WearRF-CLA: Continuous Location Authentication with Wrist Wearables and UHF RFID

WearRF-CLA: Continuous Location Authentication with Wrist Wearables and UHF RFID
复制标题

DOI:
10.1145/3488932.3517426
复制
发表时间:
2022-05
期刊:
Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security
影响因子:
--
通讯作者:
Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Yanchao Zhang
Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Yanchao Zhang
中科院分区:
其他
文献类型:
--
作者:
Ang Li;Jiawei Li;Dianqi Han;Yan Zhang;Tao Li;Yanchao Zhang

文献摘要

被引文献

相似文献

连续位置身份验证 (CLA) 旨在持续自动验证受保护的室内区域中合法用户的实际存在。在必须限制物理存在的合法用户访问电力或物理资源的情况下,CLA 可以发挥重要作用。在本文中,我们提出了 WearRF-CLA,这是一种基于日益流行的腕部可穿戴设备和 UHF RFID 系统构建的新型 CLA 方案。 WearRF-CLA 探索了这样的观察结果:受保护的室内区域中的人类日常生活包括遵循可预测的状态转换的一系列人类状态(例如行走和坐着)。每个合法的 WearRF-CLA 用户都会在系统注册期间注册他/她的 RFID 标签和腕带设备。用户进入受保护区域后,WearRF-CLA 不断收集和处理腕式可穿戴设备的陀螺仪数据和 RFID 标签信号的相位数据,以验证三个因素来确定用户的实际存在/不在,而无需用户明确参与:(1) 传统 RFID 身份验证系统中的标签 ID,(2) 人状态链的有效性,以及 (3) 配对的腕式可穿戴设备和 RFID 标签与用户的持续共存。当且仅当所有三个因素都得到验证时,用户才能通过 CLA。对商品智能手表和 UHF RFID 设备进行的广泛用户实验证实了 WearRF-CLA 的极高安全性和极低的身份验证延迟。
Continuous location authentication (CLA) seeks to continuously and automatically verify the physical presence of legitimate users in a protected indoor area. CLA can play an important role in contexts where access to electrical or physical resources must be limited to physically present legitimate users. In this paper, we present WearRF-CLA, a novel CLA scheme built upon increasingly popular wrist wearables and UHF RFID systems. WearRF-CLA explores the observation that human daily routines in a protected indoor area comprise a sequence of human-states (e.g., walking and sitting) that follow predictable state transitions. Each legitimate WearRF-CLA user registers his/her RFID tag and also wrist wearable during system enrollment. After the user enters a protected area, WearRF-CLA continuously collects and processes the gyroscope data of the wrist wearable and the phase data of the RFID tag signals to verify three factors to determine the user's physical presence/absence without explicit user involvement: (1) the tag ID as in a traditional RFID authentication system, (2) the validity of the human-state chain, and (3) the continuous coexistence of the paired wrist wearable and RFID tag with the user. The user passes CLA if and only if all three factors can be validated. Extensive user experiments on commodity smartwatches and UHF RFID devices confirm the very high security and low authentication latency of WearRF-CLA.