Secure Device-to-Device (D2D) communication is becoming increasingly important with the ever-growing number of Internet-of-Things (IoT) devices in our daily life. To achieve secure D2D communication, the key agreement between different IoT devices without any prior knowledge is becoming desirable. Although various approaches have been proposed in the literature, they suffer from a number of limitations, such as low key generation rate and short pairing distance. In this paper, we present InaudibleKey, an inaudible acoustic signal-based key generation protocol for mobile devices. Based on acoustic channel reciprocity, InaudibleKey exploits the acoustic channel frequency response of two legitimate devices as a common secret to generating keys. InaudibleKey employs several novel technologies to significantly improve its performance. We conduct extensive experiments to evaluate the proposed system in different real environments. Compared to state-of-the-art works, InaudibleKey improves key generation rate by 3-145 times, extends pairing distance by 3.2-44 times, and reduces information reconciliation counts by 2.5-16 times. Security analysis demonstrates that InaudibleKey is resilient to a number of malicious attacks. We also implement InaudibleKey on modern smartphones and resource-limited IoT devices. Results show that it is energy-efficient and can run on both powerful and resource-limited IoT devices without incurring excessive resource consumption.

中文翻译：

---

InaudibleKey：用于移动设备的基于通用听不见声信号的密钥协商协议

随着我们日常生活中物联网（IoT）设备数量的不断增长，安全的设备到设备（D2D）通信变得越来越重要。为了实现安全的D2D通信，在没有任何先验知识的情况下，不同IoT设备之间的关键协议变得越来越重要。尽管文献中已经提出了各种方法，但是它们受到许多限制，例如密钥生成率低和配对距离短。在本文中，我们介绍了InaudibleKey，这是一种用于移动设备的基于听不见的声音信号的密钥生成协议。基于声音通道互易性，InaudibleKey利用两个合法设备的声音通道频率响应作为生成密钥的共同秘密。InaudibleKey采用了几种新颖的技术来显着提高其性能。我们进行了广泛的实验，以在不同的实际环境中评估建议的系统。与最新技术相比，InaudibleKey将密钥生成速率提高了3-145倍，将配对距离延长了3.2-44倍，并将信息对账次数减少了2.5-16倍。安全分析表明，InaudibleKey可以抵抗多种恶意攻击。我们还在现代智能手机和资源受限的IoT设备上实现InaudibleKey。结果表明，它具有高能效，可以在功能强大且资源有限的物联网设备上运行，而不会导致过多的资源消耗。并将信息对帐次数减少2.5-16倍。安全分析表明，InaudibleKey可以抵抗多种恶意攻击。我们还在现代智能手机和资源受限的IoT设备上实现InaudibleKey。结果表明，它具有高能效，可以在功能强大且资源有限的物联网设备上运行，而不会导致过多的资源消耗。并将信息对帐次数减少2.5-16倍。安全分析表明，InaudibleKey可以抵抗多种恶意攻击。我们还在现代智能手机和资源受限的IoT设备上实现InaudibleKey。结果表明，它具有高能效，可以在功能强大且资源有限的物联网设备上运行，而不会导致过多的资源消耗。