Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEEE Conference on Computer Communications (INFOCOM)

Physical Layer Key Generation between Backscatter Devices over Ambient RF Signals

Pu Wang, Long Jiao, Kai Zeng, Zheng Yan

Published May 10, 2021• 16 citations
Publisher

Abstract

Ambient backscatter communication (AmBC), which enables energy harvesting and ultra-low-power communication by utilizing ambient radio frequency (RF) signals, has emerged as a cutting-edge technology to realize numerous Internet of Things (IoT) applications. However, the current literature lacks efficient secret key sharing solutions for resource-limited devices in AmBC systems to protect the backscatter communications, especially for private data transmission. Thus, we propose a novel physical layer key generation scheme between backscatter devices (BDs) by exploiting received superposed ambient signals. Based on the repeated patterns (i.e., cyclic prefix in OFDM symbols) in ambient RF signals, we present a joint transceiver design of BD backscatter waveform and BD receiver to extract the downlink signal and the backscatter signal from the superposed signals. By multiplying the downlink signal and the backscatter signal, we can actually obtain the triangle channel information as a shared random secret source for key generation. Besides, we study the trade-off between the rate of secret key generation and harvested energy by modeling it as a joint optimization problem. Finally, extensive numerical simulations are provided to evaluate the key generation performance, energy harvesting performance, and their trade-offs under various system settings.

DOI
10.1109/infocom42981.2021.9488885

Related papers

Security Analysis of Triangle Channel-Based Physical Layer Key Generation in Wireless Backscatter Communications

Jiajun Li, Pu Wang, Long Jiao +3 more

Ambient backscatter communication (AmBC) enables ultra-low-power communications by backscattering ambient radio frequency (RF) signals and harvesting energy simultaneously. It has emerged as a cutting-edge technology for supporting a variety of Internet of Things (IoT) applications. However, existing research lacks effective secret key sharing schemes for safeguarding communications between resource-constrained backscatter devices (BDs) in AmBC systems. In this paper, we present, Tri-Channel, a novel physical layer key generation scheme between two BDs by multiplying downlink signals and backscatter signals to obtain the information of a triangle channel as a shared random secret source for key generation. In particular, we analyze the security of our scheme under both passive and active attacks, concretely Eavesdropping Attack (EA), Control Channel Attack (CCA), Signal Manipulative Attack (SMA), and Untrusted RF-Source Attack (URSA). Through theoretical analysis and simulations by comparing with a traditional scheme (named Tradi-Channel), we found that our scheme consistently outperforms the Tradi-Channel under the EA and two active attacks (CCA and SMA). In addition, it shows better security performance under URSA, which is proposed based on the unauthenticated characteristic of BDs in Tri-Channel, even though URSA is more vital than SMA. Concretely, Tri-Channel’s secret key rate (SKR) outperforms Tradi-Channel’s under the above four passive and active attacks. This implies that our scheme is advanced in terms of both security and efficiency of key generation. Numerous extensive simulations further prove our theoretical analysis results.

IEEE Transactions on Information Forensics and Security•Nov 24, 2022•33 citations

Securing Physical Layer Key Generation in Ambient Backscatter Devices Against Injection Attack

Neji Mensi, Danda B. Rawat, Min Song

The necessity for ultra-low-power consumption devices that enable the Internet of Things (IoT) networks to be more energy efficient, leads to considering Ambient Backscatter Communication (AmBC). Such devices exploit ambient radio-frequency signals to communicate and harvest energy. Though, the physical layer key generation (PLKG) scheme that enables AmBC to generate a secret key for data encryption, is vulnerable to injection attacks. Under such a menace, an attacker injects predefined signals and contributes to the PLKG. Thereby, it possesses a part of the generated bits and uses brute force attack to compromise the entire key. Inspired by that, we carefully prove the vulnerability of the existing PLKG approach in AmBC to injection attack. Then, we propose the employment of a smart device that aims at detecting the attack and canceling the malicious signal. Furthermore, we propose a new strategy that enables legitimate devices to utilize the entire received ambient signal for PLKG while exploiting the malicious signal for energy harvesting. Hence, the attacker becomes the victim. Finally, we provide numerical simulations that accentuate the consequence of the menace and the effectiveness of our security method, even though only 80% of the injected signal is removed. Besides, we prove the efficacy of our energy harvesting strategy.

