Pilot spoofing attack brings new challenges to physical layer secure transmission. However, this method will not work without any knowledge about the pilot sequence and active eavesdropping can be detected by constructing random pilot sequence. Intelligent reflecting surface (IRS), with the real-time programmable features for wireless channels, provides new possibilities for effective pilot spoofing. In this paper, the IRS is deployed near the legitimate users and the legitimate signal can always be passively reflected. Then the control strategy is embedded into the communication process under time-division duplex mode to assist eavesdroppers to conduct pilot spoofing. By setting different phase shifts at the IRS during the uplink phase and downlink phase, the channel reciprocity disappears, and thus secure beamforming vector is biased towards the eavesdropper. Furthermore, in order to overhear more information, the average secrecy rate minimization problem based on statistical channel state information is established by carefully designing the phase shifts, which is non-trivial to solve. With alternating optimization and Charnes-Cooper transformation technique, the original problem is transformed into convex form and a near optimal solution is achieved. Finally, simulation results show that our proposed scheme can pose serious secure threat without any energy footprint. What’s more, if the IRS is not utilized by the internal users properly, it will bring more threat.

Physical layer secret key generation schemes can provide lightweight encryption for resource-constrained Internet of Things (IoT) devices. However, many IoT devices are stationary and the environment is usually static, which leads to ultra-low/zero secret key rates. To circumvent this problem, a novel secret key generation scheme based on Reconfigurable Intelligent Surface (RIS)  is  proposed for Multiple-Input Single-Output  IoT communications. The RIS is introduced into the network, and the phase shifts at RIS are tuned randomly in each frame, which  makes time-varying reflection channels superimposed on the original channels. And then, the secret key capacity of all nodes within the cell coverage area can be remarkably improved. Compared with the existing methods, the scheme is loosely coupled with the existing communication system. The closed-form expressions of secret key capacity taking into account eavesdropping are first derived for the case studies of independent and correlated channels. We can conclude that sharing the same phase shifts randomness will not bring key information leakage. Compared with existing user-introduced randomness schemes, the proposed scheme can  maintain good performance as the number of eavesdropping nodes increases. Further,  the impact of parameters, such as the number of reflecting units, the transmit antennas, and the Rician   factor, on secret key performance are  analyzed respectively, which can offer guidelines for system design. Finally, simulation results verify the theoretical analysis.

In this paper, a novel secret key generation scheme based on Reconfigurable Intelligent Surface (RIS) antenna is firstly proposed.