Survey and Systematization of Secure Device Pairing

Abstract

Secure Device Pairing (SDP) schemes have been developed to facilitate secure communications among smart devices, both personal mobile devices and Internet of Things (IoT) devices. Comparison and assessment of SDP schemes is troublesome, because each scheme makes different assumptions about out-of-band channels and adversary models, and are driven by their particular use-cases. A conceptual model that facilitates meaningful comparison among SDP schemes is missing. We provide such a model. In this article, we survey and analyze a wide range of SDP schemes that are described in the literature, including a number that have been adopted as standards. A system model and consistent terminology for SDP schemes are built on the foundation of this survey, which are then used to classify existing SDP schemes into a taxonomy that, for the first time, enables their meaningful comparison and analysis.The existing SDP schemes are analyzed using this model, revealing common systemic security weaknesses among the surveyed SDP schemes that should become priority areas for future SDP research, such as improving the integration of privacy requirements into the design of SDP schemes. Our results allow SDP scheme designers to create schemes that are more easily comparable with one another, and to assist the prevention of persisting the weaknesses common to the current generation of SDP schemes.

arXiv comment34 pages, 5 figures, 3 tables, accepted at IEEE Communications Surveys & Tutorials 2017 (Volume: PP, Issue: 99)

References in corpus (6)

• Exploiting Channel Diversity in Secret Key Generation from Multipath Fading Randomness
• On IEEE 802.11: Wireless LAN Technology
• BANDANA -- Body Area Network Device-to-device Authentication using Natural gAit
• Challenges in Mobile Multi-Device Ecosystems
• Walk-Unlock: Zero-Interaction Authentication Protected with Multi-Modal Gait Biometrics
• When Theory and Reality Collide: Demystifying the Effectiveness of Ambient Sensing for NFC-based Proximity Detection by Applying Relay Attack Data

Cited by in corpus (9)

• Perils of Zero-Interaction Security in the Internet of Things
• Short-Range Audio Channels Security: Survey of Mechanisms, Applications, and Research Challenges
• Acoustic Integrity Codes: Secure Device Pairing Using Short-Range Acoustic Communication
• FastZIP: Faster and More Secure Zero-Interaction Pairing
• Next2You: Robust Copresence Detection Based on Channel State Information
• Key Generation for Internet of Things: A Contemporary Survey
• Sounds Good? Fast and Secure Contact Exchange in Groups
• Why is My Secret Leaked? Discovering Vulnerabilities in Device-to-Device File Sharing
• VoltKey: Using Power Line Noise for Zero-Involvement Pairing and Authentication (Demo Abstract)