Commitment-based device-pairing protocol with synchronized drawings and comparison metrics

Loading...
Thumbnail Image

Access rights

openAccess
publishedVersion

URL

Journal Title

Journal ISSN

Volume Title

A1 Alkuperäisartikkeli tieteellisessä aikakauslehdessä

Date

Major/Subject

Mcode

Degree programme

Language

en

Pages

Series

Pervasive and Mobile Computing, Volume 16, issue Part B, pp. 205-219

Abstract

This article presents a new method for pairing devices securely. The commitment-based authentication uses a fuzzy secret that the devices only know approximately. Its novel feature is time-based opening of commitments in a single round. We also introduce a new source for the fuzzy secret: synchronized drawing with two fingers of the same hand on two touch screens or surfaces. The drawings are encoded as strings and compared with an edit-distance metric. A prototype implementation of this surprisingly simple and natural pairing mechanism shows that it accurately differentiates between true positives and man-in-the-middle attackers.

Description

VK: Secure Systems; Aura, T.

Other note

Citation

Antikainen, M, Sethi, M, Matetic, S & Aura, T 2015, 'Commitment-based device-pairing protocol with synchronized drawings and comparison metrics', Pervasive and Mobile Computing, vol. 16, no. Part B, pp. 205-219. https://doi.org/10.1016/j.pmcj.2014.10.006