Acoustic integrity codes

Putz, Florentin; Álvarez, Flor; Classen, Jiska

doi:10.1145/3395351.3399420

Cited by 9 publications

(1 citation statement)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Our proof-of-concept implementation runs on Android devices and is available as open-source software [31]. We can receive and transmit AIC signals, or we can record a WAV file for later analysis.…”

Section: Proof Of Conceptmentioning

confidence: 99%

Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication

Putz,

Álvarez,

Classen

2020

Preprint

Self Cite

View full text Add to dashboard Cite

Secure Device Pairing (SDP) relies on an out-of-band channel to authenticate devices. This requires a common hardware interface, which limits the use of existing SDP systems. We propose to use short-range acoustic communication for the initial pairing. Audio hardware is commonly available on existing off-the-shelf devices and can be accessed from user space without requiring firmware or hardware modifications.We improve upon previous approaches by designing Acoustic Integrity Codes (AICs): a modulation scheme that provides message authentication on the acoustic physical layer. We analyze their security and demonstrate that we can defend against signal cancellation attacks by designing signals with low autocorrelation. Our system can detect overshadowing attacks using a ternary decision function with a threshold. In our evaluation of this SDP scheme's security and robustness, we achieve a bit error ratio below 0.1% for a net bit rate of 100 bps with a signal-to-noise ratio (SNR) of 14 dB. Using our open-source proof-of-concept implementation on Android smartphones, we demonstrate pairing between different smartphone models. CCS CONCEPTS• Security and privacy → Authentication; Mobile and wireless security; Security protocols; Key management; • Networks → Mobile networks; Wireless access networks; Cyber-physical networks; • Hardware → Digital signal processing.

show abstract

Section: Proof Of Conceptmentioning

confidence: 99%

Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication

Putz,

Álvarez,

Classen

2020

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

RoV: receiving files from voice calls using dual-tone multi-frequency method

2021

View full text Add to dashboard Cite

Securing Implantable Medical Devices Using Ultrasound Waves

et al. 2021

View full text Add to dashboard Cite

Modern Implantable Medical Devices (IMDs) are vulnerable to security attacks because of their wireless connectivity to the outside world. One of the main security challenges is establishing trust between the IMD and an external reader/programmer in order to facilitate secure communication. Numerous device-pairing schemes have been proposed to address this specific challenge. However, they alone cannot protect against a battery-depletion attack in which the adversary is able to keep the IMD occupied with continuous authentication requests until the battery empties. As a result, energy harvesting has been employed as an ancillary mechanism for implementing Zero-Power Defense (ZPD) functionality in order to protect against such a low-cost attack. In this paper, we propose SecureEcho, a device-pairing scheme based on MHz-range ultrasound that establishes trust between the IMD and an external reader. In addition, SecureEcho achieves ZPD without requiring any energy harvesting, which significantly reduces the design complexity. We also provide a proof-of-concept implementation and a first ever security evaluation of the ultrasound channel, which proves that it is infeasible for the attacker to eavesdrop or insert messages even from a range of a few millimeters.INDEX TERMS Authentication protocol, battery-depletion attack, body-coupled communication, denialof-service attack, IMD, implantable medical device, ultrasound, zero-power defense This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.

show abstract

Acoustic integrity codes

Cited by 9 publications

References 28 publications

Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication

Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication

RoV: receiving files from voice calls using dual-tone multi-frequency method

Securing Implantable Medical Devices Using Ultrasound Waves

Contact Info

Product

Resources

About