DAXiot: A Decentralized Authentication and Authorization Scheme for Dynamic IoT Networks
Fuente:
arXiv
Guardado en:
| Autores principales: | , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2023
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866910669066993664 |
|---|---|
| author | Philipp, Artur Küpper, Axel |
| author_facet | Philipp, Artur Küpper, Axel |
| contents | Federated and decentralized networks supporting frequently changing system participants are a requirement for future Internet of Things (IoT) use cases. IoT devices and networks often lack adequate authentication and authorization mechanisms, resulting in insufficient privacy for entities in such systems. In this work we address both issues by designing a privacy preserving challenge-response style authentication and authorization scheme based on Decentralized Identifiers and Verifiable Credentials. Our solution allows a decentralized permission management of frequently changing network participants and supports authenticated encryption for data confidentiality. We demonstrate our solution in an MQTT 5.0 scenario and evaluate its security, privacy guarantees, and performance. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2307_06919 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | DAXiot: A Decentralized Authentication and Authorization Scheme for Dynamic IoT Networks Philipp, Artur Küpper, Axel Cryptography and Security Networking and Internet Architecture Federated and decentralized networks supporting frequently changing system participants are a requirement for future Internet of Things (IoT) use cases. IoT devices and networks often lack adequate authentication and authorization mechanisms, resulting in insufficient privacy for entities in such systems. In this work we address both issues by designing a privacy preserving challenge-response style authentication and authorization scheme based on Decentralized Identifiers and Verifiable Credentials. Our solution allows a decentralized permission management of frequently changing network participants and supports authenticated encryption for data confidentiality. We demonstrate our solution in an MQTT 5.0 scenario and evaluate its security, privacy guarantees, and performance. |
| title | DAXiot: A Decentralized Authentication and Authorization Scheme for Dynamic IoT Networks |
| topic | Cryptography and Security Networking and Internet Architecture |
| url | https://arxiv.org/abs/2307.06919 |