论文信息 - Efficient authentication of resource-constrained IoT devices based on ECQV implicit certificates and datagram transport layer security protocol

Efficient authentication of resource-constrained IoT devices based on ECQV implicit certificates and datagram transport layer security protocol

This paper introduces a design and implementation of a security scheme for the Internet of Things (IoT) based on ECQV Implicit Certificates and Datagram Transport Layer Security (DTLS) protocol. In this proposed security scheme, Elliptic curve cryptography based ECQV implicit certificate plays a key role allowing mutual authentication and key establishment between two resource-constrained IoT devices. We present how IoT devices get ECQV implicit certificates and use them for authenticated key exchange in DTLS. An evaluation of execution time of the implementation is also conducted to assess the efficiency of the solution.

[1] Georg Carle,et al. A DTLS based end-to-end security architecture for the Internet of Things with two-way authentication , 2012, 37th Annual IEEE Conference on Local Computer Networks - Workshops.

[2] Eric Rescorla,et al. Datagram Transport Layer Security Version 1.2 , 2012, RFC.

[3] Giuseppe Piro,et al. Key Management Protocol with Implicit Certificates for IoT systems , 2015, IoT-Sys@MobiSys.

[4] Andrei V. Gurtov,et al. Two-phase authentication protocol for wireless sensor networks in distributed IoT applications , 2014, 2014 IEEE Wireless Communications and Networking Conference (WCNC).

[5] Simon Blake-Wilson,et al. SEC 1: Elliptic Curve Cryptography , 1999 .

[6] Bodo Möller,et al. Network Working Group Elliptic Curve Cryptography (ecc) Cipher Suites for Transport Layer Security (tls) , 2006 .

[7] Andrei Gurtov,et al. Certificate based keying scheme for DTLS secured IoT , 2013 .

[8] Guang Gong,et al. Securing ZigBee smart energy profile 1.x with OpenECC library , 2013, SEGS '13.

[9] Andrei V. Gurtov,et al. Certificate-Based Pairwise Key Establishment Protocol for Wireless Sensor Networks , 2013, 2013 IEEE 16th International Conference on Computational Science and Engineering.