Drone to the Rescue: Relay-Resilient Authentication using Ambient Multi-sensing
Drone to the Rescue: Relay-Resilient Authentication using Ambient Multi-sensing
复制标题
DOI：
10.1007/978-3-662-45472-5_23
复制
发表时间：
2014-03
期刊：
影响因子：
--
通讯作者：
B. Shrestha;Nitesh Saxena;H. Truong;N. Asokan;N. Asokan
中科院分区：
文献类型：
--
作者：
B. Shrestha;Nitesh Saxena;H. Truong;N. Asokan;N. Asokan
许多移动的和无线认证系统容易受到中继攻击，由此两个非共存共谋实体可以通过简单地在合法证明者（）和验证者（）之间中继数据来破坏认证功能。例子包括涉及NFC和RFID设备的支付系统，以及基于零交互令牌的认证方法。利用上下文信息来确定接近度，或缺乏接近度，是最近提出的防御中继攻击的方法。先前的工作考虑了WiFi，蓝牙，GPS和音频作为不同的上下文模态的中继抵抗认证的目的。在本文中，我们探索了环境物理传感能力，以解决认证系统中的中继攻击问题。具体来说，我们考虑使用四个新的传感器模态，环境温度，精密气体，湿度，andaltitude，用于接近检测。使用一个现成的环境传感平台，称为Sensordrone，连接到Android设备，我们表明，结合这些不同的方式提供了一个强大的接近检测机制，产生非常低的误报（对中继攻击的安全性）和非常低的误报（良好的可用性）。与传统传感器（WiFi、蓝牙、GPS或音频）相比，这种多环境传感器模式的使用提供了独特的安全优势，因为它要求攻击者非法操纵物理环境的多个特征。
Many mobile and wireless authentication systems are prone to relay attacks whereby two non co-presence colluding entities can subvert the authentication functionality by simply relaying the data between a legitimate prover () and verifier (). Examples include payment systems involving NFC and RFID devices, and zero-interaction token-based authentication approaches. Utilizing the contextual information to determine-proximity, or lack thereof, is a recently proposed approach to defend against relay attacks. Prior work considered WiFi, Bluetooth, GPS and Audio as different contextual modalities for the purpose of relay-resistant authentication.In this paper, we explorepurely ambient physical sensing capabilitiesto address the problem of relay attacks in authentication systems. Specifically, we consider the use of four new sensor modalities,ambient temperature,precision gas,humidity, andaltitude, for-proximity detection. Using an off-the-shelf ambient sensing platform, calledSensordrone, connected to Android devices, we show thatcombiningthese different modalities provides a robust proximity detection mechanism, yielding very low false positives (security against relay attacks) and very low false negatives (good usability). Such use of multiple ambient sensor modalities offers unique security advantages over traditional sensors (WiFi, Bluetooth, GPS or Audio) because it requires the attacker tosimultaneouslymanipulate the multiple characteristics of thephysicalenvironment.