BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier...
-
Upload
truongkhuong -
Category
Documents
-
view
221 -
download
4
Transcript of BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier...
![Page 1: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/1.jpg)
BackDoor: Sensing Out-of-band Sounds through Channel Nonlinearity
Nirupam Roy
ECE-420 Guest Lecture - 30th October 2017 University of Illinois at Urbana-Champaign
![Page 2: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/2.jpg)
Microphones are everywhere
![Page 3: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/3.jpg)
Microphones are everywhere
![Page 4: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/4.jpg)
Speaker
Audible sound
Microphones record audible sounds
I hear that
I record that
![Page 5: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/5.jpg)
Inaudible, but recordable !
Speaker
![Page 6: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/6.jpg)
Inaudible, but recordable !
Speaker
I can’t hear that
I record that
![Page 7: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/7.jpg)
Speaker
Works with unmodified devices
Camera Smartwatch
Laptop Hearing Aid
![Page 8: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/8.jpg)
Near-ultrasound
It’s not “near-ultrasound”
50k40k10k
Amplitu
de
Frequency20k 30k
chirp.io
lisnr.com
ApneaApp MobiSys’15
AAMouse MobiSys’15
Spartacus MobiSys’13
DopLink UbiComp’13 AirLink
UbiComp’14
Pseudo-ranging SenSys’12
Crowd-counting SenSys’12
SoundWave CHI’12
![Page 9: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/9.jpg)
Microphone hardware
Exploiting fundamental nonlinearity
50k40k10k
Amplitu
de
20k 30k Frequency
![Page 10: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/10.jpg)
What can we do with it?
![Page 11: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/11.jpg)
Opportunities: Acoustic jammer
![Page 12: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/12.jpg)
Application: Acoustic communication
![Page 13: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/13.jpg)
Jamming hearing aids
Threat: Acoustic DOS attack
![Page 14: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/14.jpg)
Jamming hearing aids
Threat: Acoustic DOS attack
Blocking 911 calls
![Page 15: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/15.jpg)
Threats: Inaudible voice attack
![Page 16: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/16.jpg)
Talk outline
Microphone Overview 1
System Design 2
Challenges 3
Evaluation 4
![Page 17: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/17.jpg)
Talk outline
Microphone Overview 1
System Design 2
Challenges 3
Evaluation 4
![Page 18: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/18.jpg)
Microphone working principle
Amplifier Filter ADCDiaphragm
![Page 19: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/19.jpg)
Microphone working principle
Diaphragm Amplifier Filter ADC
![Page 20: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/20.jpg)
Microphone working principle
Amplifier Filter ADC
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Diaphragm
![Page 21: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/21.jpg)
Microphone working principle
Amplifier Filter ADC
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Diaphragm
![Page 22: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/22.jpg)
Microphone working principle
Amplifier Filter ADC
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Diaphragm
![Page 23: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/23.jpg)
Microphone working principle
Amplifier Filter ADC
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Diaphragm
![Page 24: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/24.jpg)
Microphone working principle
Amplifier Filter ADC
Microphonefilter
Diaphragm
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Amplitu
de
![Page 25: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/25.jpg)
Diaphragm
Microphone working principle
Amplifier Filter ADC
Microphonefilter
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 26: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/26.jpg)
Microphone working principle
Input
Out
put
Vin
Vout
Vout = a1Vin
Input Out
put
Vout = a1Vin+ a2Vin2+ a3Vin
3+…
Amplifier
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 27: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/27.jpg)
Microphone working principle
Input
Out
put
Vin
Vout
Vout = a1Vin 10k
Frequency20k 30k 40k 50k 60k 70k 80k 90k 100k
Input Out
put
Vout = a1Vin+ a2Vin2
Amplifier
![Page 28: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/28.jpg)
Microphone working principle
Input
Out
put
Vin
Vout
Vout = a1Vin 10k
Frequency20k 30k 40k 50k 60k 70k 80k 90k 100k
Input Out
put
Amplifier
Vout = a1Vin+ a2Vin2
![Page 29: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/29.jpg)
