Scenario: User-Device Authentication on Smart IoTs Using Commodity RFID

User and device authentication are vital to the deployment of smart Internet of Things (IoT) devices. Unfortunately, achieving robust authentication on a diverse set of heterogeneous IoT devices remains an open problem. This article presents Scenario, a generic authentication method to support user-device authentication on a wide range of IoT devices, using RFID-based wireless sensing. Scenario only requires attaching an RFID tag on the target device surface. It then uses the unique RFID signal characteristics introduced by the device material and user gestures to perform device and user authentication. We developed a prototype of Scenario using commercial off-the-shelf devices and applied it to a multi-device smart environment. Experimental results show that Scenario is reliable, giving an average identification accuracy of 97.3% and 96.7% of the device and user authentication stages in diverse environments, respectively.