AutoPKI: public key infrastructure for IoT with automated trust transfer

AutoPKI : public key infrastructure for IoT with automated trust transfer

This research is partially funded by the Swedish SSF Institute PhD grant and by the EU H2020 projects ARCADIAN-IoT (Grant ID. 101020259) and VEDLIoT (Grant ID: 957197)
IoT deployments grow in numbers and size, which makes questions of long-term support and maintainability increasingly important. Without scalable and standard-compliant capabilities to transfer the control of IoT devices between service providers, IoT system owners cannot ensure long-term maintainability, and risk vendor lock-in. The manual overhead must be kept low for large-scale IoT installations to be economically feasible. We propose AutoPKI, a lightweight protocol to update the IoT PKI credentials and shift the trusted domains, enabling the transfer of control between IoT service providers, building upon the latest IoT standards for secure communication and efficient encodings. We show that the overhead for the involved IoT devices is small and that the overall required manual overhead can be minimized. We analyse the fulfilment of the security requirements, and for a subset of them, we demonstrate that the desired security properties hold through formal verification using the Tamarin prover.

TEKNIK OCH TEKNOLOGIER Elektroteknik och elektronik hsv//swe
ENGINEERING AND TECHNOLOGY Electrical Engineering, Electronic Engineering, Information Engineering hsv//eng
Internet of things; Maintainability; Public key cryptography; Digital certificates; Embedded-system; Enrollment; IoT; Lock-in; Number and size; PKI; Public key infrastructure; Service provider; Trust transfer; Embedded systems

In:International Journal of Information Security: Springer Science and Business Media Deutschland GmbH1615-52621615-5270

By the author/editor: Höglund, Joel, 1 ...; Bouget, Simon; Furuhed, Martin; Preuß Mattsson, ...; Selander, Göran; Raza, Shahid, 19 ...

About the subject

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.