Fingerprinting Analog IoT Sensors for Secret-Free Authentication

Lorenz, F., Thamsen, L., Wilke, A., Behnke, I., Waldmüller-Littke, J., Komarov, I., Kao, O. and Paeschke, M. (2020) Fingerprinting Analog IoT Sensors for Secret-Free Authentication. In: 2020 29th International Conference on Computer Communications and Networks (ICCCN), 03-06 Aug 2020, ISBN 9781728166070 (doi: 10.1109/ICCCN49398.2020.9209643)

Abstract

Especially in context of critical urban infrastructures, trust in IoT data is of utmost importance. While most technology stacks provide means for authentication and encryption of device-to-cloud traffic, there are currently no mechanisms to rule out physical tampering with an IoT device's sensors. Addressing this gap, we introduce a new method for extracting a hardware fingerprint of an IoT sensor which can be used for secret-free authentication. By comparing the fingerprint against reference measurements recorded prior to deployment, we can tell whether the sensing hardware connected to the IoT device has been changed by environmental effects or with malicious intent. Our approach exploits the characteristic behavior of analog circuits, which is revealed by applying a fixed-frequency alternating current to the sensor, while recording its output voltage. To demonstrate the general feasibility of our method, we apply it to four commercially available temperature sensors using laboratory equipment and evaluate the accuracy. The results indicate that with a sensible configuration of the two hyperparameters we can identify individual sensors with high probability, using only a few recordings from the target device.

• Item Type: Conference Proceedings
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Thamsen, Dr Lauritz
• Authors: Lorenz, F., Thamsen, L., Wilke, A., Behnke, I., Waldmüller-Littke, J., Komarov, I., Kao, O., and Paeschke, M.
• College/School: College of Science and Engineering > School of Computing Science
• Publisher: IEEE
• ISSN: 2637-9430
• ISBN: 9781728166070
• Published Online: 30 September 2020
• Copyright Holders: Copyright © 2020 IEEE
• First Published: First published in 2020 29th International Conference on Computer Communications and Networks (ICCCN)
• Publisher Policy: Reproduced in accordance with the publisher copyright policy

Related URLs

• arXiv