Digitalisierung
Refine
Year of publication
- 2021 (1) (remove)
Document Type
Language
- English (1)
Has Fulltext
- no (1)
Is part of the Bibliography
- no (1)
Keywords
- Internet of Things (1)
- IoTAG (1)
- device authentication (1)
- device pairing (1)
- trusted connection (1)
Institute
- Fakultät Informatik und Mathematik (1) (remove)
Begutachtungsstatus
- peer-reviewed (1)
Since IoT devices are potentially insecure and offer great attack potential, in our past research we presented IoTAG, a solution where devices communicate security-related information about themselves. However, since this information can also be exploited by attackers, we present in this paper a solution against the misuse of IoTAG. In doing so, we address the two biggest problems: authentication and pairing with a trusted device. This is solved by introducing a pairing process, which uses the simultaneous authentication of equals algorithm to securely exchange and verify each others signature, and by using the server and client authentication provided by HTTP over TLS. We provide the minimum requirements and evaluate the methods used. The emphasis is on known and already proven methods. Additionally, we analyze the potential consequences of an attacker tapping the IoTAG information. Finally, we conclude that the solution successfully prevents access to IoTAG by unauthorized clients on the same network.