Putz, Florentin ; Álvarez, Flor ; Classen, Jiska (2020)
Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication.
13th ACM Conference on Security and Privacy in Wireless and Mobile Networks. virtual Conference (08.07.2020-10.07.2020)
doi: 10.1145/3395351.3399420
Konferenzveröffentlichung, Bibliographie
Kurzbeschreibung (Abstract)
Secure Device Pairing (SDP) relies on an out-of-band channel to authenticate devices. This requires a common hardware interface, which limits the use of existing SDP systems. We propose to use short-range acoustic communication for the initial pairing. Audio hardware is commonly available on existing off-the-shelf devices and can be accessed from user space without requiring firmware or hardware modifications. We improve upon previous approaches by designing Acoustic Integrity Codes (AICs): a modulation scheme that provides message authentication on the acoustic physical layer. We analyze their security and demonstrate that we can defend against signal cancellation attacks by designing signals with low autocorrelation. Our system can detect overshadowing attacks using a ternary decision function with a threshold. In our evaluation of this SDP scheme’s security and robustness, we achieve a bit error ratio below 0.1% for a net bit rate of 100 bps with a signal-to-noise ratio (SNR) of 14 dB. Using our open-source proof-of-concept implementation on Android smartphones, we demonstrate pairing between different smartphone models.
Typ des Eintrags: | Konferenzveröffentlichung |
---|---|
Erschienen: | 2020 |
Autor(en): | Putz, Florentin ; Álvarez, Flor ; Classen, Jiska |
Art des Eintrags: | Bibliographie |
Titel: | Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication |
Sprache: | Englisch |
Publikationsjahr: | 8 Juli 2020 |
Verlag: | ACM |
Buchtitel: | WiSec '20: Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks |
Veranstaltungstitel: | 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks |
Veranstaltungsort: | virtual Conference |
Veranstaltungsdatum: | 08.07.2020-10.07.2020 |
DOI: | 10.1145/3395351.3399420 |
URL / URN: | https://wisec2020.ins.jku.at/ |
Zugehörige Links: | |
Kurzbeschreibung (Abstract): | Secure Device Pairing (SDP) relies on an out-of-band channel to authenticate devices. This requires a common hardware interface, which limits the use of existing SDP systems. We propose to use short-range acoustic communication for the initial pairing. Audio hardware is commonly available on existing off-the-shelf devices and can be accessed from user space without requiring firmware or hardware modifications. We improve upon previous approaches by designing Acoustic Integrity Codes (AICs): a modulation scheme that provides message authentication on the acoustic physical layer. We analyze their security and demonstrate that we can defend against signal cancellation attacks by designing signals with low autocorrelation. Our system can detect overshadowing attacks using a ternary decision function with a threshold. In our evaluation of this SDP scheme’s security and robustness, we achieve a bit error ratio below 0.1% for a net bit rate of 100 bps with a signal-to-noise ratio (SNR) of 14 dB. Using our open-source proof-of-concept implementation on Android smartphones, we demonstrate pairing between different smartphone models. |
Freie Schlagworte: | physical-layer security, signal cancellation, secure device pairing, acoustic communication, trust, integrity codes, android, internet of things, digital signal processing, emergenCITY_KOM |
Fachbereich(e)/-gebiet(e): | 20 Fachbereich Informatik 20 Fachbereich Informatik > Sichere Mobile Netze Profilbereiche Profilbereiche > Cybersicherheit (CYSEC) LOEWE LOEWE > LOEWE-Zentren LOEWE > LOEWE-Zentren > CRISP - Center for Research in Security and Privacy LOEWE > LOEWE-Zentren > emergenCITY |
TU-Projekte: | HMWK|III L6-519/03/05.001-(0016)|emergenCity TP Bock |
Hinterlegungsdatum: | 22 Jul 2020 06:50 |
Letzte Änderung: | 19 Jan 2022 12:05 |
PPN: | |
Export: | |
Suche nach Titel in: | TUfind oder in Google |
Frage zum Eintrag |
Optionen (nur für Redakteure)
Redaktionelle Details anzeigen |