Federated End-to-End Authentication for the Constrained Internet of Things Using IBC and ECC

Markmann, Tobias; Schmidt, Thomas C.; Wählisch, Matthias

doi:10.1145/2785956.2790021

Cited by 27 publications

(20 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As mentioned in Section 4.2, a set of lightweight cryptographic algorithms, which do not impose certificate-related overheads on devices, can be used to provide device authentication in UbiComp systems. There is a recent trend that investigates the benefits of using identity-based (IBC) cryptography to provide cross-domain authentication for constrained devices [102,151,159]. However, some IoT platforms still provide certificate-based device authentication such as Azure IoT, WSO2 or per-device public/private key authentication (RSA and Elliptic Curve algorithms) using JSON Web Tokens such as Google Cloud IoT Platform and WSO2.…”

Section: Authenticationmentioning

confidence: 99%

The computer for the 21st century: present security & privacy challenges

Oliveira

Pereira

Misoczki

et al. 2018

J Internet Serv Appl

View full text Add to dashboard Cite

Decades went by since Mark Weiser published his influential work on the computer of the 21st century. Over the years, some of the UbiComp features presented in that paper have been gradually adopted by industry players in the technology market. While this technological evolution resulted in many benefits to our society, it has also posed, along the way, countless challenges that we have yet to surpass. In this paper, we address major challenges from areas that most afflict the UbiComp revolution: 1. Software Protection: weakly typed languages, polyglot software, and networked embedded systems. 2. Long-term Security: recent advances in cryptanalysis and quantum attacks. 3. Cryptography Engineering: lightweight cryptosystems and their secure implementation. 4. Resilience: issues related to service availability and the paramount role of resilience. 5. Identity Management: requirements to identity management with invisibility. 6. Privacy Implications: sensitivity data identification and regulation. 7. Forensics: trustworthy evidence from the synergy of digital and physical world. We point out directions towards the solutions of those problems and claim that if we get all this right, we will turn the science fiction of UbiComp into science fact.

show abstract

Section: Authenticationmentioning

confidence: 99%

The computer for the 21st century: present security & privacy challenges

Oliveira

Pereira

Misoczki

et al. 2018

J Internet Serv Appl

View full text Add to dashboard Cite

show abstract

“…Markmann et al [8] came up with an end-to-end authentication scheme to deploy a federation of gateways in IoT subnetworks. The work is preliminary, also based on IBC, and brings in insightful ideas to the field.…”

Section: Related Workmentioning

confidence: 99%

“…1 Authentication is a fundamental security property for IoT [3]. Although IoT security received enormous attention from the research community (e.g., [4][5][6][7][8][9][10]), we still claim that existing approaches do not fulfill the needs for seamless authentication. First and foremost, traditional schemes are based on Public Key Infrastructure (PKI) and certificates incur significant processing, memory, storage, communication, and management overheads, and are deemed unfit for IoT devices [11].…”

Section: Introductionmentioning

confidence: 99%

AoT

Neto

Souza

Cunha

et al. 2016

Proceedings of the 14th ACM Conference on Embedded Network Sensor Systems CD-ROM

View full text Add to dashboard Cite

The consumer electronics industry is witnessing a surge in Internet of Things (IoT) devices, ranging from mundane artifacts to complex biosensors connected across disparate networks. As the demand for IoT devices grows, the need for stronger authentication and access control mechanisms is greater than ever. Legacy authentication and access control mechanisms do not meet the growing needs of IoT. In particular, there is a dire need for a holistic authentication mechanism throughout the IoT device life-cycle, namely from the manufacturing to the retirement of the device. As a plausible solution, we present Authentication of Things (AoT), a suite of protocols that incorporate authentication and access control during the entire IoT device life span. Primarily, AoT relies on Identity-and Attribute-Based Cryptography to cryptographically enforce Attribute-Based Access Control (ABAC). Additionally, AoT facilitates secure (in terms of stronger authentication) wireless interoperability of new and guest devices in a seamless manner. To validate our solution, we have developed AoT for Android smartphones like the LG G4 and evaluated all the cryptographic primitives over more constrained devices like the Intel Edison and the Arduino Due. This included the implementation of an Attribute-Based Signature (ABS) scheme. Our results indicate AoT ranges from highly efficient on resource-rich devices to affordable on resource-constrained IoT-like devices. Typically, an ABS generation takes around 27 ms on the LG G4, 282 ms on the Intel Edison, and 1.5 s on the Arduino Due.

show abstract

“…However, IBE can offer secure systems, which are not achievable using PKE. For example, IBE can maintain IoT security as revealed by [2,8,40,50]. Micro Focus [41] launched a secure email service based on IBE and insisted that "IBE can be used to build security systems that are more dynamic, lightweight, and scalable".…”

Section: Introduction 1backgroundmentioning

confidence: 99%

Implementation of a Strongly Robust Identity-Based Encryption Scheme over Type-3 Pairings

Okano

Emura

Ishibashi

et al. 2020

IJNC

View full text Add to dashboard Cite

Identity-based encryption (IBE) is a powerful mechanism for maintaining security. However, systems based on IBE are unpopular when compared with those of the public-key encryption (PKE). In our opinion, one of the reasons is a gap between theory and practice. For example, a generic transformation of weakly/strongly robust IBE from any IBE has been proposed by Abdalla et al., no robust IBE scheme is explicitly given. This means that, theoretically, anyone can construct a weakly/strongly robust IBE scheme by employing this transformation. However, this seems not easily applicable to noncryptographers. In this paper, we first introduce the Gentry IBE scheme constructed over Type-3 pairings by employing the transformation proposed by Abe et al., and second we explicitly give strongly/weakly robust Gentry IBE schemes by employing the Abdalla et al. transformation. Finally, we show its implementation result and show that we can add strong robustness to the Gentry IBE scheme with a very few additional costs. We employ the mcl library to support a Barreto-Naehrig curve defined over the 462-bit prime. The encryption requires about 5 ms, whereas the decryption requires about 9 ms.

show abstract

Federated End-to-End Authentication for the Constrained Internet of Things Using IBC and ECC

Cited by 27 publications

References 4 publications

The computer for the 21st century: present security & privacy challenges

The computer for the 21st century: present security & privacy challenges

AoT

Implementation of a Strongly Robust Identity-Based Encryption Scheme over Type-3 Pairings

Contact Info

Product

Resources

About