IEEE Transactions on Cognitive Communications and Networking•Mar 26, 2025•2 citations

Computational Analysis of Secrecy Outage in Energy-Harvesting Multi-Backscatter IoT Networks

S. Q. Nguyen, M.-H. H., L.-D. Huynh +1 more

This paper studies the secrecy outage performance (SOP) of an energy-harvesting multi-backscatter-device (BD) network in the presence of a passive eavesdropper. A dedicated radio-frequency source illuminates multiple BDs employing power splitting (PS), and the BD with the strongest source-to-BD channel is opportunistically selected for confidential backscatter transmission. Unlike conventional secure backscatter communication models that assume an always-active BD, we explicitly impose a practical circuit-activation constraint requiring the selected BD to harvest sufficient energy before transmission. Consequently, the selected source-to-BD channel jointly determines circuit availability and the strengths of the legitimate and wiretap cascaded links. A tractable analytical framework for the SOP is developed by accounting for activation failure, secrecy-rate outage, opportunistic selection, PS, and Rayleigh fading. Since the activation constraint yields a non-zero lower integration bound, we derive a finite-sum approximation using the binomial expansion and Gaussian -Chebyshev quadrature. We further obtain a high-signal-to-noise-ratio expression that reveals a non-zero secrecy outage floor caused by the proportional scaling of the legitimate and eavesdropping links. Monte Carlo simulations validate the analysis and show that increasing the number of candidate BDs improves secrecy performance, particularly in energy-limited regimes, but with diminishing returns. The results also reveal the trade-off between circuit activation and backscattered-signal strength and quantify the effects of the activation threshold, PS coefficient, and channel conditions on secrecy performance. Keywords: Energy harvesting, backscatter communication, physical layer security, secrecy outage probability, power splitting

Radioengineering•Oct 1, 2026•0 citations

Evaluation of Physical Layer Secret Key Generation for IoT Devices

Marko Jacovic, M.P. Krayer von Kraus, Geoffrey Mainland +1 more

As aspects of our daily lives become more interconnected with the emergence of the Internet of Things (IoT), it is imperative that our devices are reliable and secure from threats. Vulnerabilities of Wi-Fi Protected Access (WPA/WPA2) have been exposed in the past, motivating the use of multiple security techniques, even with the release of WPA3. Physical layer security leverages existing components of communication systems to enable methods of protecting devices that are well-suited for IoT applications. In this work, we provide a low-complexity technique for generating secret keys at the Physical layer to enable improved IoT security. We leverage the existing carrier frequency offset (CFO) and channel estimation components of Orthogonal Frequency Division Multiplexing (OFDM) receivers for an efficient approach. The key generation algorithm we propose focuses on the unique CFO and channel experienced between a pair of desired nodes, and to the best of our understanding, the combination of the features has not been examined previously for the purpose of secret key generation. Our techniques are appropriate for IoT devices, as they do not require extensive processing capabilities and are based on second order statistics. We obtain experimental results using USRP N210 software defined radios and analyze the performance of our methods in post-processing. Our techniques improve the capability of desired nodes to establish matching secret keys, while hindering the threat of an eavesdropper, and are useful for protecting future IoT devices.

The ... IEEE Annual Wireless and Microwave Technology Conference•Apr 1, 2019•15 citations

Sharing Secrets via Wireless Broadcasting: A New Efficient Physical Layer Group Secret Key Generation for Multiple IoT Devices

Jie Tang, Hong Wen, Huanhuan Song +2 more

With the increasing demands for sharing confidential information among massive Internet of Things (IoT) devices in 5G and beyond wireless networks, many applications require the common secret key generation for a group of IoT devices. However, most of the existing works on physical layer secret key generation (PLKG) only focus on the pairwise key generation between two users, which is a low efficient and high cost to be extended to the scenarios of group key generation. In this work, we propose a new efficient multiple-input–multiple-output (MIMO) physical layer group secret key generation scheme to reduce the consumption of channel probing and improve the efficiency for group key generation. Different from current schemes, in the proposed scheme, the transmitter randomly generates the group secret key and directly broadcasts the downlink data symbols to the group users. At the receiver end, each group user can efficiently “observe” the common group key through the downlink broadcasting data symbols, while keeping perfect secrecy of the shared group key against eavesdroppers. The performance of reliability, security, and the group key generation rate is fully investigated, which shows the advantages of high efficiency, low consumption, and strong robustness of the proposed scheme. Extensive simulations are conducted to validate the effectiveness of the proposed scheme.

