Privacy Preserving Location Authentication in Wi Fi Networks Using Fine Grained Physical Layer Signatures
A recent measurement reveals that a large portion of the reported locations is either forged or superfluous, which raises security issues such as bogus alibis and illegal usage of restricted resources. However, most prior approaches leak users' location information or rely on external devices. To overcome these limitations, we propose PriLA, a privacy preserving location authentication system that verifies users' location information based on physical layer (PHY) information available in legacy Wi Fi preambles. The crux of PriLA is to turn detrimental features in wireless systems, namely carrier frequency offset (CFO) and multipath, into useful signatures for privacy protection and authentication. In particular, PriLA exploits CFO and channel state information (CSI) to secure wireless transmissions starting from the handshake phase between mobile users and the access point (AP) and meanwhile verify the truthfulness of users' reported locations based on users' multipath profiles. We have implemented PriLA on GNURadio/USRP platform and commercial off the shelf Intel 5300 NICs, and the experimental results show that PriLA achieves the authentication accuracy of 93.2% on average, while leaking merely 45.7% information in comparison with the state of the art approach.
IEEE Transactions on Wireless Communications