ExTru: A Lightweight, Fast, and Secure Expirable Trust for the Internet of Things
ExTru: A Lightweight, Fast, and Secure Expirable Trust for the Internet of Things
复制标题
DOI：
10.1109/dcas51144.2020.9330632
复制
发表时间：
2020-04
期刊：
影响因子：
--
通讯作者：
Hadi Mardani Kamali;K. Z. Azar;Shervin Roshanisefat;Ashka Vakil;Avesta Sasan
中科院分区：
文献类型：
--
作者：
Hadi Mardani Kamali;K. Z. Azar;Shervin Roshanisefat;Ashka Vakil;Avesta Sasan
物联网（IoT）边缘的资源受限性质对为该系列设备设计安全和高性能通信提出了挑战。虽然侧信道抵抗密码（块或流）可以保证通信的安全性，但这些密码的能量密集型性质使其不适合轻量级物联网解决方案。在本文中，我们介绍了ExTru，一种基于流密码的加密通信协议，该协议添加了一个可配置的切换和切换网络（CQs），不仅提高了这些设备中的通信性能，而且比传统的侧信道抵抗密码消耗的能量要少得多。虽然该方案的整体结构是泄漏对物理攻击，我们引入了一个动态加密机制，消除了这个漏洞。我们演示了如何在建议的计划中的每个通信消息降低了信任度。因此，由于特定数量的消息N可以破坏通信并提取密钥，因此通过使用动态加密机制，ExTru可以在$T$消息之后周期性地重新发起信任级别，其中T < N，以保护通信免受侧信道和基于扫描的攻击（例如SAT攻击）。此外，我们证明，通过正确配置T的值，ExTru不仅增加了从每个“设备”到每个“消息”的安全强度，它还显着提高了节能以及吞吐量与只使用传统的侧信道抵抗块/流密码的架构。
The resource-constrained nature of the Internet of Things (IoT) edges, poses a challenge in designing a secure and high-performance communication for this family of devices. Although side-channel resistant ciphers (either block or stream) could guarantee the security of the communication, the energy intensive nature of these ciphers makes them undesirable for lightweight IoT solutions. In this paper, we introduce ExTru, an encrypted communication protocol based on stream ciphers that adds a configurable switching & toggling network (CSTN) to not only boost the performance of the communication in these devices, it also consumes far less energy than the conventional side-channel resistant ciphers. Although the overall structure of the proposed scheme is leaky against physical attacks, we introduce a dynamic encryption mechanism that removes this vulnerability. We demonstrate how each communicated message in the proposed scheme reduces the level of trust. Accordingly, since a specific number of messages, N, could break the communication and extract the key, by using the dynamic encryption mechanism, ExTru can re-initiate the level of trust periodically after $T$ messages where T < N, to protect the communication against side-channel and scan-based attacks (e.g. SAT attack). Furthermore, we demonstrate that by properly configuring the value of T, ExTru not only increases the strength of security from per “device” to per “message”, it also significantly improves energy saving as well as throughput vs. an architecture that only uses a conventional side-channel resistant block/stream cipher.