Opening Doors with JSON Web Tokens
summary
Shows a practical replacement for internet‑connected locks: an identity provider issues an RSA‑signed JSON Web Token to an Android app, the app writes the token to an NFC card, and an offline Raspberry Pi door verifies the signature and enforces a 60‑second expiry. Demonstrates real attacks against Amazon Key (Wi‑Fi camera DoS, Bluetooth flood) and a working NFC demo, but highlights operational limits: key rotation and OTA updates for offline locks remain hard.
AI-written summary · about
chapters (7)
- 0:00Intro
- 0:47Amazon Lock
- 15:08Demo
- 26:21Low compute devices
- 27:58Multifactor authentication
- 30:08Managing public keys
- 33:31Opensource door management
related talks
46mOpening Doors with JSON Web Tokens
26mMerging Passwordless and Physical Access Control
37mOpen Sesame! The full story behind opening a smart lock
18mNFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit
22mEnabling passkeys with "Hybrid" on non-passkey-supported devices
37mKnock knock, who's there? Authenticating your single page apps using JSON Web Tokens
46mA More Secure World for Android Apps
40mKnock knock, who’s there? Authenticating your single page apps using JSON Web Tokens