DNS-Based Dynamic Authentication for Microservices in IoT

Proceedings

López, Andrés Marín¹  Cabarcos, Patricia Arias ²  Sánchez, Daniel Díaz³  Mendoza, Florina Almenares⁴ 

[1] Author to whom correspondence should be addressed.;Presented at the 12th International Conference on Ubiquitous Computing and Ambient Intelligence (UCAmI 2018), Punta Cana, Dominican Republic, 4–7 December 2018.;Telematic Engineering Department, Carlos III University of Madrid, Avenida de la Universidad 30, 28911 Leganés, Spain;currently supported by an Alexander von Humboldt fellowship at Universität Mannheim.

关键词: IoT;    microservices;    DNSSEC;    DANE;    chameleon signatures;   

DOI  :  10.3390/proceedings2191233

学科分类：社会科学、人文和艺术（综合）

来源: mdpi

【 摘 要 】

IoT devices provide with real-time data to a rich ecosystems of services and applications that will be of uttermost importance for ubiquitous computing. The volume of data and the involved subscribe/notify signaling will likely become a challenge also for access and core netkworks. Designers may opt for microservice architectures and fog computing to address this challenge while offering the required flexibility for the main players of ubiquitous computing: nomadic users. Microservices require strong security support for Fog computing, to rely on nodes in the boundary of the network for secure data collection and processing. IoT low cost devices face outdated certificates and security support, due to the elapsed time from manufacture to deployment. In this paper we propose a solution based on microservice architectures and DNSSEC, DANE and chameleon signatures to overcome these difficulties. We will show how trap doors included in the certificates allow a secure and flexible delegation for off-loading data collection and processing to the fog. The main result is showing this requires minimal manufacture device configuration, thanks to DNSSEC support.

【 授权许可】

CC BY