Armed with only a 1GHz mixed-signal oscilloscope and an 500MHz logic analyser, the researcher manages to decipher the protocols.
The sensor can capture veins, providing a second level of security since each user’s finger vein pattern is unique.
X.509 certificates make a solution more secure, but using it greatly complicates a design if client-side certificates are required.
X.509 certificates provide strong authentication, but in a practical set-up, other mechanisms such as username/password can be just as secure.