chownIoT: Enhancing IoT Privacy by Automated Handling of Ownership Change

Khan, Sakib Nizam; Marchal, Samuel; Buchegger, Sonja; Asokan, N.

doi:10.1007/978-3-030-16744-8_14

Cited by 7 publications

(4 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Ownership Transfer: The closely related area of ownership transfer for IoT has been studied from the perspectives of single-user privacy protection and custom non PKI-based solutions. In [7] the focus is on the privacy and protection of smart home device data. A custom solution for creating user profiles, and automatically detecting ownership changes for individual devices is presented.…”

Section: Related Workmentioning

confidence: 99%

AutoPKI: public key infrastructure for IoT with automated trust transfer

Höglund,

Bouget,

Furuhed

et al. 2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

IoT deployments grow in numbers and size, which makes questions of long-term support and maintainability increasingly important. Without scalable and standard-compliant capabilities to transfer the control of IoT devices between service providers, IoT system owners cannot ensure long-term maintainability, and risk vendor lock-in. The manual overhead must be kept low for large-scale IoT installations to be economically feasible. We propose AutoPKI, a lightweight protocol to update the IoT PKI credentials and shift the trusted domains, enabling the transfer of control between IoT service providers, building upon the latest IoT standards for secure communication and efficient encodings. We show that the overhead for the involved IoT devices is small and that the overall required manual overhead can be minimized. We analyse the fulfilment of the security requirements, and for a subset of them, we demonstrate that the desired security properties hold through formal verification using the Tamarin prover.

show abstract

Section: Related Workmentioning

confidence: 99%

AutoPKI: public key infrastructure for IoT with automated trust transfer

Höglund,

Bouget,

Furuhed

et al. 2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

show abstract

“…Ownership transfer The related area of IoT ownership transfer has been studied from different perspectives. In [5] the focus is on the privacy and protection of smart home device data. A custom solution for creating user profiles, and automatically detecting ownership changes for individual devices is presented.…”

Section: Related Workmentioning

confidence: 99%

Towards Automated PKI Trust Transfer for IoT

Höglund

Raza

Furuhed³

2022

2022 IEEE International Conference on Public Key Infrastructure and Its Applications (PKIA)

View full text Add to dashboard Cite

IoT deployments grow in numbers and size and questions of long time support and maintainability become increasingly important. To prevent vendor lock-in, standard compliant capabilities to transfer control of IoT devices between service providers must be offered. We propose a lightweight protocol for transfer of control, and we show that the overhead for the involved IoT devices is small and the overall required manual overhead is minimal. We analyse the fulfilment of the security requirements to verify that the stipulated requirements are satisfied.

show abstract

“…However, most of these solutions reduce the availability of original data with time delay [36]. Finally, in [19], Khan et. al.…”

Section: Related Workmentioning

confidence: 99%

A Survey-Based Exploration of Users’ Awareness and Their Willingness to Protect Their Data with Smart Objects

Wickramasinghe

Reinhardt

2020

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

In the last years, the Internet of Things (IoT) and smart objects have become more and more popular in our everyday lives. While IoT contributes in making our everyday life more comfortable and easier, it also increases the threats to our privacy, as embedded sensors collect data about us and our environment. To foster the acceptance of IoT, privacy-preserving solutions are therefore necessary. While such solutions have already been proposed, most of them do not involve the users in their design. In this paper, we therefore adopt a user-centric approach and lay the ground for the future design of user-centric privacypreserving solutions dedicated to smart home environments. To this end, we have designed and distributed a questionnaire fulfilled by 229 anonymous participants. Our objectives are two-fold: We aim at investigating (1) requirements for end user-involved privacy-preserving solutions and (2) users' readiness to be involved in their own privacy protection. Our results show that the majority of our participants are aware of the data collection happening as well as the associated privacy risks and would be ready to control and audit the collected data.

show abstract

chownIoT: Enhancing IoT Privacy by Automated Handling of Ownership Change

Abstract: This is an electronic reprint of the original article. This reprint may differ from the original in pagination and typographic detail.

Cited by 7 publications

References 17 publications

AutoPKI: public key infrastructure for IoT with automated trust transfer

AutoPKI: public key infrastructure for IoT with automated trust transfer

Towards Automated PKI Trust Transfer for IoT

A Survey-Based Exploration of Users’ Awareness and Their Willingness to Protect Their Data with Smart Objects

Contact Info

Product

Resources

About