ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices
ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices
复制标题
DOI：
10.1109/tcad.2018.2858422
复制
发表时间：
2018-11-01
影响因子：
2.9
通讯作者：
Tsudik, Gene
中科院分区：
文献类型：
--
作者：
Asokan, N.;Nyman, Thomas;Tsudik, Gene
安全固件更新是物联网（IoT）设备生命周期中的重要阶段。为其他计算环境设计的现有技术并不适合物联网设备，因为它们没有考虑现实的大规模物联网部署的特性。这促使我们设计了一种用于现实嵌入式设备（ASSURED）的安全软件更新架构，这是一种安全且可扩展的物联网更新框架。ASSURED包括典型物联网更新生态系统中的所有利益相关者，同时在制造商和设备之间提供端到端安全性。为了证明其可行性和实用性，ASSURED实例化和实验评估两个商品硬件平台。结果表明，ASSURED是相当快，比目前的更新机制在现实的设置。
Secure firmware update is an important stage in the Internet of Things (IoT) device life-cycle. Prior techniques, designed for other computational settings, are not readily suitable for IoT devices, since they do not consider idiosyncrasies of a realistic large-scale IoT deployment. This motivates our design of architecture for secure software update of realistic embedded devices (ASSURED), a secure and scalable update framework for IoT. ASSURED includes all stakeholders in a typical IoT update ecosystem, while providing end-to-end security between manufacturers and devices. To demonstrate its feasibility and practicality, ASSURED is instantiated and experimentally evaluated on two commodity hardware platforms. Results show that ASSURED is considerably faster than current update mechanisms in realistic settings.