Swipe2Pair: Secure and Fast In-Band Wireless Device Pairing

Yaqi He,Kai Zeng,Long Jiao,Brian L. Mark,Khaled N. Khasawneh

DOI: https://doi.org/10.1145/3643833.3656127

2024-05-06

Abstract:Wireless device pairing is a critical security mechanism to bootstrap the secure communication between two devices without a pre-shared secret. It has been widely used in many Internet of Things (IoT) applications, such as smart-home and smart-health. Most existing device pairing mechanisms are based on out-of-band channels, e.g., extra sensors or hardware, to validate the proximity of pairing devices. However, out-of-band channels are not universal across all wireless devices, so such a scheme is limited to certain application scenarios or conditions. On the other hand, in-band channel-based device pairing seeks universal applicability by only relying on wireless interfaces. Existing in-band channel-based pairing schemes either require multiple antennas separated by a good distance on one pairing device, which is not feasible in certain scenarios, or require users to repeat multiple sweeps, which is not optimal in terms of usability.

Cryptography and Security,Networking and Internet Architecture

What problem does this paper attempt to address?

The problem that this paper attempts to solve is the security and usability issues in the wireless device pairing process. Specifically, existing device pairing mechanisms mainly rely on out - of - band (OOB) channels or specific hardware to verify the physical proximity of devices, which limits their applicability in certain application scenarios. In addition, in - band - based pairing schemes either require multiple antennas or require users to repeat operations multiple times, affecting the user experience.

To overcome these limitations, the paper proposes a new in - band wireless device pairing scheme - **Swipe2Pair**, which is based on the physical proximity between devices and the randomization of wireless transmission power, aiming to provide a device - pairing method with high security and high usability.

### Main Problems and Solutions

1. **Limitations of Existing Pairing Schemes**:
- **Dependence on Out - of - Band Channels**: Most existing schemes rely on additional sensors or hardware (such as cameras, microphones, etc.), making them not universal for all wireless devices.
- **Deficiencies in In - Band Channel Schemes**: Some in - band schemes require multiple antennas or users to repeat operations multiple times, reducing the user experience.

2. **Innovations of Swipe2Pair**:
- **No Need for Additional Hardware**: Swipe2Pair only relies on standard wireless interfaces (such as WiFi, Bluetooth, etc.), and is suitable for most IoT devices.
- **Simple and Easy to Use**: Users can complete the pairing with just one simple swipe operation, and the whole process takes less than 1 second.
- **Two - Way Authentication**: It not only supports two - way authentication but can also resist advanced attackers (such as attackers who can accurately infer device location and motion information).

### Technical Implementation

Swipe2Pair achieves secure and fast device pairing through the following steps:

1. **Public Key Exchange and Random Transmission Power Recording**:
- Devices A and B exchange public keys through the Elliptic Curve Diffie - Hellman (ECDH) protocol and use randomized transmit power (Tx power) in each transmission.
- The user completes the pairing process by swiping device A from left to right, while recording the random transmit and receive powers.

2. **Encrypted Power Information Exchange**:
- Use the Interlock Protocol to encrypt and exchange the transmit and receive power information of both parties to prevent man - in - the - middle (MitM) attacks.

3. **Path Loss Calculation**:
- Calculate the two - way path loss (Pathloss) according to the recorded power information. The formulas are as follows:
\[
P L_{AB}[i] = P_A^{Tx}[i] - P_B^{Rx}[i] = 10 \alpha \log_{10}\left(\frac{4\pi d_{AB}^i}{\lambda}\right) + \chi_{AB}^i + e_{AB}^i
\]
\[
P L_{BA}[i] = P_B^{Tx}[i] - P_A^{Rx}[i] = 10 \alpha \log_{10}\left(\frac{4\pi d_{BA}^i}{\lambda}\right) + \chi_{BA}^i + e_{BA}^i
\]
where \(\lambda\) is the wavelength, \(\alpha\) is the path loss index, \(\chi_{AB}^i\) and \(\chi_{BA}^i\) represent channel fading, and \(e_{AB}^i\) and \(e_{BA}^i\) are measurement errors.

4. **Authentication and Verification**:
- **Valley Shape Check**: Verify the user's swiping action by detecting the valley shape in the path loss.
- **Channel Fading Change Check**: Further verify the proximity of devices based on the fact that the channel fading changes experienced by remote attackers are usually greater than those of adjacent legal devices.

In conclusion, Swipe2Pair