Zero-Interaction Security-Towards Sound Experimental Validation

Fomichev, Mikhail; Maaß, Max; Hollick, Matthias

doi:10.1145/3372300.3372304

Cited by 1 publication

(2 citation statements)

References 6 publications

(12 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For the altitude signals, we perform mean subtraction before filtering. This helps to (1) remove offset between barometer sensors caused by hardware and temperature variation [14], (2) eliminate atmospheric pressure, accentuating altitude changes in the signal. We adapt filter parameters for signal smoothing and noise reduction from related work [6,17,27].…”

Section: Methodsmentioning

confidence: 99%

See 1 more Smart Citation

FastZIP

Fomichev

Hesse

Almon

et al. 2021

Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services

Self Cite

View full text Add to dashboard Cite

With the advent of the Internet of Things (IoT), establishing a secure channel between smart devices becomes crucial. Recent research proposes zero-interaction pairing (ZIP), which enables pairing without user assistance by utilizing devices' physical context (e.g., ambient audio) to obtain a shared secret key. The state-of-the-art ZIP schemes suffer from three limitations: (1) prolonged pairing time (i.e., minutes or hours), (2) vulnerability to brute-force offline attacks on a shared key, and (3) susceptibility to attacks caused by predictable context (e.g., replay attack) because they rely on limited entropy of physical context to protect a shared key. We address these limitations, proposing FastZIP, a novel ZIP scheme that significantly reduces pairing time while preventing offline and predictable context attacks. In particular, we adapt a recently introduced Fuzzy Password-Authenticated Key Exchange (fPAKE) protocol and utilize sensor fusion, maximizing their advantages. We instantiate FastZIP for intra-car device pairing to demonstrate its feasibility and show how the design of FastZIP can be adapted to other ZIP use cases. We implement FastZIP and evaluate it by driving four cars for a total of 800 km. We achieve up to three times shorter pairing time compared to the state-of-the-art ZIP schemes while assuring robust security with adversarial error rates below 0.5%. CCS CONCEPTS• Security and privacy → Security services; • Computer systems organization → Embedded and cyber-physical systems.

show abstract

Section: Methodsmentioning

confidence: 99%

“…To address this problem, recent research proposes zero-interaction pairing (ZIP) utilizing devices' context to derive a shared secret key without user involvement [14,17,28,37]. Such context is represented as a set of sensor modalities (e.g., audio, acceleration) collected by devices from their ambient environment.…”

Section: Introductionmentioning

confidence: 99%