用于医疗植入物的即插即用抗量子BLE配对：基于NFC带外信道
Plug-and-Play Quantum-Resistant BLE Pairing for Medical Implants via NFC Out-of-Band
浏览论文内容
中文总结 AI 辅助
针对植入式医疗设备缺乏用户界面且BLE配对易受量子攻击的问题，提出一种基于NFC带外信道的轻量级即插即用后量子配对协议，在NFC上执行KEM，无需修改BLE栈，测试表明电池寿命影响极小。
中文摘要 AI 辅助
蓝牙低功耗（BLE）配对为安全设备通信奠定了加密基础。然而，主流的抗中间人（MITM）配对方法（如数字比较和口令输入）需要用户界面，而植入式医疗设备（IMD）本质上缺乏这些界面，这使得近场通信（NFC）辅助的带外（OOB）配对成为一种有吸引力的替代方案。现有的NFC辅助OOB方案认证的是经典的BLE密钥交换，该交换仍易受量子攻击，同时NFC信道本身在更强的威胁模型下易遭受窃听和主动注入。为解决这些局限，我们提出了一种轻量级、即插即用的基于NFC的OOB配对协议，该协议完全在NFC信道上执行后量子密钥封装机制（KEM），确保没有共享秘密通过NFC传输，同时减少配对期间的长距离射频（RF）暴露。所提出的协议无需对BLE协议栈进行任何修改，并固有地抵抗RF电池耗尽攻击。在IMD类概念验证测试平台上的评估表明，后量子OOB配对在资源受限设备上是可行的，相对于易受MITM攻击的Just Works方法，在操作使用模型下，Kyber-1024的预计电池寿命减少不到0.57%，FireSABER的减少不到0.56%。
英文摘要
Bluetooth Low Energy (BLE) pairing establishes the cryptographic foundation for secure device communication. However, mainstream man-in-the-middle (MITM)-resistant pairing methods, such as Numeric Comparison and Passkey Entry, require user interfaces that implantable medical devices (IMDs) inherently lack, making Near-Field Communication (NFC)-assisted Out-of-Band (OOB) pairing an attractive alternative. Existing NFC-assisted OOB schemes authenticate a classical BLE key exchange that remains vulnerable to quantum attacks, while the NFC channel itself is susceptible to eavesdropping and active injection under stronger threat models. To address these limitations, we propose a lightweight, plug-and-play NFC-based OOB pairing protocol that performs a post-quantum key encapsulation mechanism (KEM) entirely over the NFC channel, ensuring that no shared secret is transmitted over NFC while reducing long-range radio-frequency (RF) exposure during pairing. The proposed protocol requires no modifications to the BLE stack and inherently resists RF battery-depletion attacks. Evaluation on an IMD-class proof-of-concept testbed demonstrates that post-quantum OOB pairing is practical on resource-constrained devices, reducing projected battery life by less than 0.57\% for Kyber-1024 and 0.56\% for FireSABER under an operational usage model relative to the MITM-vulnerable Just Works method.
发表机构
- Lahore University of Management Sciences（拉合尔管理科学大学）
- Erasmus University Medical Center（伊拉斯谟斯大学医学中心）
机构由 AI 辅助整理，请以论文原文为准。
