{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T21:34:00Z","timestamp":1774992840562,"version":"3.50.1"},"reference-count":49,"publisher":"Association for Computing Machinery (ACM)","issue":"2","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Interact. Mob. Wearable Ubiquitous Technol."],"published-print":{"date-parts":[[2025,6,9]]},"abstract":"<jats:p>Secure pairing is an essential measure to ensure user privacy and data security on smart devices. Traditional pairing approaches predominantly rely on manual interactions, which may be cumbersome, susceptible to human error, and often problematic to deploy on devices with poor user interfaces. Despite prior attempts to mitigate these shortcomings, their efficacy has been impeded by the complexities in key generation or reliance on wireless channels for key transmission, leaving them vulnerable to potential man-in-the-middle (MITM) attacks. Therefore, the development of a pairing approach that focuses on security with user-friendly characteristics is important. In this paper, we introduce a novel paradigm that harnesses human bones to generate and transmit pairing keys derived from ambient sound. It spontaneously generates keys using the interference of vibrations passing through the bone, eliminating the complex process of key generation. We explore the unique characteristics of bones as a key generator and develop a quantitative model of this process for key confirmation. Our approach also enhances security by avoiding public wireless links for key transmission. We design a pairing protocol and build a prototype system using off-the-shelf sensors. Extensive experiments involving 44 participants demonstrate that our system has a true acceptance rate of 96.64% and an equal error rate of 1.96%, while also being resilient to various attacks.<\/jats:p>","DOI":"10.1145\/3729466","type":"journal-article","created":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T21:21:56Z","timestamp":1750281716000},"page":"1-29","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["S2Pair: Secure and Simple Device Pairing Using Human Bone as a Key Generator"],"prefix":"10.1145","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4578-4932","authenticated-orcid":false,"given":"Yao","family":"Wang","sequence":"first","affiliation":[{"name":"Xidian University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-3688-4353","authenticated-orcid":false,"given":"Yufei","family":"Chen","sequence":"additional","affiliation":[{"name":"Xidian University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0080-6341","authenticated-orcid":false,"given":"Haibin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Xidian University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0093-2794","authenticated-orcid":false,"given":"Minjie","family":"Lyu","sequence":"additional","affiliation":[{"name":"Xidian University, Xi'an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1350-6639","authenticated-orcid":false,"given":"Tao","family":"Gu","sequence":"additional","affiliation":[{"name":"Macquarie University, Sydney, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,6,18]]},"reference":[{"key":"e_1_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2750858.2807521"},{"key":"e_1_2_2_2_1","volume-title":"Retrieved","author":"Apple","year":"2023","unstructured":"Apple 2023. Taptic Engine. Retrieved Jun. 18, 2023 from https:\/\/apple.fandom.com\/wiki\/Taptic_Engine."},{"key":"e_1_2_2_3_1","volume-title":"Apple Watch Series 10. Retrieved","author":"Apple Watch","year":"2025","unstructured":"Apple Watch 2024. Apple Watch Series 10. Retrieved January. 2, 2025 from https:\/\/www.apple.com\/apple-watch-series-10."},{"key":"e_1_2_2_4_1","volume-title":"Retrieved","author":"Home Arduino","year":"2023","unstructured":"Arduino Home 2023. Arduino Uno. Retrieved Jun. 18, 2023 from https:\/\/store.arduino.cc\/products\/arduino-uno-rev3."},{"key":"e_1_2_2_5_1","volume-title":"Retrieved","author":"Insights Canalys","year":"2024","unstructured":"Canalys Insights 2024. The rise of open earbuds: challenges and opportunities. Retrieved January. 17, 2025 from https:\/\/www.canalys.com\/insights\/rise-of-open-earbuds-challenges-and-opportunities."},{"key":"e_1_2_2_6_1","volume-title":"Physical-Layer Attacks Against Pulse Width Modulation-Controlled Actuators. In 31st USENIX Security Symposium (USENIX Security). 953--970","author":"Dayanikli G\u00f6k\u00e7en Yilmaz","year":"2022","unstructured":"G\u00f6k\u00e7en Yilmaz Dayanikli, Sourav Sinha, Devaprakash Muniraj, Ryan M Gerdes, Mazen Farhood, and Mani Mina. 2022. Physical-Layer Attacks Against Pulse Width Modulation-Controlled Actuators. In 31st USENIX Security Symposium (USENIX Security). 953--970."},{"key":"e_1_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3117811.3117823"},{"key":"e_1_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447993.3483240"},{"key":"e_1_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2016.2582489"},{"key":"e_1_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00034-021-01772-z"},{"key":"e_1_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2018.8486417"},{"key":"e_1_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00041"},{"key":"e_1_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447993.3483277"},{"key":"e_1_2_2_14_1","volume-title":"Retrieved","author":"Analytics T","year":"2023","unstructured":"IoT Analytics 2023. State of IoT 2023. Retrieved Aug. 12, 2023 from https:\/\/iot-analytics.com\/number-connected-iot-devices."},{"key":"e_1_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417288"},{"key":"e_1_2_2_16_1","first-page":"1","article-title":"Voltkey: Continuous secret key generation based on power line noise for zero-involvement pairing and authentication","volume":"3","author":"Lee Kyuin","year":"2019","unstructured":"Kyuin Lee, Neil Klingensmith, Suman Banerjee, and Younghyun Kim. 2019. Voltkey: Continuous secret key generation based on power line noise for zero-involvement pairing and authentication. