How to Prevent Misuse of IoTAG?
- Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network.
Author: | Bernhard Weber, Lukas Hinterberger, Sebastian Fischer, Rudolf Hackenberg |
---|---|
URL / DOI: | https://www.thinkmind.org/articles/cloud_computing_2021_1_40_28006.pdf |
ISBN: | 978-1-61208-845-7 |
ISSN: | 2308-4294 |
Parent Title (English): | Cloud Computing 2021: the Twelfth International Conference on Cloud Computing, GRIDs, and Virtualization: April 18-22, 2021, Porto, Portugal |
Publisher: | IARIA |
Place of publication: | Wilmington, DE, USA |
Editor: | Bob Duncan, Yong Woo Lee, Manuela Popescu |
Document Type: | conference proceeding (article) |
Language: | English |
Year of first Publication: | 2021 |
Release Date: | 2022/01/27 |
Tag: | Internet of Things IoTAG; device authentication; device pairing; trusted connection |
Institutes: | Fakultät Informatik und Mathematik |
Fakultät Informatik und Mathematik / Labor Informationssicherheit und Complience (ISC) | |
Begutachtungsstatus: | peer-reviewed |
research focus: | Digitalisierung |
Licence (German): | Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG |