Spontaneous mobile device authentication based on sensor data

Information Security Technical Report

Volumn 13, Issue 3, 2008, Pages 136-150

  Mayrhofer, Rene ^a   Gellersen, Hans ^b  

^a UNIVERSITY OF VIENNA   (Austria)

^b LANCASTER UNIVERSITY   (United Kingdom)

Author keywords

Authentication; Device pairing; Mobile computing; Spontaneous interaction; Ubiquitous computing

Indexed keywords

ACCESS CONTROL; AUTHENTICATION; BLUETOOTH; CELLULAR TELEPHONE SYSTEMS; LOCAL AREA NETWORKS; MOBILE COMPUTING; MOBILE DEVICES; OBJECT RECOGNITION; PORTABLE EQUIPMENT; SENSORS; TELECOMMUNICATION EQUIPMENT; UBIQUITOUS COMPUTING; USER INTERFACES; WIRELESS LOCAL AREA NETWORKS (WLAN); WIRELESS TELECOMMUNICATION SYSTEMS;

ACTIVE ATTACKS; AUTHENTICATION METHODS; BLUETOOTH HEADSETS; DEVICE AUTHENTICATIONS; DEVICE PAIRING; INFRA STRUCTURES; OUT OF BANDS; PRIORI INFORMATIONS; SENSOR DATUMS; SPATIAL REFERENCES; SPONTANEOUS INTERACTION; VISIBLE LASERS; WIRELESS COMMUNICATIONS; WIRELESS LAN ACCESSES;

WIRELESS NETWORKS;

EID: 55749104368     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2008.10.005     Document Type: Article

References (38)

