BIOMETRIC ACCESS CONTROL FOR BEAGLEBONE BLACK WITH SECURED SSH AND LOCAL WEB INTERFACE: EVENT-DRIVEN SERVICE MANAGEMENT

Abstract

IoT and embedded Linux devices often keep remote access enabled permanently, i.e., they remain continuously exposed to attacks. This paper proposes a different default: SSH does not exist on the network until the user passes local biometric verification. This paper substantiates an approach to reducing the attack surface. It is based on event-driven control of SSH availability with verification of behavior in idle, session, and teardown modes. The prototype is built on BeagleBone Black with an R307 fingerprint sensor and a minimal Yocto-based Linux image. A C control daemon (finite-state machine) enables sshd.socket and a temporary firewall rule only for an authorized session. The web panel with a secrets vault is bound to 127.0.0.1 and is reachable only via an SSH tunnel. Secrets are stored locally using PIN-based key derivation (PBKDF2-HMAC-SHA256) and Fernet encryption. Experiments confirm TCP/22 invisibility in idle mode, controlled access during the session, and an adequate security level for sensitive information storage.