Privacy Leakage of Physical Activity Levels in Wireless Embedded Wearable Systems

Xenofon Fafoutis (1) , Letizia Marchegiani (2) , Georgios Papadopoulos (3, 4) , Robert Piechocki (1) , Theo Tryfonas (1) , George Oikonomou (1)

1 University of Bristol [Bristol]
2 ORI - Oxford Robotics Institute
3 OCIF - Objets communicants pour l'Internet du futur
4 RSM - Département Réseaux, Sécurité et Multimédia

With the ubiquity of sensing technologies in our personal spaces, the protection of our privacy and the confidentiality of sensitive data becomes a major concern. In this paper, we focus on wearable embedded systems that communicate data periodically over the wireless medium. In this context, we demonstrate that private information about the physical activity levels of the wearer can leak to an eavesdropper through the physical layer. Indeed, we show that the physical activity levels strongly correlate with changes in the wireless channel that can be captured by measuring the signal strength of the eavesdropped frames. We practically validate this correlation in several scenarios in a real residential environment, using data collected by our prototype wearable accelerometer-based sensor. Lastly, we propose a privacy enhancement algorithm that mitigates the leakage of this private information.

Mots clés: Security and Privacy; Embedded System Security; Wearable Systems; IoT

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]; Systèmes embarqués

Xenofon Fafoutis, Letizia Marchegiani, Georgios Papadopoulos, Robert Piechocki, Theo Tryfonas, et al.. Privacy Leakage of Physical Activity Levels in Wireless Embedded Wearable Systems. IEEE Signal Processing Letters, 2017, 24, pp.136 - 140. ⟨10.1109/LSP.2016.2642300⟩. ⟨hal-01616477⟩