Settings" on the main application menu and update "server endpoint" field to the IP Address and PORT where you are running the FIDO UAF Demo Server
6. On Opening Door Android App touch on "See app facetID" on the main application menu and insert the showed value in FIDO UAF Demo Server MySQL database:

• For instance: INSERT INTO facets (fDesc) values ('android:apk-key-hash:Lir5oIjf552K/XN4bTul0VS3GfM')

Testing

1. Open Opening Door Android App and touch "Register" button
2. Open Door lock card reader for Android
3. Tap your another Android mobile phone (card) on "Android card reader"
4. Follow the instructions provided by application (i.e. put your finger on the sensor, etc.) and you should see the message "Access Granted"

UML Sequence Diagram