Multichannel protocols to prevent relay attacks

Frank Stajano, Ford-Long Wong, B. Christianson

    Research output: Contribution to journalArticlepeer-review

    18 Citations (Scopus)
    34 Downloads (Pure)

    Abstract

    A number of security systems, from Chip-and-PIN payment cards to contactless subway and train tokens, as well as secure localization systems, are vulnerable to relay attacks. Encrypting the communication between the honest endpoints does not protect against such attacks. The main solution that has been offered to date is distance bounding, in which a tightly timed exchange of challenges and responses persuades the verifier that the prover cannot be further away than a certain distance. This solution, however, still won't say whether the specific endpoint the verifier is talking to is the intended one or not - it will only tell the verifier whether the real prover is "nearby". Are there any alternatives? We propose a more general paradigm based on multichannel protocols. Our class of protocols, of which distance bounding can be modelled as a special case, allows a precise answer to be given to the question of whether the unknown device in front of the potential victim is a relaying attacker or the device with which the victim intended to communicate. We discuss several instantiations of our solution and point out the extent to which all these countermeasures rely, often implicitly, on the alertness of a honest human taking part in the protocol.
    Original languageEnglish
    Pages (from-to)4-19
    Number of pages16
    JournalLecture Notes in Computer Science (LNCS)
    Volume6052
    DOIs
    Publication statusPublished - 2010

    Fingerprint

    Dive into the research topics of 'Multichannel protocols to prevent relay attacks'. Together they form a unique fingerprint.

    Cite this