KESIC：面向智能、物联网和网络物理系统设备的Kerberos扩展
KESIC: Kerberos Extensions for Smart, IoT and CPS Devices
AI总结：
KESIC通过Kerberos扩展实现物联网设备的高效安全多用户访问，无需修改Kerberos协议，内存和运行时开销显著降低。
摘要：
随着当今使用的物联网（IoT）设备数量不断增长，安全高效的多用户访问机制变得越来越重要。Kerberos是一种众所周知的、经过时间考验的安全认证和访问控制系统，适用于分布式系统，其中许多用户安全地访问各种分布式服务。传统上，这些服务是软件应用程序或设备，如打印机。然而，由于Kerberos协议相对重量级，且设备资源受限，它并不直接适用于物联网设备。本文提出了KESIC，一个能够实现物联网设备高效、安全多用户访问的系统。KESIC旨在通过Kerberos促进物联网设备和用户之间的相互认证，而无需修改Kerberos的协议。为此，KESIC包含一个特殊的Kerberized服务，称为IoT Server，用于管理对物联网设备的访问。KESIC针对两种类型的物联网设备提出了两个协议，以实现安全、全面的多用户访问系统：通用设备和严重功耗受限设备。在性能方面，与Kerberos相比，KESIC消耗的内存约为47倍更少，运行时开销约为135倍更低。
英文摘要：
Secure and efficient multi-user access mechanisms are increasingly important for the growing number of Internet of Things (IoT) devices being used today. Kerberos is a well-known and time-tried security authentication and access control system for distributed systems wherein many users securely access various distributed services. Traditionally, these services are software applications or devices, such as printers. However, Kerberos is not directly suitable for IoT devices due to its relatively heavy-weight protocols and the resource-constrained nature of the devices. This paper presents KESIC, a system that enables efficient and secure multi-user access for IoT devices. KESIC aims to facilitate mutual authentication of IoT devices and users via Kerberos without modifying the latter's protocols. To facilitate that, KESIC includes a special Kerberized service, called IoT Server, that manages access to IoT devices. KESIC presents two protocols for secure and comprehensive multi-user access system for two types of IoT devices: general and severely power constrained. In terms of performance, KESIC onsumes $\approx~47$ times less memory, and incurs $\approx~135$ times lower run-time overhead than Kerberos.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
