G2Auth: secure mutual authentication for drone delivery without special user-side hardware
G2Auth: secure mutual authentication for drone delivery without special user-side hardware
复制标题
DOI：
10.1145/3498361.3538941
复制
发表时间：
2022-06
期刊：
影响因子：
--
通讯作者：
Chuxiong Wu;Xiaopeng Li;Lannan Luo;Qiang Zeng
中科院分区：
文献类型：
--
作者：
Chuxiong Wu;Xiaopeng Li;Lannan Luo;Qiang Zeng
由于其成本效益和及时性，使用无人机（UAV）（无人机交付）的包装交付正在引起人们的注意。身份验证对于确保攻击者的无人机或交付给攻击者不会拾取软件包至关重要。由于送货无人机的昂贵并且可能携带敏感或昂贵的套餐，因此，除非经过身份验证，否则无人机不应非常接近一个人；因此，需要人形无人机物理接触的常规身份验证方法不起作用。用于无人机交付的现有身份验证方法遭受以下限制的一个或多个：（1）需要特殊的用户端硬件； （2）仅执行单向身份验证； （3）容易受到继电器攻击； （4）存在兼容性问题。我们介绍了第一个系统，称为engry-to auth（简称G2Auth），该系统支持用户和无人机之间的相互认证，而没有这些限制。用户挥舞着握着智能手机进行身份验证的手。评估表明它是安全，准确，可用和健壮的。
Because of its cost effectiveness and timeliness, package delivery using unmanned aerial vehicles (UAVs), called drone delivery, is drawing growing attention. Authentication is critical for ensuring that a package is not picked up by an attacker's drone or delivered to an attacker. As delivery drones are costly and may carry sensitive or expensive packages, a drone should not get very close to a person unless she is authenticated; thus, conventional authentication approaches that require human-drone physical contact do not work. Existing authentication methods for drone delivery suffer from one or multiple of the following limitations: (1) requiring special user-side hardware; (2) enforcing one-way authentication only; (3) being vulnerable to relay attacks; (4) having compatibility issues. We present the first system, named Greet-to-Auth (G2Auth, for short), that supports mutual authentication between a user and a drone, without these limitations. A user waves her hand holding a smartphone to conduct the authentication. The evaluation shows that it is secure, accurate, usable, and robust.