Talk outline
Microphone Overview 1
System Design 2
Challenges 3
Evaluation 4
![Page 30: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/30.jpg)
Exploiting amplifier non-linearity Am
plitu
de
Microphonefilter
F1= 50kHz F2= 40kHz
F1 F2
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 31: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/31.jpg)
Vout = a1Vin+ a2Vin2
Exploiting amplifier non-linearity Am
plitu
de
Microphonefilter
F1= 50kHz F2= 40kHz
( sin F1 + sin F2 )2 = cos 2F1 + cos 2F2 + cos (F1+F2) + cos (F1- F2)
F1 F2
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 32: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/32.jpg)
Vout = a1Vin+ a2Vin2
Exploiting amplifier non-linearity Am
plitu
de
Microphonefilter
F1= 50kHz F2= 40kHz
F1 F2
( sin F1 + sin F2 )2 = cos 2F1 + cos 2F2 + cos (F1+F2) + cos (F1- F2)
2F2 (F1+F2) 2F1
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 33: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/33.jpg)
2F2 (F1+F2) 2F1
Vout = a1Vin+ a2Vin2
Exploiting amplifier non-linearity Am
plitu
de
F1 F2
( sin F1 + sin F2 )2 = cos 2F1 + cos 2F2 + cos (F1+F2) + cos (F1- F2)
F1= 50kHz F2= 40kHz
Microphonefilter
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 34: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/34.jpg)
2F2 (F1+F2) 2F1
Vout = a1Vin+ a2Vin2
Exploiting amplifier non-linearity Am
plitu
de
F1 F2
( sin F1 + sin F2 )2 = cos 2F1 + cos 2F2 + cos (F1+F2) + cos (F1- F2)
F1= 50kHz F2= 40kHz
Microphonefilter
(F1-F2)
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
![Page 35: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/35.jpg)
Exploiting amplifier non-linearity Am
plitu
de
F1 F2
F1= 50kHz F2= 40kHz
Microphonefilter
10kFrequency
20k 30k 40k 50k 60k 70k 80k 100k90k
(F1-F2)
![Page 36: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/36.jpg)
Exploiting amplifier non-linearity Am
plitu
de
F1 F2
F1= 50kHz F2= 40kHz
Microphonefilter
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
(F1-F2)
![Page 37: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/37.jpg)
Talk outline
Microphone Overview 1
System Design 2
Challenges 3
Evaluation 4
![Page 38: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/38.jpg)
Challenges F1 F2
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
F1 F2 2F2 F1+F2 2F1 F1-F2
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Microphone’s nonlinearity
Speaker’s nonlinearity
![Page 39: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/39.jpg)
Challenges
F1
F2 2F2 F1+F2 2F1 F1-F2
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Amplitu
de
F1 F2 2F2 F1+F2 2F1 F1-F2
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Microphone’s nonlinearity
Speaker’s nonlinearity
![Page 40: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/40.jpg)
Challenges
Amplitu
de
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
F1 F2 2F2 F1+F2 2F1 F1-F2
Amplitu
de
F1 F2 2F2 F1+F2 2F1 F1-F2
10kFrequency
20k 30k 40k 50k 60k 70k 80k 90k 100k
Microphone’s nonlinearity
![Page 41: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/41.jpg)
Challenges
Ultrasonic speaker
Amplitude modulation
![Page 42: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/42.jpg)
Challenges
Ultrasonic speaker
Frequencymodulation
![Page 43: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/43.jpg)
• Signal self-demodulation
• Piezoelectric ringing effect
• Carrier intermixing
• Spectrum inversion
• Carrier power allocation
Challenges
![Page 44: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/44.jpg)
Talk outline
Microphone Overview 1
System Design 2
Challenges 3
Evaluation 4
![Page 45: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/45.jpg)
Threats: Inaudible voice attack
Live Demo: Attacking Amazon Echo though inaudible sound
![Page 46: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/46.jpg)
Hardware generalizability
40 kHz
50 kHz
Hearing Aid
Camera iPhone Android phone
Smartwatch Laptop
Hearingaids
Camera
iPho
ne
Androidph
one
Smart-watch
Laptop
BackDo
orSignal(dB
)
Devices
60
40
20
0
![Page 47: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/47.jpg)
Implementation
Communication prototype
Jammer prototype
![Page 48: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/48.jpg)
Communication performance
FM data packets
4kbps up to 1 meter
More power can increase the distance
![Page 49: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/49.jpg)
Jamming performance
BackDoor jammer
Spy microphone
![Page 50: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/50.jpg)
Jamming performance
BackDoor jammer
Spy microphone
![Page 51: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/51.jpg)
Jamming performance
BackDoor jammer
Spy microphone
![Page 52: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/52.jpg)
