DEMO: On the real-time masking of the sound of credit cards using hot patching

  • Authors:
  • Manish Shukla;Purushotam Radadia;Shirish Subhash Karande;Sachin Lodha

  • Affiliations:
  • TCS Innovation Labs - TRDDC, Pune, India;TCS Innovation Labs - TRDDC, Pune, India;TCS Innovation Labs - TRDDC, Pune, India;TCS Innovation Labs - TRDDC, Pune, India

  • Venue:
  • Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

Phone based card payments utilize inband DTMF signaling to convey data. Since the DTMF signals are audible to a human ear, a call operator is in position to carry out a privacy attack. We investigate real-time techniques that can obfuscate the 'digit' values without deteriorating the voice quality. Furthermore, we consider a setting where the privacy solution is being provided by a third party which does not have the benefit of open interfaces to the communication application. Our experiments reveal the efficacy of binary interception to 'inject' the signal filtering. Meanwhile, we observe that several DTMF suppression techniques that have been proposed in literature can leave a residue that is sufficient for de-anonymizing the digit value. In light of these observations, we argue in favor of more modest privacy guarantees, which can be achieved by suppressing only the higher frequency. We show that margin crossings and peak variances can be used for fast pre-filtering of audio to detect the presence of a tone, thus reducing the computational needs.