AutoPKI: Public Key Infrastructure for IoT with Automated Trust Transfer

• IoT deployments grow in numbers and size which makes questions of long-time support and maintainability increasingly important. By offering standard-compliant capabilities to transfer the control of IoT devices between service providers, maintainability is improved and vendor lock-in can be prevented. We propose AutoPKI, a protocol for transferring control between IoT service providers. We show that the overhead for the involved IoT devices is small and that the overall required manual overhead can be minimized. We analyse the fulfilment of the security requirements, and for a subset of them, we demonstrate that the desired security properties hold through formal verification in the Tamarin prover.

Ämnesord

NATURVETENSKAP  -- Data- och informationsvetenskap (hsv//swe)

NATURAL SCIENCES  -- Computer and Information Sciences (hsv//eng)

Nyckelord

security

IoT

PKI

digital certificates

enrollment

embedded systems

Contiki-NG

Computer Science with specialization in Computer Communication

Datavetenskap med inriktning mot datorkommunikation

Publikations- och innehållstyp

vet (ämneskategori)

ovr (ämneskategori)