One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices
One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices
复制标题
DOI：
10.1109/sp46215.2023.10179369
复制
发表时间：
2023-05
期刊：
影响因子：
--
通讯作者：
Habiba Farrukh;Muslum Ozgur Ozmen;Faik Kerem Ors;Z. Berkay Celik
中科院分区：
文献类型：
--
作者：
Habiba Farrukh;Muslum Ozgur Ozmen;Faik Kerem Ors;Z. Berkay Celik
配对方案建立加密密钥，以确保物联网设备之间的通信安全。现有的依赖于可信中心实体、人类交互或共享同构上下文的配对方法容易出现单点故障，可用性有限，并且需要额外的传感器。最近的工作探索了具有异构传感模式的设备观察到的事件时间，作为分散配对共同存在的证明。然而，这种方法需要很高的配对时间，不能配对感知连续物理量的传感器，也不支持组配对，因此在许多物联网部署中不可行。在本文中，我们设计和开发了IoTCupid，这是一个具有异构传感模式的物联网设备的安全组配对系统，无需用户积极参与。IoTCupid的工作分为三个阶段：(a)使用一种新颖的基于窗口的派生技术检测瞬时和连续传感器感知的事件；(b)通过模糊聚类算法对事件进行分组以提取事件间时间；(c)通过分区组密码认证密钥交换方案在具有相同事件间时间的设备之间建立组密钥。我们用11个异构设备在智能家居和办公环境中评估了IoTCupid，并表明它有效地用2个组密钥对所有设备进行配对，并且配对开销最小。
Pairing schemes establish cryptographic keys to secure communication among IoT devices. Existing pairing approaches that rely on trusted central entities, human interaction, or shared homogeneous context are prone to a single point of failure, have limited usability, and require additional sensors. Recent work has explored event timings observed by devices with heterogeneous sensing modalities as proof of co-presence for decentralized pairing. Yet, this approach incurs high pairing time, cannot pair sensors that sense continuous physical quantities and does not support group pairing, making it infeasible for many IoT deployments. In this paper, we design and develop IoTCupid, a secure group pairing system for IoT devices with heterogeneous sensing modalities, without requiring active user involvement. IoTCupid operates in three phases: (a) detecting events sensed by both instant and continuous sensors with a novel window-based derivation technique, (b) grouping the events through a fuzzy clustering algorithm to extract inter-event timings, and (c) establishing group keys among devices with identical inter-event timings through a partitioned group password-authenticated key exchange scheme. We evaluate IoTCupid in smart home and office environments with 11 heterogeneous devices and show that it effectively pairs all devices with only 2 group keys with a minimal pairing overhead.