Electrical Heart Signals can be Monitored from the Moon: Security Implications for IPI-Based Protocols

Alejandro Calleja (1) , Pedro Peris-Lopez (1) , Juan E. Tapiador (1)

1 UC3M - Universidad Carlos III de Madrid [Madrid]

Inter-Pulse Intervals (IPIs) have been proposed as a source of entropy for key generation and establishment algorithms in Implantable Medical Devices (IMDs) and Body Area Networks (BANs). Most of the proposed protocols built on top of this biometric feature assume that reliable measures of the IPIs are only available to devices maintaining physical contact with the user. However, computer vision techniques have proved to be able to obtain estimates of heart timings from a video recording of the user’s face. In this paper, we study the impact of these techniques on IPI-based authentication protocols, comparing a heart signal captured using a traditional contact-based approach against a signal retrieved using such a contactless technique. One key finding is that quantization is a crucial step in the process and we report our empirical assessment of the main approaches proposed so far. Our results show that up to 70% of the information obtained by means of the contact-based method can be also obtained through contactless techniques.

Mots clés: Implantable medical devices; Inter-pulse intervals; IMD Security; Security protocols

Domaines: Informatique [cs]

Alejandro Calleja, Pedro Peris-Lopez, Juan E. Tapiador. Electrical Heart Signals can be Monitored from the Moon: Security Implications for IPI-Based Protocols. 9th Workshop on Information Security Theory and Practice (WISTP), Aug 2015, Heraklion, Crete, Greece. pp.36-51, ⟨10.1007/978-3-319-24018-3_3⟩. ⟨hal-01442552⟩