通过随机切换电源实现无外设设备配对
Peripheral-free Device Pairing by Randomly Switching Power
摘要：
物联网（IoT）的普及带来了安全问题。针对物联网无线通信场所的攻击（例如，中间人攻击）在过去十年中以惊人的速度增长。因此，允许在没有先前关系的情况下为物联网设备建立安全通信通道的配对是一项至关重要的功能。现有的安全配对协议需要辅助设备/外围设备（例如，显示器、扬声器和传感器）来实现认证，这对于诸如智能灯的低价设备是不可接受的。本文研究了如何设计一个无外设的安全配对协议。具体地说，我们设计的协议，称为交换配对，通过开箱即用的电源充电器和车载时钟，同时实现安全性和经济性。当用户想要配对两个或更多个设备时，他/她将配对设备连接到相同的电源，并且多次按下/释放开关开/关按钮。然后，按压和释放定时可以用于导出对称密钥。由于CC 2640 R2 F的流行，我们通过两个德州仪器（TI）的CC 2640 R2 F开发板实现了原型。广泛的实验和用户研究也进行了基准我们的协议在效率和安全性。
英文摘要：
The popularity of Internet-of-Things (IoT) comes with security concerns. Attacks against wireless communication venues of IoT (e.g., Man-in-the-Middle attacks) have grown at an alarming rate over the past decade. Pairing, which allows the establishment of the secure communicating channels for IoT devices without a prior relationship, is thus a paramount capability. Existing secure pairing protocols require auxiliary equipment/peripheral (e.g., displays, speakers and sensors) to achieve authentication, which is unacceptable for low-priced devices such as smart lamps. This paper studies how to design a peripheral-free secure pairing protocol. Concretely, we design the protocol, termed SwitchPairing, via out-of-box power supplying chargers and on-board clocks, achieving security and economics at the same time. When a user wants to pair two or more devices, he/she connects the pairing devices to the same power source, and presses/releases the switch on/off button several times. Then, the press and release timing can be used to derive symmetric keys. We implement a prototype via two CC2640R2F development boards from Texas Instruments (TI) due to its prevalence. Extensive experiments and user studies are also conducted to benchmark our protocol in terms of efficiency and security.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
