Touch Well Before Use: Intuitive and Secure Authentication for IoT Devices
Touch Well Before Use: Intuitive and Secure Authentication for IoT Devices
复制标题
DOI：
10.1145/3300061.3345434
复制
发表时间：
2019-08
期刊：
影响因子：
--
通讯作者：
Xiaopeng Li;Fengyao Yan;F. Zuo;Qiang Zeng;Lannan Luo
中科院分区：
文献类型：
--
作者：
Xiaopeng Li;Fengyao Yan;F. Zuo;Qiang Zeng;Lannan Luo
物联网（IoT）密集部署在智能环境中，例如家庭，工厂和实验室，许多人可以物理访问IoT设备。因此，如何验证在这些设备上操作的用户是一个重要的问题。物联网设备通常缺乏传统的用户界面，如键盘和鼠标，这使得传统的身份验证方法不适用。我们提出了一种虚拟感测技术，该技术允许物联网设备虚拟地感测设备上的用户“抚摸”（以一些非常简单的触摸的形式，持续约2秒）。基于这种技术，我们建立了一个安全和直观的身份验证方法，通过比较设备和用户腕带捕获的触摸操作感测到的设备用户进行身份验证。该认证方法是高度安全的，因为需要物理操作，而不是基于接近度。它也是直观的，采用非常简单的认证操作，例如，点击按钮，旋转旋钮，滑动触摸屏。与最先进的方法不同，我们的方法不需要对设备进行任何硬件修改，因此可以应用于商业现货（COTS）设备。我们构建原型并对其进行全面评估，以展示其高效性、安全性、可用性和效率。
Internet of Things (IoT) are densely deployed in smart environments, such as homes, factories and laboratories, where many people have physical access to IoT devices. How to authenticate users operating on these devices is thus an important problem. IoT devices usually lack conventional user interfaces, such as keyboards and mice, which makes traditional authentication methods inapplicable. We present a virtual sensing technique that allows IoT devices to virtually sense user 'petting' (in the form of some very simple touches for about 2 seconds) on the devices. Based on this technique, we build a secure and intuitive authentication method that authenticates device users by comparing the petting operations sensed by devices and those captured by the user wristband. The authentication method is highly secure as physical operations are required, rather than based on proximity. It is also intuitive, adopting very simple authentication operations, e.g., clicking buttons, twisting rotary knobs, and swiping touchscreens. Unlike the state-of-the-art methods, our method does not require any hardware modifications of devices, and thus can be applied to commercial off-the-shelf (COTS) devices. We build prototypes and evaluate them comprehensively, demonstrating their high effectiveness, security, usability, and efficiency.