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT) 3, 3 (2019), 1--26.","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT)"},{"key":"e_1_2_2_17_1","first-page":"1","article-title":"AEROKEY: Using ambient electromagnetic radiation for secure and usable wireless device authentication","volume":"6","author":"Lee Kyuin","year":"2022","unstructured":"Kyuin Lee, Yucheng Yang, Omkar Prabhune, Aishwarya Lekshmi Chithra, Jack West, Kassem Fawaz, Neil Klingensmith, Suman Banerjee, and Younghyun Kim. 2022. AEROKEY: Using ambient electromagnetic radiation for secure and usable wireless device authentication. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT) 6, 1 (2022), 1--29.","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT)"},{"key":"e_1_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3345434"},{"key":"e_1_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417286"},{"key":"e_1_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3603705"},{"key":"e_1_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3302506.3310406"},{"key":"e_1_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.31763\/simple.v1i2.2"},{"key":"e_1_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2009.51"},{"key":"e_1_2_2_24_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3596264","article-title":"Touchkey: Touch to generate symmetric keys by skin electric potentials induced by powerline radiation","volume":"7","author":"Miao Yuchen","year":"2023","unstructured":"Yuchen Miao, Chaojie Gu, Zhenyu Yan, Sze Yiu Chau, Rui Tan, Qi Lin, Wen Hu, Shibo He, and Jiming Chen. 2023. Touchkey: Touch to generate symmetric keys by skin electric potentials induced by powerline radiation. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT) 7, 2 (2023), 1--21.","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT)"},{"key":"e_1_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2017.2686855"},{"key":"e_1_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2009.88"},{"key":"e_1_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC54503.2022.9720852"},{"key":"e_1_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23076"},{"key":"e_1_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516658"},{"key":"e_1_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.35"},{"key":"e_1_2_2_31_1","volume-title":"Retrieved","year":"2023","unstructured":"Scikit-learn 2023. Scikit-learn. Retrieved Jul. 11, 2023 from https:\/\/github.com\/scikit-learn."},{"key":"e_1_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543758.3547542"},{"key":"e_1_2_2_33_1","volume-title":"Retrieved","author":"Sunrom","year":"2023","unstructured":"Sunrom 2023. Audio Transfer Module. Retrieved Jun. 18, 2023 from https:\/\/www.sunrom.com\/download\/705.pdf."},{"key":"e_1_2_2_34_1","volume-title":"Retrieved","author":"InvenSense TDK","year":"2023","unstructured":"TDK InvenSense 2023. MPU-6050. Retrieved Jun. 18, 2023 from https:\/\/invensense.tdk.com\/products\/motion-tracking\/6-axis\/mpu-6050."},{"key":"e_1_2_2_35_1","volume-title":"Retrieved","year":"2023","unstructured":"TensorFlow 2023. TensorFlow. Retrieved Jul. 11, 2023 from https:\/\/github.com\/tensorflow."},{"key":"e_1_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/TUFFC.2022.3197095"},{"key":"e_1_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3369811"},{"key":"e_1_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3495243.3564146"},{"key":"e_1_2_2_39_1","volume-title":"GhostTalk: Interactive Attack on Smartphone Voice System Through Power Line. In Network and Distributed Systems Security (NDSS) Symposium.","author":"Wang Yuanda","year":"2022","unstructured":"Yuanda Wang, Hanqing Guo, and Qiben Yan. 2022. GhostTalk: Interactive Attack on Smartphone Voice System Through Power Line. In Network and Distributed Systems Security (NDSS) Symposium."},{"key":"e_1_2_2_40_1","volume-title":"Retrieved","author":"Waveshare","year":"2023","unstructured":"Waveshare 2023. LM386 Sound Sensor. Retrieved Jun. 18, 2023 from https:\/\/www.waveshare.com\/wiki\/Sound_Sensor."},{"key":"e_1_2_2_41_1","first-page":"1","article-title":"Auto-Key: Using autoencoder to speed up gait-based key generation in body area networks","volume":"4","author":"Wu Yuezhong","year":"2020","unstructured":"Yuezhong Wu, Qi Lin, Hong Jia, Mahbub Hassan, and Wen Hu. 2020. Auto-Key: Using autoencoder to speed up gait-based key generation in body area networks. Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT) 4, 1 (2020), 1--23.","journal-title":"Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies (IMWUT)"},{"key":"e_1_2_2_42_1","volume-title":"IEEE 22nd International Symposium of Quality of Service (IWQoS). IEEE, 350--359","author":"Xi Wei","year":"2014","unstructured":"Wei Xi, Xiang-Yang Li, Chen Qian, Jinsong Han, Shaojie Tang, Jizhong Zhao, and Kun Zhao. 2014. KEEP: Fast secret key extraction protocol for D2D communication. In IEEE 22nd International Symposium of Quality of Service (IWQoS). IEEE, 350--359."},{"key":"e_1_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978298"},{"key":"e_1_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3023954"},{"key":"e_1_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3300118"},{"key":"e_1_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2994551.2994556"},{"key":"e_1_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5462004"},{"key":"e_1_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057145"},{"key":"e_1_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/ESUCB.2015.7169920"}],"container-title":["Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3729466","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T12:21:18Z","timestamp":1755865278000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3729466"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,9]]},"references-count":49,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2025,6,9]]}},"alternative-id":["10.1145\/3729466"],"URL":"https:\/\/doi.org\/10.1145\/3729466","relation":{},"ISSN":["2474-9567"],"issn-type":[{"value":"2474-9567","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,9]]},"assertion":[{"value":"2025-06-18","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}