arrow
Return

Attacks on Heartbeat-Based Security Using Remote Photoplethysmography

delete2018-05-01
delete17
delete
OA
AI
R
Robert M. Seepers *
王文进 (Wenjin Wang)
I
Ioannis Sourdis
C
Christos Strydis
DOI:10.1109/JBHI.2017.2691282delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
The time interval between consecutive heartbeats (interpulse interval, IPI) has previously been suggested for securing mobile-health solutions. This time interval is known to contain a degree of randomness, permitting the generation of a time-and person-specific identifier. It is commonly assumed that only devices trusted by a person can make physical contact with him/her, and that this physical contact allows each device to generate a similar identifier based on its own cardiac recordings. Under these conditions, the identifiers generated by different trusted devices can facilitate secure authentication. Recently, a wide range of techniques have been proposed for measuring heartbeats remotely, a prominent example of which is remote photoplethysmography (rPPG). These techniques may pose a significant threat to heartbeat-based security, as an adversary may pretend to be a trusted device by generating a similar identifier without physical contact, thus bypassing one of the core security conditions. In this paper, we assess the feasibility of such remote attacks using state-of-the-art rPPG methods. Our evaluation shows that rPPG has similar accuracy as contact PPG and, thus, forms a substantial threat to heartbeat-based-security systems that permit trusted devices to obtain their identifiers from contact PPG recordings. Conversely, rPPG cannot obtain an accurate representation of an identifier generated from electrical cardiac signals, making the latter invulnerable to state-of-the-art remote attacks.
Keywords:
Authentication
Biometrics (access control)
Photoplethysmography
Remote monitoring
Robert Seepers
side-channel attacks
with kind regards
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Journal of Biomedical and Health Informatics cover
IEEE Journal of Biomedical and Health Informatics
IF:
6.8
Papers:
4.5K
Citations:
2.0W

Organization

E
Erasmus University Rotterdam
Scholars:
4.6W
Papers: 4.0W
Citations: 2.4W
E
Erasmus MC
Scholars:
2.9W
Papers: 2.5W
Citations: 3.4W
E
Eindhoven University of Technology
Scholars:
1.6W
Papers: 1.5W
Citations: 2.2W
researcher View more organizations