Device Identity and Trust in IoT-sphere Forsaking Cryptography
Device Identity and Trust in IoT-sphere Forsaking Cryptography
复制标题
物联网领域的设备身份和信任放弃密码学
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
S. Goeringer
中科院分区：
文献类型：
--
作者：
I. Ray;D. Kar;Jordan Peterson;S. Goeringer
随着物联网（IoT）生态系统的指数级增长，人们越来越关注如何确保其安全性。这一点尤其重要，因为在这个生态系统中，大量设备的计算能力非常低，这使得它们特别容易受到攻击。此外，由于计算要求以及可扩展性问题，传统上用于通过标识和认证在实体中建立信任的密码技术似乎也不适合。我们在这个生态系统中提出了一个新的安全愿景，它不依赖于加密技术，但能够实现强大的设备身份。我们还提出了一个加密密钥少的信任生态系统的轮廓，可用于实现细粒度的访问控制，在一个务实的方式。
With the exponential growth of the Internet of Things (IoT) ecosystem there is increasing concern regarding how to ensure its security. This is particularly critical because in this ecosystem a significant number of devices are of very low computational capabilities making them particularly vulnerable to attacks. Moreover, cryptographic techniques that are tradition- ally used for establishing trust in entities through identification and authentication also do not appear to be suitable because of computational requirements as well as scalability issues. We present a new vision for security in this ecosystem that does not rely on cryptographic techniques and yet is able to achieve strong device identity. We also present the outlines of a crypto key less trust ecosystem that can be used to implement fine-grained access control in a pragmatic manner.