InaudibleKey：基于通用不可闻声学信号的移动设备密钥协商协议
InaudibleKey: Generic Inaudible Acoustic Signal based Key Agreement Protocol for Mobile Devices
摘要：
随着我们日常生活中物联网（IoT）设备数量的不断增长，安全的设备到设备（D2 D）通信变得越来越重要。为了实现安全的D2 D通信，在没有任何先验知识的情况下在不同IoT设备之间进行密钥协商变得合乎需要。虽然在文献中已经提出了各种方法，但它们受到许多限制，例如密钥生成速率低和配对距离短。在本文中，我们提出了InaudibleKey，一个基于听不见的声学信号的移动设备的密钥生成协议。基于声学信道互易性，InaudibleKey利用两个合法设备的声学信道频率响应作为生成密钥的共同秘密。InaudibleKey采用了几种新技术来显着提高其性能。我们进行了广泛的实验，以评估所提出的系统在不同的真实环境。与现有技术相比，InaudibleKey将密钥生成速率提高了3-145倍，将配对距离延长了3.2-44倍，并将信息协调计数减少了2.5-16倍。安全性分析表明，InaudibleKey能够抵御多种恶意攻击。我们还在现代智能手机和资源有限的物联网设备上实施InaudibleKey。结果表明，它是节能的，可以在功能强大和资源有限的物联网设备上运行，而不会导致过度的资源消耗。
英文摘要：
Secure Device-to-Device (D2D) communication is becoming increasingly important with the ever-growing number of Internet-of-Things (IoT) devices in our daily life. To achieve secure D2D communication, the key agreement between different IoT devices without any prior knowledge is becoming desirable. Although various approaches have been proposed in the literature, they suffer from a number of limitations, such as low key generation rate and short pairing distance. In this paper, we present InaudibleKey, an inaudible acoustic signal-based key generation protocol for mobile devices. Based on acoustic channel reciprocity, InaudibleKey exploits the acoustic channel frequency response of two legitimate devices as a common secret to generating keys. InaudibleKey employs several novel technologies to significantly improve its performance. We conduct extensive experiments to evaluate the proposed system in different real environments. Compared to state-of-the-art works, InaudibleKey improves key generation rate by 3-145 times, extends pairing distance by 3.2-44 times, and reduces information reconciliation counts by 2.5-16 times. Security analysis demonstrates that InaudibleKey is resilient to a number of malicious attacks. We also implement InaudibleKey on modern smartphones and resource-limited IoT devices. Results show that it is energy-efficient and can run on both powerful and resource-limited IoT devices without incurring excessive resource consumption.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
