There are three modules in this system: Base Station, Gateway and User.
User Module
This module is implemented in the smart tag carried with each user. When each tag is manufactured, some tag-specific secrets are also embedded during the installation, in addition to some confidential data, such as biometric data, personal private information, and etc. This module is also responsible to communicate with a gateway sensor on a pre-installed channel.
In practice, when the user entered the security entrance, he or she will be authenticated based on the valid parameter that were pre-loaded at installation time. During the time when the message is exchanged wirelessly, the system is guaranteed not to leak out any private information to unknown third party.
Gateway Module
This module takes care of all communicability operations from user smart tags and base station. When the base station first initiates a request, the gateway deliver this requests to an incoming user. Soon after the user responses back, the gateway passes its response back to the base station for authentication. In order to reduce the payload size at each session, this module is also responsible to concatenate two random number generated by base station and user smart tag respectively.
Base Station Module
This module requires to run on a computational powerful device, e.g. a personal computer.
The first sub-module, Base and BaseMsg take care of all communication tasks to the gateway module, including the generation of the first half of session key to initiate a request, and marshalling the incoming NesC data to a Java-compliant format.
The second sub-module, Authenticator, is responsible to determine the authenticity of an incoming tag, and displayed the result to the graphic user interface, which is the the third sub-module.