loading...
Loud and Clear: Human-Verifiable Authentication Based on Audio
Lisboa, Portugal July 04-July 07
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICDCS.2006.5226th IEEE International Conference on ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Michael T. Goodrich, University of California, Irvine
Michael Sirivianos, University of California, Irvine
John Solis, University of California, Irvine
Gene Tsudik, University of California, Irvine
Ersin Uzun, University of California, Irvine
Secure pairing of electronic devices that lack any previous association is a challenging problem which has been considered in many contexts and in various flavors. In this paper, we investigate the use of audio for human-assisted authentication of previously un-associated devices. We develop and evaluate a system we call Loud-and-Clear (L&C) which places very little demand on the human user. L&C involves the use of a text-to-speech (TTS) engine for vocalizing a robust-sounding and syntactically-correct (English-like) sentence derived from the hash of a device?s public key. By coupling vocalization on one device with the display of the same information on another device, we demonstrate that L&C is suitable for secure device pairing (e.g., key exchange) and similar tasks. We also describe several common use cases, provide some performance data for our prototype implementation and discuss the security properties of L&C.
Citation:
Michael T. Goodrich, Michael Sirivianos, John Solis, Gene Tsudik, Ersin Uzun, "Loud and Clear: Human-Verifiable Authentication Based on Audio," icdcs, pp.10, 26th IEEE International Conference on Distributed Computing Systems (ICDCS'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions