Feature Fusion and Voiceprint-Based Access Control for Wireless Insulin Pump Systems

Without effective cryptographic mechanisms, the wireless channel between the USB/uploader and insulin pump frequently suffers from vulnerabilities. Either eavesdropping or therapy manipulation attacks would put the patients in a life-threatening situation. Towards tackling this problem, we propose an access control scheme by introducing feature fusion and voiceprint. Featured by the anti-replay speaker verification and voiceprint-based key agreement, it secures communications over the wireless channel. Through a cascaded fusion of speaker verification and anti-replay countermeasure, the anti-replay speaker verification guarantees that the pump can only be accessed after the verification. When defending against zero-effort and replay impostors with our scheme, the equal error rate can be reduced to 2.22%. Furthermore, to generate a common key for the wireless channel, in the voiceprint-based key agreement, we present a non-interactive energy-difference-based voiceprint extraction and adaptive Reed-Solomon coding based fuzzy extractor. Thus, it enhances the communication encryption which protects the pump from eavesdropping and therapy manipulation attacks. Also, with an appropriate constraint on voiceprints similarity, the key agreement lowers the risk of channel establishment from device locating outside the pump's close proximity.