Secure device pairing using audio

Claycomb, William R.; Shin, Dongwan

doi:10.1109/ccst.2009.5335562

Cited by 7 publications

(4 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Like radio signals, audio signals also attenuate over distance. Claycomb and Shin [2009] presented "UbiSound," a technique that exploits this for exchange of authentication data over audio, where devices have to be within close proximity to "hear" the data reliably.…”

Section: Proximitymentioning

confidence: 99%

See 1 more Smart Citation

A Survey of User Interaction for Spontaneous Device Association

2014

View full text Add to dashboard Cite

In a wireless world, users can establish ad hoc virtual connections between devices that are unhampered by cables. This process is known as spontaneous device association. A wide range of interactive protocols and techniques have been demonstrated in both research and practice, predominantly with a focus on security aspects. In this article, we survey spontaneous device association with respect to the user interaction it involves. We use a novel taxonomy to structure the survey with respect to the different conceptual models and types of user action employed for device association. Within this framework, we provide an in-depth survey of existing techniques discussing their individual characteristics, benefits, and issues.

show abstract

Section: Proximitymentioning

confidence: 99%

“…Similarly, people perceive fingerprint biometrics as robust, because they are used as evidence in law enforcement [Coventry et al 2003]. However, iris verification-using the complex visual texture of the iris for distinctive identification-is in fact one of the most reliable types of biometrics [Coventry 2005].…”

Section: Biometricmentioning

confidence: 99%

A Survey of User Interaction for Spontaneous Device Association

2014

View full text Add to dashboard Cite

show abstract

“…In Amigo [17], Wi-Fi radio signal strengths were compared across multiple devices to determine if two devices are in proximity of one another. In Ubisound, devices securely paired with one another when they determined that they were hearing the same audio [3]. Lastly, in [4], imagery from multiple back facing cameras were combined to determine 1) if two devices are looking at the same physical area, and 2) the relative The Powers of Co-location CSCW 2015, March 14-18, 2015, Vancouver, BC, Canada orientation of these devices, and this information was used to opportunistically group devices and share information.…”

Section: Related Workmentioning

confidence: 99%

Using Multiple Contexts to Detect and Form Opportunistic Groups

Freitas

Dey

2015

Proceedings of the 18th ACM Conference on Computer Supported Cooperative Work &Amp; Social Computing

View full text Add to dashboard Cite

We present a new technique that allows mobile devices to opportunistically group with one another, thus improving their ability to facilitate one-time or spontaneous exchanges of information. In our approach, devices share context with each other, and form groups when these readings are found to be similar to one another. Through a formative study, we examine the limitations of using a single type of context to form groups, and show how leveraging multiple contexts improves our ability to detect and form relevant groupings. We then present DIDJA, a robust software toolkit that automatically collects and analyzes contextual information in order to find and form groups. Through two prototypes, we demonstrate how DIDJA enhances existing user experiences, and show how developers can use our toolkit to easily facilitate frictionless collaborations between users and their environment. We then perform an extended experiment and show how DIDJA is able to accurately form groups under realistic conditions.

show abstract

“…Such form of authentication proposes authenticated information exchange between mobile devices using several methods different than the standard RF channel [26]. These are called out-of-band, side-channels or location-limited channels (LLCs) [28], and include audio, visual, infrared, ultrasound, and other forms of transmission [7,23,24,27]. Such techniques allow the receiver to physically verify the source of the transmission.…”

Section: Authentication Definitionmentioning

confidence: 99%

Detecting (absent) app-to-app authentication on cross-device short-distance channels

Cristalli

Bruschi

et al. 2019

Proceedings of the 35th Annual Computer Security Applications Conference

View full text Add to dashboard Cite

Short-distance or near-field communication is increasingly used by mobile apps for interacting or exchanging data in a cross-device fashion. In this paper, we identify a security issue, namely crossdevice app-to-app communication hijacking (or CATCH), that affect Android apps using short-distance channels (e.g., Bluetooth and Wi-Fi-Direct). This issue causes unauthenticated or malicious appto-app interactions even when the underlying communication channels are authenticated and secured. In addition to discovering the security issue, we design an algorithm based on data-flow analysis for detecting the presence of CATCH in Android apps. Our algorithm checks if a given app contains an app-to-app authentication scheme, necessary for preventing CATCH. We perform experiments on a set of Android apps and show the CATCH problem is always present on the whole analyzed applications set. We also discuss the impact of the problem in real scenarios by presenting two real case studies. At the end of the paper we reported limitations of our model along with future improvements. CCS CONCEPTS • Security and privacy → Authentication; Mobile and wireless security; Software and application security.

show abstract

Secure device pairing using audio

Cited by 7 publications

References 15 publications

A Survey of User Interaction for Spontaneous Device Association

A Survey of User Interaction for Spontaneous Device Association

Using Multiple Contexts to Detect and Form Opportunistic Groups

Detecting (absent) app-to-app authentication on cross-device short-distance channels

Contact Info

Product

Resources

About