1. Balfanz D., Durfee G., Grinter R.E., Smetters D.K., and Stewart P. Network-in-a-box: how to set up a secure wireless network in under a minute. Proceedings of the 13th USENIX security symposium (August 2004), USENIX 207-222
2. Batina L., Mentens N., and Verbauwhede I. Side-channel issues for designing secure hardware implementations. Proceedings of IOLTS: IEEE online testing symposium (2005), IEEE CS Press 118-121
3. Bichler D., Stromberg G., Huemer M., and Löw M. Key generation based on acceleration data of shaking processes. Proceedings of UbiComp 2007: ubiquitous computing. LNCS vol. 4717 (September 2007), Springer-Verlag 304-317
4. Čagalj M., Čapkun S., and Hubaux J.-P. Key agreement in peer-to-peer wireless networks. IEEE (Special Issue on Cryptography and Security) 94 (2006) 467-478
5. Diffie W., and Hellman M.E. New directions in cryptography. IEEE Transactions on Information Theory 22 6 (1976) 644-654
6. Eronen P, Tschofenig H. RFC4279: Pre-shared key ciphersuites for transport layer security (TLS); December 2005.
7. Ferguson N., and Schneier B. Practical cryptography (2003), Wiley Publishing
8. Gehrmann C., Mitchell C.J., and Nyberg K. Manual authentication for wireless devices. RSA Cryptobytes 7 1 (2004) 29-37
9. Goodrich M.T., Sirivianos M., Solis J., Tsudik G., and Uzun E. Loud and clear: human verifiable authentication based on audio. Proceedings of ICDCS 2006 (July 2006), IEEE CS Press 10
10. Dominique Guinard, Sara Streng, Hans Gellersen. Relategateways: a user interface for spontaneous mobile interaction with pervasive services. In: CHI 2007 workshop on mobile spatial interaction; 2007.
11. Hazas M., Kray C., Gellersen H., Agbota H., Kortuem G., and Krohn A. A relative positioning system for co-located mobile devices. Proceedings of MobiSys 2005 (June 2005), ACM Press 177-190
12. Hoepman J.-H. The emphemeral pairing problem. Proceedings of eighth international conference on financial cryptography (February 2004), Springer-Verlag 212-226
13. Holmquist L.E., Mattern F., Schiele B., Alahuhta P., Beigl M., and Gellersen H.-W. Smart-its friends: a technique for users to easily establish connections between smart artefacts. Proceedings of UbiComp 2001 (September 2001), Springer-Verlag 116-122
14. Huynh T., and Schiele B. Analyzing features for activity recognition. Proceedings of Soc-EUSAI 2005, ACM international conference proceeding series (October 2005), ACM Press 159-163
15. Kindberg T., and Zhang K. Secure spontaneous device association. Proceedings of UbiComp 2003 (October 2003), Springer-Verlag 124-131
16. Kindberg T., and Zhang K. Validating and securing spontaneous associations between wireless devices. Proceedings of ISC'03 (October 2003), Springer-Verlag 44-53
17. Kindberg T., Zhang K., and Im S.H. Evidently secure device associations. Technical report HPL-2005-40 (March 2005), HP Laboratories, Bristol
18. Darko Kirovski, Mike Sinclair, David Wilson. The Martini synch. Technical report MSR-TR-2007-123, Microsoft Research; September 2007.
19. Kortuem G., Kray C., and Gellersen H. Sensing and visualizing spatial relations of mobile devices. Proceedings of UIST 2005 (October 2005), ACM Press 93-102
20. Krawczyk H, Bellare M, Canetti R. RFC2104:HMAC: keyed-hashing for message authentication; February 1997.
21. Lester J., Hannaford B., and Borriello G. "Are you with me? " - using accelerometers to determine if two devices are carried by the same person. Proceedings of Pervasive 2004 (April 2004), Springer-Verlag 33-50
22. Mayrhofer R. A context authentication proxy for IPSec using spatial reference. Proceedings of TwUC 2006: first international workshop on trustworthy ubiquitous computing (December 2006), Austrian Computer Society (OCG) 449-462
23. Mayrhofer R. The candidate key protocol for generating secret shared keys from similar sensor data streams. Proceedings of ESAS 2007: fourth European workshop on security and privacy in ad hoc and sensor networks. LNCS vol. 4572 (July 2007), Springer-Verlag 1-15
24. Mayrhofer R., and Gellersen H. On the security of ultrasound as out-of-band channel. Proceedings of IPDPS 2007: 21st IEEE international parallel and distributed processing symposium (March 2007), IEEE CS Press 321 [Track SSN 2007: third international workshop on security in systems and networks]
25. Mayrhofer R., and Gellersen H. Shake well before use: authentication based on accelerometer data. Proceedings of Pervasive 2007: fifth international conference on Pervasive Computing. LNCS vol. 4480 (May 2007), Springer-Verlag 144-161
26. Mayrhofer R., Gellersen H., and Hazas M. An authentication protocol using ultrasonic ranging. Technical report COMP-002-2006 (October 2006), Lancaster University
27. Mayrhofer R., Gellersen H., and Hazas M. Security by spatial reference: using relative positioning to authenticate devices for spontaneous interaction. Proceedings of UbiComp 2007: ninth international conference on ubiquitous computing. LNCS vol. 4717 (September 2007), Springer-Verlag 199-216
28. Mayrhofer R., Ortner F., Ferscha A., and Hechinger M. Securing passive objects in mobile ad-hoc peer-to-peer networks. In: Focardi R., and Zavattaro G. (Eds). Electronic notes in theoretical computer science vol. 85.3 (June 2003), Elsevier Science
29. Mayrhofer R., and Welch M. A human-verifiable authentication protocol using visible laser light. Proceedings of ARES 2007: second international conference on availability, reliability and security (April 2007), IEEE CS Press 1143-1147 [Track WAIS 2007: first international workshop on advances in information security]
30. McCune J.M., Perrig A., and Reiter M.K. Seeing-is-believing: using camera phones for human-verifiable authentication. Proceedings of IEEE symposium on security and privacy (May 2005), IEEE CS Press 110-124
31. Nicholson A.J., Smith I.E., Hughes J., and Noble B.D. LoKey: leveraging the SMS network in decentralized, end-to-end trust establishment. Proceedings of Pervasive 2006 (May 2006), Springer-Verlag 202-219
32. Patel S.N., and Abowd G.D. A 2-way laser-assisted selection scheme for handhelds in a physical environment. Proceedings of UbiComp 2003 (October 2003), Springer-Verlag 200-207
33. Ringwald M. Spontaneous interaction with everyday devices using a PDA. In: Proceedings of workshop on supporting spontaneous interaction in ubiquitous computing settings; September 2002.
34. Rivest R.L., and Shamir A. How to expose an eavesdropper. Commununications of ACM 27 4 (1984) 393-394
35. Shaked Y., and Wool A. Cracking the Bluetooth PIN. Proceedings of MobiSys 2005 (June 2005), ACM Press 39-50
36. Stajano F., and Anderson R. The resurrecting duckling: security issues for ad-hoc wireless networks. Proceedings of seventh international workshop on security protocols (April 1999), Springer-Verlag 172-194
37. Vaudenay S. Secure communications over insecure channels based on short authenticated strings. Proceedings of CRYPTO 2005 (August 2005), Springer-Verlag
38. Wong F.-L., and Stajano F. Multi-channel protocols. Proceedings of security protocols workshop 2005 (2006), Springer-Verlag