cid 2536abddfa200bbc5793c4cb90bbc919f5696566402840a93f41d695b3703862 · original · via openalex
Title: Usability and security of out-of-band channels in secure device pairing protocols Authors: Ronald Kainda; Ivan Fléchais; Andrew William Roscoe Venue: Symposium On Usable Privacy and Security Year: 2009 Canonical: doi:10.1145/1572532.1572547 URL: https://doi.org/10.1145/1572532.1572547 Collector: openalex OA: false ABSTRACT Initiating and bootstrapping secure, yet low-cost, ad-hoc transactions is an important challenge that needs to be overcome if the promise of mobile and pervasive computing is to be fulfilled. For example, mobile payment applications would benefit from the ability to pair devices securely without resorting to conventional mechanisms such as shared secrets, a Public Key Infrastructure (PKI), or trusted third parties. A number of methods have been proposed for doing this based on the use of a secondary out-of-band (OOB) channel that either authenticates information passed over the normal communication channel or otherwise establishes an authenticated shared secret which can be used for subsequent secure communication. A key element of the success of these methods is dependent on the performance and effectiveness of the OOB channel, which usually depends on people performing certain critical tasks correctly.