IEEE Internet of Things Journal•Jan 31, 2022•36 citations

Defeating Eavesdroppers with Ambient Backscatter Communications

Nguyễn Văn Huynh, Nguyen Quang Hieu, Nam H. Chu +3 more

Unlike conventional anti-eavesdropping methods that always require additional energy or computing resources (e.g., in friendly jamming and cryptography-based solutions), this work proposes a novel anti-eavesdropping solution that comes with mostly no extra power nor computing resource requirement. This is achieved by leveraging the ambient backscatter technology in which secret information can be transmitted by backscattering it over ambient radio signals. Specifically, the original message at the transmitter is first encoded into two parts: (i) active transmit message and (ii) backscatter message. The active transmit message is then transmitted by using the conventional wireless transmission method while the backscatter message is transmitted by backscattering it on the active transmit signals via an ambient backscatter tag. As the backscatter tag does not generate any active RF signals, it is intractable for the eavesdropper to detect the backscatter message. Therefore, secret information, e.g., a secret key for decryption, can be carried by the backscattered message, making the adversary unable to decode the original message. Simulation results demonstrate that our proposed solution can significantly enhance security protection for communication systems.

arXiv:2201.06204•IEEE Wireless Communications and Networking Conference•Mar 1, 2023•6 citations
Ambient backscatter communication (AmBC), which enables energy harvesting and ultra-low-power communication by utilizing ambient radio frequency (RF) signals, has emerged as a cutting-edge technology to realize numerous Internet of Things (IoT) applications. However, the current literature lacks efficient secret key sharing solutions for resource-limited devices in AmBC systems to protect the backscatter communications, especially for private data transmission. Thus, we propose a novel physical layer key generation scheme between backscatter devices (BDs) by exploiting received superposed ambient signals. Based on the repeated patterns (i.e., cyclic prefix in OFDM symbols) in ambient RF signals, we present a joint transceiver design of BD backscatter waveform and BD receiver to extract the downlink signal and the backscatter signal from the superposed signals. By multiplying the downlink signal and the backscatter signal, we can actually obtain the triangle channel information as a shared random secret source for key generation. Besides, we study the trade-off between the rate of secret key generation and harvested energy by modeling it as a joint optimization problem. Finally, extensive numerical simulations are provided to evaluate the key generation performance, energy harvesting performance, and their trade-offs under various system settings.
Ambient backscatter communication (AmBC) enables ultra-low-power communications by backscattering ambient radio frequency (RF) signals and harvesting energy simultaneously. It has emerged as a cutting-edge technology for supporting a variety of Internet of Things (IoT) applications. However, existing research lacks effective secret key sharing schemes for safeguarding communications between resource-constrained backscatter devices (BDs) in AmBC systems. In this paper, we present, Tri-Channel, a novel physical layer key generation scheme between two BDs by multiplying downlink signals and backscatter signals to obtain the information of a triangle channel as a shared random secret source for key generation. In particular, we analyze the security of our scheme under both passive and active attacks, concretely Eavesdropping Attack (EA), Control Channel Attack (CCA), Signal Manipulative Attack (SMA), and Untrusted RF-Source Attack (URSA). Through theoretical analysis and simulations by comparing with a traditional scheme (named Tradi-Channel), we found that our scheme consistently outperforms the Tradi-Channel under the EA and two active attacks (CCA and SMA). In addition, it shows better security performance under URSA, which is proposed based on the unauthenticated characteristic of BDs in Tri-Channel, even though URSA is more vital than SMA. Concretely, Tri-Channel’s secret key rate (SKR) outperforms Tradi-Channel’s under the above four passive and active attacks. This implies that our scheme is advanced in terms of both security and efficiency of key generation. Numerous extensive simulations further prove our theoretical analysis results.
The necessity for ultra-low-power consumption devices that enable the Internet of Things (IoT) networks to be more energy efficient, leads to considering Ambient Backscatter Communication (AmBC). Such devices exploit ambient radio-frequency signals to communicate and harvest energy. Though, the physical layer key generation (PLKG) scheme that enables AmBC to generate a secret key for data encryption, is vulnerable to injection attacks. Under such a menace, an attacker injects predefined signals and contributes to the PLKG. Thereby, it possesses a part of the generated bits and uses brute force attack to compromise the entire key. Inspired by that, we carefully prove the vulnerability of the existing PLKG approach in AmBC to injection attack. Then, we propose the employment of a smart device that aims at detecting the attack and canceling the malicious signal. Furthermore, we propose a new strategy that enables legitimate devices to utilize the entire received ambient signal for PLKG while exploiting the malicious signal for energy harvesting. Hence, the attacker becomes the victim. Finally, we provide numerical simulations that accentuate the consequence of the menace and the effectiveness of our security method, even though only 80% of the injected signal is removed. Besides, we prove the efficacy of our energy harvesting strategy.
