TU Darmstadt / ULB / TUbiblio

Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication

Putz, Florentin ; Álvarez, Flor ; Classen, Jiska (2020)
Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication.
13th ACM Conference on Security and Privacy in Wireless and Mobile Networks. virtual Conference (08.07.2020-10.07.2020)
doi: 10.1145/3395351.3399420
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Secure Device Pairing (SDP) relies on an out-of-band channel to authenticate devices. This requires a common hardware interface, which limits the use of existing SDP systems. We propose to use short-range acoustic communication for the initial pairing. Audio hardware is commonly available on existing off-the-shelf devices and can be accessed from user space without requiring firmware or hardware modifications. We improve upon previous approaches by designing Acoustic Integrity Codes (AICs): a modulation scheme that provides message authentication on the acoustic physical layer. We analyze their security and demonstrate that we can defend against signal cancellation attacks by designing signals with low autocorrelation. Our system can detect overshadowing attacks using a ternary decision function with a threshold. In our evaluation of this SDP scheme’s security and robustness, we achieve a bit error ratio below 0.1% for a net bit rate of 100 bps with a signal-to-noise ratio (SNR) of 14 dB. Using our open-source proof-of-concept implementation on Android smartphones, we demonstrate pairing between different smartphone models.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2020
Autor(en): Putz, Florentin ; Álvarez, Flor ; Classen, Jiska
Art des Eintrags: Bibliographie
Titel: Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication
Sprache: Englisch
Publikationsjahr: 8 Juli 2020
Verlag: ACM
Buchtitel: WiSec '20: Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks
Veranstaltungstitel: 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks
Veranstaltungsort: virtual Conference
Veranstaltungsdatum: 08.07.2020-10.07.2020
DOI: 10.1145/3395351.3399420
URL / URN: https://wisec2020.ins.jku.at/
Zugehörige Links:
Kurzbeschreibung (Abstract):

Secure Device Pairing (SDP) relies on an out-of-band channel to authenticate devices. This requires a common hardware interface, which limits the use of existing SDP systems. We propose to use short-range acoustic communication for the initial pairing. Audio hardware is commonly available on existing off-the-shelf devices and can be accessed from user space without requiring firmware or hardware modifications. We improve upon previous approaches by designing Acoustic Integrity Codes (AICs): a modulation scheme that provides message authentication on the acoustic physical layer. We analyze their security and demonstrate that we can defend against signal cancellation attacks by designing signals with low autocorrelation. Our system can detect overshadowing attacks using a ternary decision function with a threshold. In our evaluation of this SDP scheme’s security and robustness, we achieve a bit error ratio below 0.1% for a net bit rate of 100 bps with a signal-to-noise ratio (SNR) of 14 dB. Using our open-source proof-of-concept implementation on Android smartphones, we demonstrate pairing between different smartphone models.

Freie Schlagworte: physical-layer security, signal cancellation, secure device pairing, acoustic communication, trust, integrity codes, android, internet of things, digital signal processing, emergenCITY_KOM
Fachbereich(e)/-gebiet(e): 20 Fachbereich Informatik
20 Fachbereich Informatik > Sichere Mobile Netze
Profilbereiche
Profilbereiche > Cybersicherheit (CYSEC)
LOEWE
LOEWE > LOEWE-Zentren
LOEWE > LOEWE-Zentren > CRISP - Center for Research in Security and Privacy
LOEWE > LOEWE-Zentren > emergenCITY
TU-Projekte: HMWK|III L6-519/03/05.001-(0016)|emergenCity TP Bock
Hinterlegungsdatum: 22 Jul 2020 06:50
Letzte Änderung: 19 Jan 2022 12:05
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen