AutoPKI: public key infrastructure for IoT with automated trust transfer

AutoPKI : public key infrastructure for IoT with automated trust transfer

(creator_code:org_t)

2024
2024
English.
In: International Journal of Information Security. - : Springer Science and Business Media Deutschland GmbH. - 1615-5262 .- 1615-5270.

Related links:: https://doi.org/10.1...; show more...; https://ri.diva-port... (primary) (Raw object); https://urn.kb.se/re...; https://doi.org/10.1...; show less...

Abstract Subject headings

IoT deployments grow in numbers and size, which makes questions of long-term support and maintainability increasingly important. Without scalable and standard-compliant capabilities to transfer the control of IoT devices between service providers, IoT system owners cannot ensure long-term maintainability, and risk vendor lock-in. The manual overhead must be kept low for large-scale IoT installations to be economically feasible. We propose AutoPKI, a lightweight protocol to update the IoT PKI credentials and shift the trusted domains, enabling the transfer of control between IoT service providers, building upon the latest IoT standards for secure communication and efficient encodings. We show that the overhead for the involved IoT devices is small and that the overall required manual overhead can be minimized. We analyse the fulfilment of the security requirements, and for a subset of them, we demonstrate that the desired security properties hold through formal verification using the Tamarin prover.

By the author/editor: Höglund, Joel, 1 ...; Bouget, Simon; Furuhed, Martin; Preuß Mattsson, ...; Selander, Göran; Raza, Shahid, 19 ...

About the subject

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.