Enabling the Secure Use of Dynamic Identity for the Internet of Things—Using the Secure Remote Update Protocol (SRUP)

Future Internet

SimonJ. Cox¹  StevenJ. Ossont¹  AndrewJohn Poulter¹ 

[1] Faculty of Engineering and the Environment, University of Southampton, Southampton SO17 1BJ, UK;

关键词: C2;    command and control;    identity;    internet of things;    IoT;    MQTT;   

DOI  :  10.3390/fi12080138

来源: DOAJ

【 摘 要 】

This paper examines dynamic identity, as it pertains to the Internet of Things (IoT), and explores the practical implementation of a mitigation technique for some of the key weaknesses of a conventional dynamic identity model. This paper explores human-centric and machine-based observer approaches for confirming device identity, permitting automated identity confirmation for deployed systems. It also assesses the advantages of dynamic identity in the context of identity revocation permitting secure change of ownership for IoT devices. The paper explores use-cases for human and machine-based observation for authentication of device identity when devices join a Command and Control(C2) network, and considers the relative merits for these two approaches for different types of system.

【 授权许可】

Unknown