Enhancing Digital Certificate Usability in Long Lifespan IoT Devices by Utilizing Private CA
Enhancing Digital Certificate Usability in Long Lifespan IoT Devices by Utilizing Private CA
复制标题
通过利用私有 CA 增强长寿命物联网设备中的数字证书可用性
DOI：
10.1155/2021/6610863
复制
发表时间：
2021
影响因子：
--
通讯作者：
Uehara Tetsutaro
中科院分区：
文献类型：
--
作者：
Yamakawa Daiki;Okimoto Takashi;Teerakanok Songpon;Inomata Atsuo;Uehara Tetsutaro
如今，智能设备和服务已经成为我们日常生活的一部分。这些设备和服务提供了比以前更丰富的用户体验和更高的服务质量。他们中的许多人通过云架构利用传感功能来执行远程设备控制和监控。通常，这些设备和服务提供商之间的通信的安全性（例如，云服务器）是通过使用TLS协议通过PKI标准来实现的。在这项研究中，我们调查了在基于PKI的物联网系统中使用公共证书颁发机构（CA）的风险。进行实验以展示市场上可用的真实的物联网设备中的现有漏洞。接下来，提出在以云为中心的物联网架构中使用私有CA，以更好地控制证书颁发过程和证书的有效期。最后，详细讨论了该方法的安全性分析，指出了该方法的优点和不足。
Today, smart devices and services have become a part of our daily life. These devices and services offer a richer user experience with a much higher quality of services than before. Many of them utilize sensing functions via cloud architecture to perform remote device controls and monitoring. Generally, the security of the communication between these devices and the service provider (e.g., cloud server) is achieved by using the TLS protocol via PKI standard. In this study, we investigate the risk associating with the use of public certificate authorities (CAs) in a PKI‐based IoT system. An experiment is conducted to demonstrate existing vulnerabilities in real IoT devices available in the market. Next, the use of a private CA in the cloud‐centric IoT architecture is proposed to achieve better control over the certificate issuing process and the validity period of the certificate. Lastly, the security analysis pointing out the strengths and drawbacks of the proposed method is discussed in detail.
GPS——全球定位系统
影响因子：
--
作者：
Horst Mehl
通讯作者：
Horst Mehl