PhyAuth: Physical-Layer Message Authentication for ZigBee Networks
PhyAuth: Physical-Layer Message Authentication for ZigBee Networks
复制标题
DOI：
--
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Tingru Zhu
中科院分区：
文献类型：
--
作者：
Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Tingru Zhu
ZigBee是物联网（IoT）网络的流行无线通信标准。由于每个ZigBee网络都使用基于公共网络密钥的逐跳网络层消息认证，因此极易受到数据包注入攻击，其中攻击者利用受损的网络密钥从任何欺骗地址注入任意假数据包，以破坏网络操作并消耗网络/设备资源。在本文中，我们提出了PhyAuth，一个物理层逐跳消息认证框架，以抵御ZigBee网络中的数据包注入攻击。PhyAuth的关键思想是让每个ZigBee发射机在其PHY信号中嵌入一个PHY一次性密码（称为POTP），该密码来自设备特定的密钥和有效的加密哈希函数。真实的POTP用作发送器对相应分组的PHY传输许可。PhyAuth根据ZigBee PHY信号的不同特征提供了三种方案来嵌入、检测和验证POTP。此外，PhyAuth涉及轻量级PHY信号处理，并且不改变ZigBee协议栈。全面的USRP实验证实，PhyAuth可以有效地检测假数据包，误报率和漏报率非常低，同时对正常数据传输的负面影响可以忽略不计。
ZigBee is a popular wireless communication standard for Internet of Things (IoT) networks. Since each ZigBee network uses hop-by-hop network-layer message authentication based on a common network key, it is highly vulnerable to packet-injection attacks, in which the adversary exploits the compromised network key to inject arbitrary fake packets from any spoofed address to disrupt network operations and consume the network/device resources. In this paper, we present PhyAuth, a PHY hop-by-hop message authentication framework to defend against packet-injection attacks in ZigBee networks. The key idea of PhyAuth is to let each ZigBee transmitter embed into its PHY signals a PHY one-time pass-word (called POTP) derived from a device-specific secret key and an efficient cryptographic hash function. An authentic POTP serves as the transmitter’s PHY transmission permission for the corresponding packet. PhyAuth provides three schemes to embed, detect, and verify POTPs based on different features of ZigBee PHY signals. In addition, PhyAuth involves lightweight PHY signal processing and no change to the ZigBee protocol stack. Comprehensive USRP experiments confirm that PhyAuth can efficiently detect fake packets with very low false-positive and false-negative rates while having a negligible negative impact on normal data transmissions.