Slashdot Mirror

← Back to Stories (view on slashdot.org)

Shake a Secure Bluetooth Connection

Posted by CowboyNeal on from the trembling-with-anticipation dept.

heilbron writes "The Austrian researcher Rene Mayrhofer of the British Lancaster university and his colleague Hans Gellersen developed a technology to simplify a secured wireless connection of mobile devices. With the so-called shake-to-connect technology an authenticated Bluetooth connection between two mobile phones is established by rhythmic shaking. Integrated oscillation sensors, contained in some mobile phone models, form the basis. The two researchers sketched out a prototype, which is intended for Nokia mobile phones. An example is documented in this YouTube video clip. If two mobile phones are shaken together, the software in both devices registers the same shaking frequency and authenticates the radio link. The principle is summed up in a four page PDF document."

3 of 107 comments (clear)

  1. Re:Not just Cell phones use bluetooth by MankyD · · Score: 4, Interesting

    I want to see you shake your bluetooth enabled car so you can sync with your phone...
    Perhaps you could - there's no reason a properly sensitive gyroscope can't detect the acceleration, turns, and even rumblings of a car and pair it up with a similarly moving phone.
    --
    -dave
    http://millionnumbers.com/ - own the number of your dreams
  2. Why just shaking? by dyftm · · Score: 3, Interesting
    Why just limit yourself to shaking, when you could use:
    • Sound - put both devices together, speak into both of them at once
    • Rhythmic button pressing - hold a device in each hand, tap out a rhythm on the buttons at the same time
    • Sound pairing - put devices together, they use their speaker/mic to handshake
  3. Re:Because entering a PIN is sooooo difficult by skiingyac · · Score: 4, Interesting

    Or a accelerometer manufacturer looking for a client...

    If only ALL PHONES already had some way to accept input... Hmm... How about you hold both phones up to your mouth and whisper some random words into them at the same time? To encourage people from not all saying "12345", one phone could even display a random sequence of numbers that you then speak into the phones. It doesn't matter if you say the right numbers, since both phones are going off what they hear.

    With the shaking method, someone can either watch you and try to shake theirs at the same time, or record a video of it and figure out what the acceleration values should be. With speaking, the attacker would have to get the sounds right, plus get the volume right, plus get the background noise & relative timing right (which is going to be slightly off unless the attacker is RIGHT next to you). Better yet, both phone owners could speak the sequence standing slightly apart, so nobody else will hear person #1, person #2, and the background noise with the same timings.