Instant and Robust Authentication and Key Agreement among Mobile Devices

Xi, Wei; Qian, Chen; Han, Jinsong; Zhao, Kun; Zhong, Sheng; Li, Xiangyang; Zhao, Jizhong

doi:10.1145/2976749.2978298

Cited by 82 publications

(54 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To overcome this issue, many recent designs appear for mobile platforms by utilizing the on-board sensory data, such as acoustic data, motion sensor data, bio-sensor data, etc. However, through our study, we find that they mainly trade the sensor's availability for other two further restrictions -either the system works in a very short pairing distance, e.g., 1.25 cm in Proximate [8], 5cm in TDS [4], or in a limited set of pre-defined contexts, e.g., in certain environments, when users are performing certain activities [10,11], etc. The designs requiring short pairing distance are not preferable because people need to keep social distance (usually >1.5 m) in their daily life since the outbreak of COVID-19.…”

Section: Motivationmentioning

confidence: 99%

“…A successful set of pioneer efforts is to leverage wireless channel information [1,[3][4][5][6]12], such as Received Signal Strength Indicator (RSSI) and Channel State Information (CSI). These methods are based on wireless channel reciprocity which means the channel characteristics (RSSI or CSI) measured between two devices by exchanging a pair of probe packets in quick succession, will be nearly the same.…”

Section: Motivationmentioning

confidence: 99%

“…However, RSSI-based methods suffer from low key generation rate and predictable channel attack [3,5]. CSI-based systems can improve key generation rate greatly and are robust to predictable channel attack [4]. However, the major limitation is it requires special toolkits to extract CSI from wireless card, and currently CSI can only be extracted from a limited number of chipsets such as Intel's 5300 NIC [13,14].…”

Section: Motivationmentioning

confidence: 99%

“…Channel reciprocity means the channel characteristics (gains, phase shifts, and delays) measured between two devices by exchanging a pair of probe packets within channel coherence time will be very close [3]. For wireless channel, the widely used channel characteristics include RSSI [3,23] and CSI [1,4,6]. Unfortunately, the microphone cannot report such channel information.…”

Section: Feasibility Studymentioning

confidence: 99%

See 3 more Smart Citations

Inaudible acoustic signal based key agreement system for IoT devices

Xue³

et al. 2020

Proceedings of the 18th Conference on Embedded Networked Sensor Systems

View full text Add to dashboard Cite

Secure Device-to-Device (D2D) communication is becoming increasingly important with the ever-growing number of Internetof-Things (IoT) devices in our daily life. To achieve secure D2D communication, the key agreement between different IoT devices without any prior knowledge is becoming desirable. Although various approaches have been proposed in the literature, they suffer from a number of limitations, such as low key generation rate and short pairing distance. In this paper, we present InaudibleKey, an inaudible acoustic signal based key generation protocol for mobile devices. Based on acoustic channel reciprocity, InaudibleKey exploits the acoustic channel frequency response of two legitimate devices as a common secret to generating keys. InaudibleKey employs several novel technologies to significantly improve its performance. We conduct extensive experiments to evaluate the proposed system in different real environments. Compared to state-of-the-art works, InaudibleKey improves key generation rate by 3-145 times, extends pairing distance by 3.2-44 times, and reduces information reconciliation counts by 2.5-16 times. Security analysis demonstrates that InaudibleKey is resilient to a number of malicious attacks. We also implement InaudibleKey on modern smartphones and resourcelimited IoT devices. Results show that it is energy-efficient and can run on both powerful and resource-limited IoT devices without incurring excessive resource consumption.

show abstract

Section: Motivationmentioning

confidence: 99%

Section: Motivationmentioning

confidence: 99%

Section: Motivationmentioning

confidence: 99%

Section: Feasibility Studymentioning

confidence: 99%

See 2 more Smart Citations

Inaudible acoustic signal based key agreement system for IoT devices

Xue³

et al. 2020

Proceedings of the 18th Conference on Embedded Networked Sensor Systems

View full text Add to dashboard Cite

show abstract

“…Xi et al 1 have designed an AKA protocol for mobile devices. It utilizes channel state information as the common secret between the honest devices.…”

Section: Related Workmentioning

confidence: 99%

Security and Privacy enforced wireless mobile communication using PI-MAKA protocol design

Kumar

Prabakaran

2019

Measurement and Control

View full text Add to dashboard Cite

The fast development of mobile networks and compact mobile devices bring attention to the users for wireless mobile communication. But providing security and protecting the privacy of users are the main challenges of wireless mobile communication. Recently, Authenticated Key Agreement protocols are used for secure and reliable communication in wireless mobile communication. However, the User-to-User Mutual Authentication and Key Agreement scheme is based on bilinear pairings, which involves relatively high computation cost when compared to elliptic curve scalar point multiplication. Hence, in this paper, we propose a Pairing-Free Identity-Based Mutual Authentication and Key Agreement protocol for wireless mobile communications. It consists of the following phases: Setup and Key generation, Mobility Management Entity authentication and Proxy Signature generation, Proxy Signature verification and User-to-User authentication. Experimental results show that Pairing-Free Identity-Based Mutual Authentication and Key Agreement attains significantly less computational and communication cost when compared to User-to-User Mutual Authentication and Key Agreement scheme.

show abstract