The House That Knows You: User Authentication Based on IoT Data

TL;DR

This paper introduces a novel behavioral authentication method for smart home IoT devices, achieving high accuracy in user identification by analyzing interaction patterns, thus addressing privacy and convenience issues of traditional methods.

Contribution

The study develops a new behavioral authentication approach based on IoT interaction features and demonstrates its effectiveness with a high-accuracy ensemble classifier in a real-world setting.

Findings

Ensemble classifier achieves 97% accuracy in user identification.

Behavioral features from IoT interactions effectively distinguish users.

Method offers a privacy-preserving alternative to traditional authentication.

Abstract

Home-based Internet of Things (IoT) devices have gained in popularity and many households have become 'smart' by using devices such as smart sensors, locks, and voice-based assistants. Traditional authentication methods such as passwords, biometrics or multi-factor (using SMS or email) are either not applicable in the smart home setting, or they are inconvenient as they break the natural flow of interaction with these devices. Voice-based biometrics are limited due to safety and privacy concerns. Given the limitations of existing authentication techniques, we explore new opportunities for user authentication in smart home environments. Specifically, we design a novel authentication method based on behavioral features extracted from user interactions with IoT devices. We perform an IRB-approved user study in the IoT lab at our university over a period of three weeks. We collect network traffic from multiple users interacting with 15 IoT devices in our lab and extract a large number of features to capture user activity. We experiment with multiple classification algorithms and also design an ensemble classifier with two models using disjoint set of features. We demonstrate that our ensemble model can classify five users with 0.97 accuracy. The behavioral authentication modules could help address the new challenges emerging with smart home ecosystems and they open up the possibility of creating flexible policies for authorization and access control.