ESDRA: An Efficient and Secure Distributed Remote Attestation Scheme for IoT Swarms
ESDRA: An Efficient and Secure Distributed Remote Attestation Scheme for IoT Swarms
复制标题
ESDRA：针对物联网群的高效、安全的分布式远程认证方案
DOI：
10.1109/jiot.2019.2917223
复制
发表时间：
2019-10-01
影响因子：
10.6
通讯作者：
Zhang, Yuqing
中科院分区：
文献类型：
--
作者：
Kuang, Boyu;Fu, Anmin;Zhang, Yuqing
物联网（IoT）系统通常包含数千个异构设备，这些设备通常在大型、动态和自组织网络中运行。远程认证是这些物联网群安全的重要基石，因为它确保了群设备的软件完整性并保护它们免受攻击。然而，目前的证明方案遭受单点故障验证器。在本文中，我们提出了一个有效的和安全的分布式远程证明（ESSTO）计划的物联网群。我们提出了第一个多对一的证明方案的设备群，这减少了单点故障验证器的可能性。此外，利用分布式认证来验证节点的完整性，并采用指控机制对被入侵节点进行报告，使得ESSEC更容易对被入侵节点进行反馈，减少了认证的运行时间。分析了ESSENT的安全性，并通过仿真实验验证了ESSENT的实用性和有效性。与基于列表的认证方案相比，ESSTOM可以显著减少认证时间，并且在能耗方面具有更好的性能。
An Internet of Things (IoT) system generally contains thousands of heterogeneous devices which often operate in swarms-large, dynamic, and self-organizing networks. Remote attestation is an important cornerstone for the security of these IoT swarms, as it ensures the software integrity of swarm devices and protects them from attacks. However, current attestation schemes suffer from single point of failure verifier. In this paper, we propose an Efficient and Secure Distributed Remote Attestation (ESDRA) scheme for IoT swarms. We present the first many-to-one attestation scheme for device swarms, which reduces the possibility of single point of failure verifier. Moreover, we utilize distributed attestation to verify the integrity of each node and apply accusation mechanism to report the invaded nodes, which makes ESDRA much easier to feedback the certain compromised nodes and reduces the run-time of attestation. We analyze the security of ESDRA and do some simulation experiments to show its practicality and efficiency. Especially, ESDRA can significantly reduce the attestation time and has a better performance in the energy consumption comparing with list-based attestation schemes.