This paper studies the secrecy outage performance (SOP) of an energy-harvesting multi-backscatter-device (BD) network in the presence of a passive eavesdropper. A dedicated radio-frequency source illuminates multiple BDs employing power splitting (PS), and the BD with the strongest source-to-BD channel is opportunistically selected for confidential backscatter transmission. Unlike conventional secure backscatter communication models that assume an always-active BD, we explicitly impose a practical circuit-activation constraint requiring the selected BD to harvest sufficient energy before transmission. Consequently, the selected source-to-BD channel jointly determines circuit availability and the strengths of the legitimate and wiretap cascaded links. A tractable analytical framework for the SOP is developed by accounting for activation failure, secrecy-rate outage, opportunistic selection, PS, and Rayleigh fading. Since the activation constraint yields a non-zero lower integration bound, we derive a finite-sum approximation using the binomial expansion and Gaussian -Chebyshev quadrature. We further obtain a high-signal-to-noise-ratio expression that reveals a non-zero secrecy outage floor caused by the proportional scaling of the legitimate and eavesdropping links. Monte Carlo simulations validate the analysis and show that increasing the number of candidate BDs improves secrecy performance, particularly in energy-limited regimes, but with diminishing returns. The results also reveal the trade-off between circuit activation and backscattered-signal strength and quantify the effects of the activation threshold, PS coefficient, and channel conditions on secrecy performance. Keywords: Energy harvesting, backscatter communication, physical layer security, secrecy outage probability, power splitting
As aspects of our daily lives become more interconnected with the emergence of the Internet of Things (IoT), it is imperative that our devices are reliable and secure from threats. Vulnerabilities of Wi-Fi Protected Access (WPA/WPA2) have been exposed in the past, motivating the use of multiple security techniques, even with the release of WPA3. Physical layer security leverages existing components of communication systems to enable methods of protecting devices that are well-suited for IoT applications. In this work, we provide a low-complexity technique for generating secret keys at the Physical layer to enable improved IoT security. We leverage the existing carrier frequency offset (CFO) and channel estimation components of Orthogonal Frequency Division Multiplexing (OFDM) receivers for an efficient approach. The key generation algorithm we propose focuses on the unique CFO and channel experienced between a pair of desired nodes, and to the best of our understanding, the combination of the features has not been examined previously for the purpose of secret key generation. Our techniques are appropriate for IoT devices, as they do not require extensive processing capabilities and are based on second order statistics. We obtain experimental results using USRP N210 software defined radios and analyze the performance of our methods in post-processing. Our techniques improve the capability of desired nodes to establish matching secret keys, while hindering the threat of an eavesdropper, and are useful for protecting future IoT devices.
With the increasing demands for sharing confidential information among massive Internet of Things (IoT) devices in 5G and beyond wireless networks, many applications require the common secret key generation for a group of IoT devices. However, most of the existing works on physical layer secret key generation (PLKG) only focus on the pairwise key generation between two users, which is a low efficient and high cost to be extended to the scenarios of group key generation. In this work, we propose a new efficient multiple-input–multiple-output (MIMO) physical layer group secret key generation scheme to reduce the consumption of channel probing and improve the efficiency for group key generation. Different from current schemes, in the proposed scheme, the transmitter randomly generates the group secret key and directly broadcasts the downlink data symbols to the group users. At the receiver end, each group user can efficiently “observe” the common group key through the downlink broadcasting data symbols, while keeping perfect secrecy of the shared group key against eavesdroppers. The performance of reliability, security, and the group key generation rate is fully investigated, which shows the advantages of high efficiency, low consumption, and strong robustness of the proposed scheme. Extensive simulations are conducted to validate the effectiveness of the proposed scheme.
Unlike conventional anti-eavesdropping methods that always require additional energy or computing resources (e.g., in friendly jamming and cryptography-based solutions), this work proposes a novel anti-eavesdropping solution that comes with mostly no extra power nor computing resource requirement. This is achieved by leveraging the ambient backscatter technology in which secret information can be transmitted by backscattering it over ambient radio signals. Specifically, the original message at the transmitter is first encoded into two parts: (i) active transmit message and (ii) backscatter message. The active transmit message is then transmitted by using the conventional wireless transmission method while the backscatter message is transmitted by backscattering it on the active transmit signals via an ambient backscatter tag. As the backscatter tag does not generate any active RF signals, it is intractable for the eavesdropper to detect the backscatter message. Therefore, secret information, e.g., a secret key for decryption, can be carried by the backscattered message, making the adversary unable to decode the original message. Simulation results demonstrate that our proposed solution can significantly enhance security protection for communication systems.