Enabling the secure use of dynamic identity for the internet of things — using the Secure Remote Update Protocol (SRUP)

Poulter, Andrew John, Ossont, Steven J and Cox, Simon (2020) Enabling the secure use of dynamic identity for the internet of things — using the Secure Remote Update Protocol (SRUP). Future Internet, 12 (8), 1-15, [138]. (doi:10.3390/fi12080138).

Record type: Article

Abstract

This paper examines dynamic identity, as it pertains to the Internet of Things (IoT), and explores the practical implementation of a mitigation technique for some of the key weaknesses of a conventional dynamic identity model. This paper explores human-centric and machine-based observer approaches for confirming device identity, permitting automated identity confirmation for deployed systems. It also assesses the advantages of dynamic identity in the context of identity revocation permitting secure change of ownership for IoT devices. The paper explores use-cases for human and machine-based observation for authentication of device identity when devices join a Command and Control(C2) network, and considers the relative merits for these two approaches for different types of system.

Text

futureinternet-12-00138 - Version of Record

Available under License Creative Commons Attribution.

Download (6MB)

More information

Submitted date: 20 July 2020

e-pub ahead of print date: 15 August 2020

Published date: 18 August 2020

Additional Information: Funding Information: Funding: This research was wholly funded by the United Kingdom Defence Science and Technology Laboratory (Dstl). Dstl is a part of the U.K. Ministry of Defence. Publisher Copyright: © 2020 by the authors.

Keywords: C2, Identity, Internet of Things, IoT, MQTT, NFC, QR Code, Security, command and control