EM-Rhythm: An Authentication Method for Heterogeneous IoT Devices

The popularity of IoT devices has penetrated our daily life while posing new challenges in user authentication. Today’s solutions, e.g., passwords, fingerprints, and FaceIDs, primarily rely on specialized sensors or user interfaces to collect user’s identification information, which may not universally exist on heterogeneous IoT devices. In this paper, we propose a novel user authentication method that exploits the Electromagnetic (EM) emanations radiated from IoT devices. Our design is motivated by the observation that human touches on the IoT device can lead to time-varying coupling between these two. Consequently, it impacts the device’s EM emanations that can be picked up by its inertial ADC (analog-to-digital converter) interfaces. We ask the user to tap on the device rhythmically following a self-determined melody, such that the human-coupled EM emanations vary accordingly. We thus extract the rhythm pattern as the user’s secure password named EM-Rhythm . To examine its effectiveness, EM-Rhythm is implemented on a wide range of IoT devices. We show that our scheme achieves authentication accuracy as high as 98.67% with less than three login attempts. Besides, it is robust against various types of attacks and maintains stable performances under various settings. EM-Rhythm also exhibits satisfactory usability in terms of memorability and time consumption.