A New Frontier For Internet of Things Security: Far-Flung Key Generation
Overview
- Funder: EPSRC
- Duration: Jan. 2022 to Dec. 2023
- Amount: £310k
please visit the link for more information.
Summary
The Internet of Things (IoT) has digitally transformed our everyday life with exciting applications such as smart home, connected healthcare, smart cities, manufacturing automation, relying on billions of devices that have become connected over the past decade. Ofcom estimated that the number of IoT devices in the UK will soar from 13 million in 2016 to 156 million in 2024. Low power wide area networks (LPWANs) are new IoT systems with features of low power and wide coverage (over several kilometres). LPWAN accounts one-fourth of the number of IoT devices and the market. Digital Catapult is building the national LPWAN to improve the qualities of our lives and boost the UK economy using LoRaWAN, NB-IoT, and SigFox technologies. Vodafone and Three UK are piloting NB-IoT for a nationwide cellular-based LPWAN.
However, this digital revolution can only be viable if we can provide secure wireless connections. A pair of keys should be established between legitimate devices for encryption and decryption prior to transmissions. Although conventional key distribution schemes, e.g., elliptic curve Diffie Hellman (ECDH) algorithm, are quite mature, they tend to be less suitable for lightweight IoT applications owing to their high complexity. In practice, the pre-shared key (PSK) is often used, which may never refresh the key after its initial configuration. This obviously presents security risks since the key can be revealed, e.g. by side channel attacks. What is worse, many users lack awareness. The UK’s first cyber survey in 2019 by the National Cyber Security Centre revealed numerous weak passwords, e.g., 23.2 million victims worldwide used 123456 as their passwords. The vulnerabilities of IoT have resulted in numerous grave security attacks, which have compromised user privacy, adversely affected the economy and undermined the trust in the society. Gartner reported the information security market exceeded $124 billion in 2019.
Indeed, conceiving secure yet low-complexity key distribution for low-cost IoT devices is challenging. It becomes even more difficult and cumbersome if key refreshing is needed, such as in LPWAN where IoT devices are located in a far-flung environment over several kilometres radius and may not be attended. This open challenge can be tackled with a radical and completely different approach, namely key generation from wireless channels, which automatically generates cryptographic keys from unpredictable characteristics of the wireless channel, and thus avoids the conventional key distribution. While key generation has been demonstrated to work well with short-range communications such as WiFi, its exploration with LPWAN technologies such as LoRa and NB-IoT is rather limited, due to the more complicated radio propagation conditions and the affected channel reciprocity. This project hence will bridge this gap by designing scalable, automatic, and lightweight key generation solutions for LPWAN.
This project will be the first systematic study for LPWAN-based key generation. A synergistic approach will be adopted which involves theoretical modelling, algorithm design and experimental validation. The core aspects of this project will include novel mathematical channel correlation models and channel decomposition algorithms as well as new key generation protocols tuned and optimised for LPWAN. Extensive field-measurements will be carried out to evaluate our algorithms. A unique feature of this project will be the creation of viable security solutions for IoT validated by extensive measurements and proof-of-concept prototypes.
Outcome
Journal
- Yijia Guo, Junqing Zhang*, and Y.-W. Peter Hong, “Practical Physical Layer Authentication for Mobile Scenarios Using a Synthetic Dataset Enhanced Deep Learning Approach,” IEEE Transactions on Information Forensics and Security, vol. xx, pp. xxx, 2025. IEEE
- Tianyu Lu, Liquan Chen, Junqing Zhang, Chen Chen, and Trung Q. Duong, “Reconfigurable Intelligent Surface-Assisted Key Generation for Millimetre-Wave Multi-User Systems,” IEEE Transactions on Information Forensics and Security, vol. 19, pp. 5373 - 5388, 2024. link
- Yuepei Li, Kai Xu, Junqing Zhang, Chongyan Gu, Yuan Ding, George Goussetis, and Symon K. Podilchak, “PUF-Assisted Radio Frequency Fingerprinting Exploiting Power Amplifier Active Load-pulling”, IEEE Transactions on Information Forensics and Security, vol. 19, pp. 5015 - 5029, 2024. link
- Chen Chen, Junqing Zhang*, Tianyu Lu, Magnus Sandell, and Liquan Chen, “Secret Key Generation for IRS-Assisted Multi-Antenna Systems: A Machine Learning-Based Approach”, IEEE Transactions on Information Forensics and Security, vol. 19, pp. 1086 - 1098, 2024. IEEE link, arXiv link
- Tianyu Lu, Liquan Chen, Junqing Zhang, Chen Chen, and Aiqun Hu, “Joint Precoding and Phase Shift Design in Reconfigurable Intelligent Surfaces-Assisted Secret Key Generation”, IEEE Transactions on Information Forensics and Security, vol. 18, pp. 3251-3266, Jun. 2023. IEEE, arXiv link
- Xinwei Zhang, Guyue Li, Junqing Zhang*, Linning Peng, Aiqun Hu and Xianbin Wang, “Enabling Deep Learning-based Physical-layer Secret Key Generation for FDD-OFDM Systems in Multi-Environments”, IEEE Transactions on Vehicular Technology, 2024. arXiv link
Conference
- Yijia Guo, Junqing Zhang, and Y.-W. Peter Hong, “Deep Learning-Enhanced Physical Layer Authentication for Mobile Devices,” in Proc. IEEE GLOBECOM, 2023.
- Chen Chen, Junqing Zhang*, Tianyu Lu, Magnus Sandell, and Liquan Chen, “Secret Key Generation for IRS-Assisted Multi-Antenna Systems: A Machine Learning-Based Approach”, IEEE Transactions on Information Forensics and Security, vol. 19, pp. 1086 - 1098, 2024. IEEE link, arXiv link
- Tianyu Lu, Liquan Chen, Junqing Zhang, Chen Chen, Trung Q. Duong, and Michail Matthaiou, “Precoding Design for Key Generation in Near-Field Extremely Large-Scale MIMO Communications,” in Proc. IEEE GLOBECOM Workshop, 2023.
- Tianyu Lu, Liquan Chen, Junqing Zhang, Chen Chen, and Trung Duong, “Reconfigurable Intelligent Surface-Assisted Key Generation for Millimeter Wave Communications”, in Proc. IEEE WCNC Workshop, 2023. link
- Hongyi Luo, Guyue Li, Yuexiu Xing, Junqing Zhang, Aiqun Hu, and Xianbin Wang, “RelativeRFF: Multi-Antenna Device Identification in Multipath Propagation Scenarios”, in Proc. IEEE ICC, 2023.
- Jie Ma, Junqing Zhang, Guanxiong Shen, Alan Marshall, and Chip-Hong Chang, “White-Box Adversarial Attacks on Deep Learning-Based Radio Frequency Fingerprint Identification”, in Proc. IEEE ICC, 2023.