TU Darmstadt / ULB / TUbiblio

Context-Based Zero-Interaction Pairing and Key Evolution for Advanced Personal Devices

Miettinen, Markus and Asokan, N. and Nguyen, Thien Duc and Sadeghi, Ahmad-Reza and Sobhani, Majid :
Context-Based Zero-Interaction Pairing and Key Evolution for Advanced Personal Devices.
Proc. ACM Conference on Computer and Communications Security ACM
[Conference or Workshop Item] , (2014)

Abstract

Solutions for pairing devices without prior security associations typically require users to actively take part in the pairing process of the devices. Scenarios involving new types of devices like Internet-of-Things (IoT) appliances and wearable devices make it, however, desirable to be able to pair users' personal devices without user involvement.

In this paper, we present a new approach for secure zero-interaction pairing suitable for IoT and wearable devices. We primarily require pairing to happen between ``correct" devices -- the devices that the user intends to pair. Our pairing scheme identifies the correct devices based on measuring sustained co-presence over time. We do this by having the devices compute a fingerprint of their ambient context using information gathered through commonly available sensor modalities like ambient noise and luminosity. We introduce a novel robust and inexpensive approach for fingerprinting contexts over time. Co-present devices will observe roughly similar context fingerprints that we use in a key evolution protocol to gradually increase the confidence in the authenticity of the correct devices. Our experiments show the effectiveness of this approach for zero-interaction pairing.

Item Type: Conference or Workshop Item
Erschienen: 2014
Creators: Miettinen, Markus and Asokan, N. and Nguyen, Thien Duc and Sadeghi, Ahmad-Reza and Sobhani, Majid
Title: Context-Based Zero-Interaction Pairing and Key Evolution for Advanced Personal Devices
Language: German
Abstract:

Solutions for pairing devices without prior security associations typically require users to actively take part in the pairing process of the devices. Scenarios involving new types of devices like Internet-of-Things (IoT) appliances and wearable devices make it, however, desirable to be able to pair users' personal devices without user involvement.

In this paper, we present a new approach for secure zero-interaction pairing suitable for IoT and wearable devices. We primarily require pairing to happen between ``correct" devices -- the devices that the user intends to pair. Our pairing scheme identifies the correct devices based on measuring sustained co-presence over time. We do this by having the devices compute a fingerprint of their ambient context using information gathered through commonly available sensor modalities like ambient noise and luminosity. We introduce a novel robust and inexpensive approach for fingerprinting contexts over time. Co-present devices will observe roughly similar context fingerprints that we use in a key evolution protocol to gradually increase the confidence in the authenticity of the correct devices. Our experiments show the effectiveness of this approach for zero-interaction pairing.

Title of Book: Proc. ACM Conference on Computer and Communications Security
Publisher: ACM
Uncontrolled Keywords: ICRI-SC;contextual security; context-based pairing; zero-interaction
Divisions: Department of Computer Science
Department of Computer Science > System Security Lab
Profile Areas
Profile Areas > Cybersecurity (CYSEC)
Date Deposited: 04 Aug 2016 10:13
DOI: 10.1145/2660267.2660334
Identification Number: TUD-CS-2014-0917
Related URLs:
Export:

Optionen (nur für Redakteure)

View Item View Item