Jamming performance
BackDoor jammer
Spy microphone
![Page 53: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/53.jpg)
Jamming performance
BackDoor jammer
Spy microphone
![Page 54: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/54.jpg)
Jamming performance
BackDoor jammer
Jammed recording
2000 spoken words
![Page 55: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/55.jpg)
Jamming performance
BackDoor jammer
Jammed recording
Human listener
Speech recognition
2000 spoken words
![Page 56: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/56.jpg)
Jamming performance
BackDoor jammer
Jammed recording
Human listener
Speech recognition
% of legible words
2000 spoken words
![Page 57: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/57.jpg)
Jamming performance 100
80
60
40
20
0
Jamming distance
Legi
bilit
y of
wor
ds (%
) Human users
Automatic speech recognition
![Page 58: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/58.jpg)
Jamming performance
![Page 59: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/59.jpg)
Takeaways
Specially designed inaudible sound can be recorded with unmodified microphone 1
It can make acoustic jammer possible and also can be a communication channel 2
It also uncovers threats like acoustic Denial-of-Service attacks 3
![Page 60: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/60.jpg)
Ripple: Communication through Physical Vibration
![Page 61: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/61.jpg)
Short range communication: a new need of this decade
![Page 62: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/62.jpg)
Short range communication: a new need of this decade
![Page 63: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/63.jpg)
![Page 64: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/64.jpg)
Emerging technologies for short range
Driving forces of short range communication research
Capacity !
![Page 65: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/65.jpg)
Emerging technologies for short range
![Page 66: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/66.jpg)
Emerging technologies for short range
Security / Privacy !
Driving forces of short range communication research
Capacity !
![Page 67: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/67.jpg)
Emerging technologies for short range
Security / Privacy !
Convenience!
Energy!
Driving forces of short range communication research
Capacity !
Availability!
Health !
![Page 68: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/68.jpg)
Emerging technologies for short range
Visible Light Communication ! Acoustic NFC!
![Page 69: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/69.jpg)
Physical vibration: a new mode of communication
![Page 70: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/70.jpg)
70
Vibration MotorAccelerometer
![Page 71: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/71.jpg)
71
Vibration MotorAccelerometer
![Page 72: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/72.jpg)
Vibration MotorAccelerometer
72
On
Off
On On
Morse Code Key
Modulated vibration
![Page 73: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/73.jpg)
73
Applications: Mobile Money Transfer
![Page 74: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/74.jpg)
Applications: Mobile Money Transfer
RECEIVE
74
![Page 75: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/75.jpg)
75
Applications: Authentication with Ring
EnterPasscode
![Page 76: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/76.jpg)
76
Applications: Authentication with Ring
VibratoryPasscodeDetected
![Page 77: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/77.jpg)
77
Applications: Authentication with Ring
![Page 78: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/78.jpg)
78
Applications: Body-Area Network
![Page 79: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/79.jpg)
79
Or…may be you can come up with a better one
![Page 80: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/80.jpg)
Ripple: Communicating through Physical Vibrations
![Page 81: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/81.jpg)
32K Ripple - II
9.6K
106K
1.0K 0.3K
NFC
Infrared
Visible Light
Ultrasound
0.2K Ripple - I
Ripple data-rate
(bits-per-second, entry level versions)
![Page 82: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/82.jpg)
Ripple-II: Faster Communication through Physical Vibration
![Page 83: BackDoor: Sensing Out-of-band Sounds through Channel ... · Microphone working principle Amplifier Filter ADC 10k ... Frequency modulation ... BackDoor jammer Jammed recording Human](https://reader033.fdocuments.net/reader033/viewer/2022051802/5aee186f7f8b9ae531913c47/html5/thumbnails/83.jpg)
Thank You
Website: http://nroy8.web.engr.illinois.edu
SyNRG group website: http://synrg.csl.illinois.edu