Lux: Enabling Ephemeral Authorization for Display-Limited IoT Devices

Logan Blue, Samuel Marchal, Patrick Traynor, N. Asokan

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference contributionScientificvertaisarvioitu


Smart speakers are increasingly appearing in homes, enterprises, and businesses including hotels. These systems serve as hubs for other IoT devices and deliver content from streaming media services. However, such an arrangement creates a number of security concerns. For instance, providing such devices with long-term secrets is problematic with regards to vulnerable devices and fails to capture the increasingly transient nature of the relationship between users and the devices (e.g., in hotel or airbnb settings, this device is not owned by the customer and may only be used for a single day). Moreover, the limited interfaces available to such speakers make entering such credentials in a safe manner difficult. We address these problems with Lux, a system to provide ephemeral, fine-grained authorization to smart speakers which can be automatically revoked when the user and hub are no longer in the same
location. We develop protocols using the LED/light channel available to many smart speaker devices to help users properly identify the device with which they are communicating, and demonstrate through a formally validated protocol that such authorization takes only a few seconds in practice. Through this effort, we demonstrate that Lux can safely authorize devices to access user accounts while
limiting any long-term exposure to compromise.
OtsikkoIoTDI '21: Proceedings of the International Conference on Internet-of-Things Design and Implementation
ISBN (elektroninen)978-1-4503-8354-7
DOI - pysyväislinkit
TilaJulkaistu - 2021
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisuussa
TapahtumaInternational Conference on Internet-of-Things Design and Implementation - Charlottesville, Yhdysvallat
Kesto: 18 toukokuuta 202121 toukokuuta 2021
Konferenssinumero: 6


ConferenceInternational Conference on Internet-of-Things Design and Implementation


Sukella tutkimusaiheisiin 'Lux: Enabling Ephemeral Authorization for Display-Limited IoT Devices'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä