便携设备通常和聪明的电话工作。为了保证仅仅合法的聪明的电话,能读数据,他们必须进行配对建立一把分享的钥匙。传统的配对方法要求配对的设备为用户相互作用有一个键盘或屏幕。由于尺寸限制,然而,键盘或屏幕是难的在便携设备被安装。解决这个问题,我们由使用周围的声音和光建议一个新奇配对方法。在这个新计划,从聪明的电话的任何配对的请求将触发便携设备颤动。仅仅在用户们在设备罐头上压 confirm 键以后,配对的过程继续。然后配对的设备在预定时间收集周围的声音和光并且由使用 Diffie-Hellman 协议建立分享的键。为了在关键建立免于潜在的 man-in-the-middle 攻击,处理,一改善联锁有健全、轻的比较的协议被进行证实键。如果配对的设备收集的声音和光是足够类似的,键被接受。否则,它被拒绝。与上下文基于配对方法的电流相比,我们的计划不在设备上强加严格的同步收集周围的上下文数据。而且,我们的计划不必收集并且把上下文的信息换作多重时间抵抗离线的蛮力攻击。试验性的结果和安全分析证明我们的计划的有效性。
Wearable devices usually work together with smart phones.To ensure only legitimate smart phones can read the data,they must conduct pairing to establish a shared key.Traditional pairing methods require that the pairing devices have a keyboard or screen for user interaction.However,due to the size limitation,keyboards or screens are hard to be installed in the wearable devices.To solve this problem,we propose a novel pairing method by using ambient sound and light.In this new scheme,any pairing request from smart phone will trigger wearable device vibration.Only after users press the confirm key on the device can the pairing process continues.Then pairing devices collect ambient sound and light at the predetermined time and establish a shared key by using the Diffie-Hellman protocol.To protect against potential man-in-the-middle attacks in the key establishment process,an improved interlock protocol with sound and light comparison is conducted to authenticate the key.If both the sound and light collected by the pairing devices are similar enough,the key is accepted.Otherwise,it is rejected.Compared with current context based pairing methods,our scheme does not impose strict synchronization on devices to collect ambient context data.Moreover,our scheme need not collect and exchange contextual information for multiple times to resist offline brute force attacks.The experimental results and security analysis prove the effectiveness of our scheme.