Vibration-based Secure Side Channel for Medical Devices
Implantable and wearable medical devices are used for monitoring, diagnosis, and treatment of an ever-increasing range of medical conditions, leading to an improved quality of life for patients. The addition of wireless connectivity to medical devices has enabled post-deployment tuning of therapy and access to device data virtually anytime and anywhere but, at the same time, has led to the emergence of security attacks as a critical concern. While cryptography and secure communication protocols may be used to address most known attacks, the lack of a viable secure connection establishment and key exchange mechanism is a fundamental challenge that needs to be addressed. We propose a vibration-based secure side channel between an external device (medical programmer or smartphone) and a medical device. Vibration is an intrinsically short-range, user-perceptible channel that is suitable for realizing physically secure communication at low energy and size/weight overheads. We identify and address key challenges associated with the vibration channel, and propose a vibration-based wakeup and key exchange scheme, named SecureVibe, that is resistant to battery drain attacks. We analyze the risk of acoustic eavesdropping attacks and propose an acoustic masking countermeasure. We demonstrate and evaluate vibration-based wakeup and key exchange between a smartphone and a prototype medical device in the context of a realistic human body model.
- RESEARCH PUBLICATION
- Younghyun Kim, Woo Suk Lee, Vijay Raghunathan, Niraj Jha, and Anand Raghunathan, ” Vibration-based Secure Side Channel for Medical Devices,” Design Automation Conference (DAC 2015), pp.1–6, San Francisco, California, USA, June 2014.
- Younghyun Kim, Woo Suk Lee, Anand Raghunathan, Vijay Raghunathan, and Niraj K. Jha, “Reliability and Security of Implantable and Wearable Medical Devices,” in Implantable Biomedical Microsystems: Design Principles and Applications, pp. 167–199, ISBN 978–0-323–26208-8, William Andrew (Elsevier), 2015.
- Younghyun Kim, Woo Suk Lee, Vijay Raghunathan, Niraj K. Jha, and Anand Raghunathan, “Vibration-based Secure Side Channel for Medical Devices,” US patent, WO2016133813 A1, 2016.