Enterprise security for the internet of things (IOT): Lightweight bootstrapping with EAP-NOOB

Aleksi Peltonen*, Eduardo Inglés, Sampsa Latvala, Dan Garcia-Carrillo, Mohit Sethi, Tuomas Aura

*Tämän työn vastaava kirjoittaja

Tutkimustuotos: LehtiartikkeliArticleScientificvertaisarvioitu

45 Lataukset (Pure)

Abstrakti

The emergence of radio technologies, such as Zigbee, Z-Wave, and Bluetooth Mesh, has transformed simple physical devices into smart objects that can understand and react to their environment. Devices, such as light bulbs, door locks, and window blinds, can now be connected to, and remotely controlled from, the Internet. Given the resource-constrained nature of many of these devices, they have typically relied on the use of universal global shared secrets for the initial bootstrapping and commissioning phase. Such a scheme has obvious security weaknesses and it also creates undesirable walled-gardens where devices of one ecosystem do not inter-operate with the other. In this paper, we investigate whether the standard Extensible Authentication Protocol (EAP) framework can be used for secure bootstrapping of resource-constrained devices. EAP naturally provides the benefits of per-device individual credentials, straightforward revocation, and isolation of devices. In particular, we look at the Nimble out-of-band authentication for EAP (EAP-NOOB) as a candidate EAP authentication method. EAP-NOOB greatly simplifies deployment of such devices as it does not require them to be pre-provisioned with credentials of any sort. Based on our implementation experience on off-the-shelf hardware, we demonstrate that lightweight EAP-NOOB is indeed a way forward to securely bootstrap such devices.

AlkuperäiskieliEnglanti
Artikkeli6101
Sivut1-23
Sivumäärä23
JulkaisuSensors (Switzerland)
Vuosikerta20
Numero21
DOI - pysyväislinkit
TilaJulkaistu - 1 marraskuuta 2020
OKM-julkaisutyyppiA1 Julkaistu artikkeli, soviteltu

Sormenjälki Sukella tutkimusaiheisiin 'Enterprise security for the internet of things (IOT): Lightweight bootstrapping with EAP-NOOB'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä