Incremental Threshold Scheme Enabled IoT Group Key Management

Mingyan Li; Samuel C. Hollifield; Michael D. Iannacone

doi:10.1109/CSNet59123.2023.10339701

Incremental Threshold Scheme Enabled IoT Group Key Management

Mingyan Li, Samuel C. Hollifield, Michael D. Iannacone

Emerging Cyber Systems Research

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Scopus citations

Abstract

Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.

Original language	English
Title of host publication	2023 7th Cyber Security in Networking Conference, CSNet 2023
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	123-129
Number of pages	7
ISBN (Electronic)	9798350342871
DOIs	https://doi.org/10.1109/CSNet59123.2023.10339701
State	Published - 2023
Event	7th Cyber Security in Networking Conference, CSNet 2023 - Montreal, Canada Duration: Oct 16 2023 → Oct 18 2023

Publication series

Name	2023 7th Cyber Security in Networking Conference, CSNet 2023

Conference

Conference	7th Cyber Security in Networking Conference, CSNet 2023
Country/Territory	Canada
City	Montreal
Period	10/16/23 → 10/18/23

Funding

This manuscript has been co-authored by UT-Battelle, LLC, under contract DEAC05-00OR22725 with the US Department of Energy (DOE). The US government retains and the publisher, by accepting the article for publication, acknowledges that the US government retains a nonexclusive, paid-up, irrevocable, worldwide license to publish or reproduce the published form of this manuscript, or allow others to do so, for US government purposes. DOE will provide public access to these results of federally sponsored research in accordance with the DOE Public Access Plan (http://energy.gov/downloads/doe-public-access-plan).

Keywords

IoT security
group key management
secret sharing scheme
secure Pub/Sub
secure group communication
threshold cryptography

Access to Document

10.1109/CSNet59123.2023.10339701

Cite this

@inproceedings{9f7482c946874f648f72e1545295fcff,

title = "Incremental Threshold Scheme Enabled IoT Group Key Management",

abstract = "Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.",

keywords = "IoT security, group key management, secret sharing scheme, secure Pub/Sub, secure group communication, threshold cryptography",

author = "Mingyan Li and Hollifield, {Samuel C.} and Iannacone, {Michael D.}",

note = "Publisher Copyright: {\textcopyright} 2023 IEEE.; 7th Cyber Security in Networking Conference, CSNet 2023 ; Conference date: 16-10-2023 Through 18-10-2023",

year = "2023",

doi = "10.1109/CSNet59123.2023.10339701",

language = "English",

series = "2023 7th Cyber Security in Networking Conference, CSNet 2023",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "123--129",

booktitle = "2023 7th Cyber Security in Networking Conference, CSNet 2023",

}

Li, M, Hollifield, SC & Iannacone, MD 2023, Incremental Threshold Scheme Enabled IoT Group Key Management. in 2023 7th Cyber Security in Networking Conference, CSNet 2023. 2023 7th Cyber Security in Networking Conference, CSNet 2023, Institute of Electrical and Electronics Engineers Inc., pp. 123-129, 7th Cyber Security in Networking Conference, CSNet 2023, Montreal, Canada, 10/16/23. https://doi.org/10.1109/CSNet59123.2023.10339701

Incremental Threshold Scheme Enabled IoT Group Key Management. / Li, Mingyan; Hollifield, Samuel C.; Iannacone, Michael D.
2023 7th Cyber Security in Networking Conference, CSNet 2023. Institute of Electrical and Electronics Engineers Inc., 2023. p. 123-129 (2023 7th Cyber Security in Networking Conference, CSNet 2023).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Incremental Threshold Scheme Enabled IoT Group Key Management

AU - Li, Mingyan

AU - Hollifield, Samuel C.

AU - Iannacone, Michael D.

PY - 2023

Y1 - 2023

N2 - Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.

AB - Cyber landscape evolves rapidly. Internet of Things (IoT) and Edge Computing (EC) have rapidly become an integral part of the modern computing infrastructure. It is expected that there will be more than 50 billion active and connected IoT devices by 2025 [1]. Pervasive IoT/EC creates unprecedented opportunities bridging the gap between previously segregated cyber and physical spaces. However, this progress also brings along new security challenges. IoT devices typically have limited computation, communication, and storage resources. This leads to security architecture designs such as using symmetric keys for group communication. While secure and efficient in stable network settings, symmetric key solutions are ill-adapted for IoT's highly dynamic device mobility behavior and frequent group membership turnover. Whenever IoT members leave a group, the known symmetric keys cannot be made forgotten, posing a serious vulnerability. This leads to frequent re-groupings that require expensive re-authentication, key regeneration, and key redistribution in order to maintain IoT/EC security. We present a novel symmetric key management framework that integrate an Incremental Threshold Scheme (ITS) cryptographical function into communication protocol's key rotation mechanism to allow for secure and efficient symmetric key communication group member node revocation. This ITS-enabled key management framework alleviates the need of frequent and expensive re-grouping and re-keying needed by today's large and dynamic IoT/EC operations. We further applied this ITS-enabled key management framework to a distributed IoT/EC-integrated publish and subscribe framework for applicability validation.

KW - IoT security

KW - group key management

KW - secret sharing scheme

KW - secure Pub/Sub

KW - secure group communication

KW - threshold cryptography

UR - http://www.scopus.com/inward/record.url?scp=85182262465&partnerID=8YFLogxK

U2 - 10.1109/CSNet59123.2023.10339701

DO - 10.1109/CSNet59123.2023.10339701

M3 - Conference contribution

AN - SCOPUS:85182262465

T3 - 2023 7th Cyber Security in Networking Conference, CSNet 2023

SP - 123

EP - 129

BT - 2023 7th Cyber Security in Networking Conference, CSNet 2023

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 7th Cyber Security in Networking Conference, CSNet 2023

Y2 - 16 October 2023 through 18 October 2023

ER -

Incremental Threshold Scheme Enabled IoT Group Key Management

Abstract

Publication series

Conference

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this