A trust model for popular smart home devices

  • PDF / 1,846,089 Bytes
  • 17 Pages / 595.276 x 790.866 pts Page_size
  • 63 Downloads / 160 Views

DOWNLOAD

REPORT


REGULAR CONTRIBUTION

A trust model for popular smart home devices Davide Ferraris1

· Daniel Bastos2 · Carmen Fernandez-Gago1 · Fadi El-Moussa2

© Springer-Verlag GmbH Germany, part of Springer Nature 2020

Abstract Nowadays, smart home devices like Amazon Echo and Google Home have reached mainstream popularity. Being in the homes of users, these devices are intrinsically intrusive, being able to access details such as users’ name, gender, home address, calendar appointments and others. There are growing concerns about indiscriminate data collection and invasion of user privacy in smart home devices, but studies show that perceived benefits are exceeding perceived risks when it comes to consumers. As a result, consumers are placing a lot of trust in these devices, sometimes without realizing it. Improper trust assumptions and security controls can lead to unauthorized access and control of the devices, which can result in serious consequences. In this paper, we explore the behaviour of devices such as Amazon Echo and Google Home in a smart home setting with respect to trust relationships and propose a trust model to improve these relationships among all the involved actors. We have evaluated how trust was built and managed from the initial set-up phase to the normal operation phase, during which we performed a number of interaction tests with different types of users (i.e. owner, guests). As a result, we were able to assess the effectiveness of the provided security controls and identify potential relevant security issues. In order to address the identified issues, we defined a trust model and propose a solution based on it for further securing smart home systems. Keywords Internet of Things · Trust · Security · Privacy · Smart home

1 Introduction Through the Internet of Things (IoT), each smart device can be addressable and cooperate through the Internet to fulfil a common objective [28]. Nowadays, after years of development, the IoT is a growing consumer technology. We can state that the capability of sensing and affecting the external environment is what classifies the IoT as a disruptive technology. The global smart home market is expected to reach 113 billion US$ by 2022, making up for 33.4 billion US$ in 2017. More specifically, smart speakers are experiencing massive

B

Davide Ferraris [email protected] Daniel Bastos [email protected] Carmen Fernandez-Gago [email protected] Fadi El-Moussa [email protected]

1

2

Network, Information and Computer Security Lab, University of Malaga, 29071 Malaga, Spain British Telecom, Adastral Park, Ipswich IP5 3RE, UK

market growth, with shipments growing 187% in Q2 20181 . There are two main competitors in this market: Amazon and Google. They have both released affordable smart speakers and although in 2017 the Amazon Echo line was the undisputed leader, in 2018 Google Home devices were taking over and leading in sales2 . The included voice smart assistants, Alexa3 and Google Assistant4 , feature capabilities like setting up calendar appointments, ordering