Browse > Article
http://dx.doi.org/10.5370/KIEE.2016.65.12.2145

Vulnerability Verification of 27 MHz Wireless Keyboards  

Kim, Ho-Yeon (SC Development Division, Ubivelox)
Sim, Bo-Yeon (Dept. of Mathematics, Kookmin University)
Park, Ae-Sun (Dept. of Financial Information Security, Kookmin University)
Han, Dong-Guk (Dept. of Mathematics and Dept. of Financial Information Security, Kookmin University)
Publication Information
The Transactions of The Korean Institute of Electrical Engineers / v.65, no.12, 2016 , pp. 2145-2152 More about this Journal
Abstract
Internet generalization has led to increased demands for Internet banking. Various security programs to protect authentication information are being developed; however, these programs cannot protect the wireless communication sections of wireless keyboards. In particular, vulnerabilities have been reported in the radio communication sections of 27 MHz wireless keyboards. In this paper, we explain how to analyze M's 27 MHz wireless keyboard. We also experimentally show that an attacker can acquire authentication information during domestic Internet banking using a 27 MHz wireless keyboard. To do this, we set up an experimental encironment to analyze the electromagnetic signal of a 27 MHz wireless keyboard.
Keywords
Side-channel attack; Electromagnetic; Wireless keyboard; GNU radio; USRP;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Fähnle, M., Hauff, M.: Analysis of unencrypted and encrypted wireless keyboard transmission implemented in GNU radio based software-defined radio. In: Hochschul Ulm, University of Applied Sciences Institute of Communication Technology. (2011)
2 Kim, H.-Y., Lee, S.-J., Park, A.-S., Han, D.-G.: Enhanced Vulnerability Analysis on the Transmission module with electromagnetic leakage from wireless keyboard. In: CISC-S'14, pp. 94. (2014)
3 Korea Financial Telecommunications and Clearings Institute: CMS account number system of each participating organization. (2016)
4 Max, M., Philipp, S.: 27MHz Wireless Keyboard Analysis Report aka "We know what you typed last summer," In: Dreamlab Technologies AG. (2007)
5 Microsoft Corporation: DATA PACKET TRANSMISSION FOR CHANNEL-SHARING COLLOCATED WIRELESS DEVICES. In: United State Patent. (2006)