Lux: Enabling Ephemeral Authorization for Display-Limited IoT Devices

Logan Blue, Samuel Marchal, Patrick Traynor, N. Asokan

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference article in proceedingsScientificvertaisarvioitu

1 Sitaatiot (Scopus)
26 Lataukset (Pure)


Smart speakers are increasingly appearing in homes, enterprises, and businesses including hotels. These systems serve as hubs for other IoT devices and deliver content from streaming media services. However, such an arrangement creates a number of security concerns. For instance, providing such devices with long-term secrets is problematic with regards to vulnerable devices and fails to capture the increasingly transient nature of the relationship between users and the devices (e.g., in hotel or airbnb settings, this device is not owned by the customer and may only be used for a single day). Moreover, the limited interfaces available to such speakers make entering such credentials in a safe manner difficult. We address these problems with Lux, a system to provide ephemeral, fine-grained authorization to smart speakers which can be automatically revoked when the user and hub are no longer in the same
location. We develop protocols using the LED/light channel available to many smart speaker devices to help users properly identify the device with which they are communicating, and demonstrate through a formally validated protocol that such authorization takes only a few seconds in practice. Through this effort, we demonstrate that Lux can safely authorize devices to access user accounts while
limiting any long-term exposure to compromise.
OtsikkoIoTDI 2021 - Proceedings of the 2021 International Conference on Internet-of-Things Design and Implementation
ISBN (elektroninen)978-1-4503-8354-7
DOI - pysyväislinkit
TilaJulkaistu - 18 toukok. 2021
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisussa
TapahtumaInternational Conference on Internet-of-Things Design and Implementation - Charlottesville, Yhdysvallat
Kesto: 18 toukok. 202121 toukok. 2021
Konferenssinumero: 6


ConferenceInternational Conference on Internet-of-Things Design and Implementation


Sukella tutkimusaiheisiin 'Lux: Enabling Ephemeral Authorization for Display-Limited IoT Devices'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä