A Survey of Key Bootstrapping Protocols Based on Public Key Cryptography in the Internet of Things

Abstract

The Internet of Things envisages connecting all physical objects or things to the Internet, using devices as diverse as smartphones, coffee makers, washing machines, automobiles, lamps, and wearable devices, among many others. The explosive growth of Internet-connected sensing and actuating devices has bridged the gap between the physical and the digital world, with new solutions bringing benefits to people, processes, and businesses. However, security will be a major challenge in enabling most of such applications. The lack of secure links exposes data exchanged by devices to theft and attacks, with hackers already showing a keen interest in this area. Secure communication in the IoT will require a multifaceted approach, in particular, targeting aspects as relevant as the communications' protocols and data that need to be secured. One of the major aspects among these is how keys are bootstrapped in devices, for the purpose of supporting secure communications. In this paper, we survey the state of the art in key bootstrapping protocols based on public-key cryptography in the Internet of Things. Due to its inherent scalability, such protocols are particularly relevant for the implementation of distributed identity and trust management mechanisms on the IoT, in the context of which devices may be authenticated and trusted. The reviewed proposals are analyzed and classified on the basis of the key delivery method, the underlying cryptographic primitive, and the authentication mechanism supported. We also identify and discuss the main challenges of implementing such methods in the context of IoT applications and devices, together with the main avenues for conducting further research in the area. INDEX TERMS Authentication, Internet of Things, key bootstrapping, key management, public key cryptography, security. The associate editor coordinating the review of this manuscript and approving it for publication was Congduan Li.

An Authentication Scheme for an IoT Environment using Advanced Multiple Encryption System

“…There will be many restrictions for smart toy's hardware so they have presented a specific encryption methodology that proved to provide secure solution for the sensitive IoT environment. In [5], they have proposed a methodology with three phases of security. The first phase handles non interfered messages of light weight data.…”

Wireless Power-Data Transmission for Industrial Internet of Things: Simulations and Experiments

“…I NTERNET of things (IoT) are broadly defined as a network of "things" interfaced with the internet [1]- [3]. "Things" here could imply a collection of electronic devices or sensors, and subsystems working in synergy.…”

Metrological Challenges in Collaborative Sensing: Applicability of Digital Calibration Certificates

“…One approach to counter the wireless and attachment vulnerabilities is to assign a cryptographically secure identifier to all IoT devices already before deployment, e.g., at the manufacturing time. If these preconfigured identifiers are then configured at the system side before a device is deployed, already the initial connection between a new device and the rest of the system can be secured [ 28 , 29 ].…”