arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1404.7799cs.NIcs.CR
收藏

OSCAR:物联网对象安全架构

OSCAR: Object Security Architecture for the Internet of Things

Malisa Vucinic, Bernard Tourancheau, Franck Rousseau, Andrzej Duda, Laurent Damon, Roberto Guizzetti

摘要:

数十亿智能但受限的对象无线连接到全球网络,需要网络设计的新范式。为受限设备量身定制的新协议标准已经考虑到诸如异步应用流量、缓存需求和组通信等要求而设计。现有的面向连接的安全架构无法跟上-首先,在支持的功能方面,而且在小型受限设备上的规模和导致的延迟方面。在本文中,我们提出了一个体系结构,利用安全概念都以内容为中心的和传统的面向连接的方法。我们依赖于通过(D)TLS建立的安全信道来进行密钥交换,但我们摆脱了通信实体之间的“状态”概念。我们提供了一种机制,以防止重放攻击耦合我们的计划与CoAP应用协议。我们的基于对象的安全体系结构(OSCAR)本质上支持缓存和组播,并不影响受约束的对象的无线电占空比操作。我们在两种情况下评估OSCAR:802.15.4低功耗和有损网络(LLN)和机器对机器(M2M)通信两个不同的硬件平台和MAC层上的一个真正的测试平台,并使用Cooja仿真器。我们在有限的服务器和合理的延迟显着节省能源。我们还讨论了OSCAR对智慧城市部署的适用性。

英文摘要:

Billions of smart, but constrained objects wirelessly connected to the global network require novel paradigms in network design. New protocol standards, tailored to constrained devices, have been designed taking into account requirements such as asynchronous application traffic, need for caching, and group communication. The existing connection oriented security architecture is not able to keep up---first, in terms of the supported features, but also in terms of the scale and resulting latency on small constrained devices. In this paper, we propose an architecture that leverages the security concepts both from content-centric and traditional connection-oriented approaches. We rely on secure channels established by means of (D)TLS for key exchange, but we get rid of the notion of the 'state' among communicating entities. We provide a mechanism to protect from replay attacks by coupling our scheme with the CoAP application protocol. Our object-based security architecture (OSCAR) intrinsically supports caching and multicast, and does not affect the radio duty-cycling operation of constrained objects. We evaluate OSCAR in two cases: 802.15.4 Low Power and Lossy Networks (LLN) and Machine-to-Machine (M2M) communication for two different hardware platforms and MAC layers on a real testbed and using the Cooja emulator. We show significant energy savings at constrained servers and reasonable delays. We also discuss the applicability of OSCAR to Smart City deployments.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