Enabling the Secure Use of Dynamic Identity for the Internet of Things—Using the Secure Remote Update Protocol (SRUP)

This paper examines dynamic identity, as it pertains to the Internet of Things (IoT), and explores the practical implementation of a mitigation technique for some of the key weaknesses of a conventional dynamic identity model. This paper explores human-centric and machine-based observer approaches f...

Full description

Saved in:
Bibliographic Details
Published in:Future internet 2020-08, Vol.12 (8), p.138
Main Authors: Poulter, Andrew John, Ossont, Steven J., Cox, Simon J.
Format: Article
Language:English
Subjects:
Command and control
Data security
identity
Internet of Things
IoT
Methods
MQTT
QR codes
Read only memory
ROM
Security management
Security systems
Servers
Software
Third party
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This paper examines dynamic identity, as it pertains to the Internet of Things (IoT), and explores the practical implementation of a mitigation technique for some of the key weaknesses of a conventional dynamic identity model. This paper explores human-centric and machine-based observer approaches for confirming device identity, permitting automated identity confirmation for deployed systems. It also assesses the advantages of dynamic identity in the context of identity revocation permitting secure change of ownership for IoT devices. The paper explores use-cases for human and machine-based observation for authentication of device identity when devices join a Command and Control(C2) network, and considers the relative merits for these two approaches for different types of system.
ISSN:1999-5903
1999-5903
DOI:10.3390/fi12080138