Extracting randomness from the trend of IPI for cryptographic operators in implantable medical devices
Author(s)
Chizari, Hassan
Lupu, Emil C
Type
Journal Article
Abstract
Achieving secure communication between an Implantable Medical Device (IMD) inside the body and a gateway outside the body has showed its criticality with recent reports of hackings such as in St. Jude Medical's Implantable Cardiac Devices, Johnson and Johnson insulin pumps and vulnerabilities in brain Neuro-implants. The use of asymmetric cryptography in particular is not a practical solution for IMDs due to the scarce computational and power resources, symmetric key cryptography is preferred. One of the factors in security of a symmetric cryptographic system is to use a strong key for encryption. A solution to develop such a strong key without using extensive resources in an IMD, is to extract it from the body physiological signals. In order to have a strong enough key, the physiological signal must be a strong source of randomness and InterPulse Interval (IPI) has been advised to be such that. A strong randomness source should have five conditions: Universality (available on all people), Liveness (available at any-time), Robustness (strong random number), Permanence (independent from its history) and Uniqueness (independent from other sources). Nevertheless, for current proposed random extraction methods from IPI these conditions (mainly last three conditions) were not examined. In this study, firstly, we proposed a methodology to measure the last three conditions: Information secrecy measures for Robustness, Santha-Vazirani Source delta value for Permanence and random sources dependency analysis for Uniqueness. Then, using a huge dataset of IPI values (almost 900,000,000 IPIs), we showed that IPI does not have conditions of Robustness and Permanence as a randomness source. Thus, extraction of a strong uniform random number from IPI value, mathematically, is impossible. Thirdly, rather than using the value of IPI, we proposed the trend of IPI as a source for a new randomness extraction method named as Martingale Randomness Extraction from IPI (MRE-IPI). We evaluated MRE-IPI and showed that it satisfies the Robustness condition completely and Permanence to some level. Finally, we used NIST STS and Dieharder test suites and showed that MRE-IPI is able to outperform all recent randomness extraction methods from IPIs and its quality is half of the AES random number. MRE-IPI, still, is not a strong random number and could not be used as the secret key for a secure communication, however, it can be used as a one-time pad in exchanging the secret key for a communication. In this case, the usage of MRE-IPI will be kept at a minimum level and reduces the probability of breaking it. To the best of our knowledge, this is the first work in this area which uses such a comprehensive method and large dataset to examine the randomness of a physiological signal.
Date Issued
2021-03-01
Date Acceptance
2019-06-01
Citation
IEEE Transactions on Dependable and Secure Computing, 2021, 18 (2), pp.875-888
ISSN
1545-5971
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Start Page
875
End Page
888
Journal / Book Title
IEEE Transactions on Dependable and Secure Computing
Volume
18
Issue
2
Copyright Statement
© 2019 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Sponsor
Engineering & Physical Science Research Council (E
Identifier
https://ieeexplore.ieee.org/document/8733047
Grant Number
EP/N023242/1
Subjects
cs.CR
cs.CR
Strategic, Defence & Security Studies
0803 Computer Software
0804 Data Format
0805 Distributed Computing
Publication Status
Published
Date Publish Online
2019-06-07