New Paradigms for Access Control in Constrained Environments

Abdelkarim Cherkaoui (1) , Lilian Bossuet (1) , L. Seitz (2) , G. Selander (3) , R. Borgaonkar (4)

1 LHC - Laboratoire Hubert Curien
2 SICS
3 Ericsson Research
4 T-Labs

The Internet of Things (IoT) is here, more than 10 billion units are already connected and five times more devices are expected to be deployed in the next five years. Technological standarization and the management and fostering of rapid innovation by governments are among the main challenges of the IoT. However, security and privacy are the key to make the IoT reliable and trusted. Security mechanisms for the IoT should provide features such as scalability, interoperability and lightness. This paper adresses authentication and access control in the frame of the IoT. It presents Physical Unclonable Functions (PUF), which can provide cheap, secure, tamper-proof secret keys to authentify constrained M2M devices. To be successfully used in the IoT context, this technology needs to be embedded in a standardized identity and access management framework. On the other hand, Embedded Subscriber Identity Module (eSIM) can provide cellular connectivity with scalability, interoperability and standard compliant security protocols. The paper discusses an authorization scheme for a constrained resource server taking advantage of PUF and eSIM features. Concrete IoT uses cases are discussed (SCADA and building automation).

Mots clés: Internet of things (IoT); PHYSICAL UNCLONABLE FUNCTIONS; TERO-PUF; embedded SIM (eSIM)

Domaines: Systèmes embarqués; Cryptographie et sécurité [cs.CR]

Abdelkarim Cherkaoui, Lilian Bossuet, L. Seitz, G. Selander, R. Borgaonkar. New Paradigms for Access Control in Constrained Environments. 9th International Symposium on Reconfigurable Communication-centric Systems-on-Chip (ReCoSoC), May 2014, Montpellier, France. 4 p. ⟨ujm-01011300⟩