Atlas：启用物联网跨供应商认证
Atlas: Enabling Cross-Vendor Authentication for IoT
AI总结：
Atlas通过扩展Web PKI到物联网，实现跨供应商设备认证，无需硬件更改，降低延迟并提高可靠性。
摘要：
云中介物联网架构将认证碎片化到各个供应商的孤岛中，导致跨供应商设备到设备（D2D）交互出现延迟和可用性瓶颈。我们提出了Atlas框架，通过供应商操作的ACME客户端和供应商控制的DNS命名空间，将Web公开密钥基础设施扩展到物联网，通过向设备颁发X.509证书。设备无需硬件更改即可获得全球可验证的身份，并在管理域之间直接建立相互TLS通道，将运行时认证与云可达性解耦。我们已在ESP32和Raspberry Pi上原型化Atlas，将其与基于MQTT的物联网堆栈和Atlas-aware云集成，并在智能家居和智慧城市负载中进行评估。证书配置在每台设备上不到6秒完成，mTLS仅增加约17毫秒的延迟和适度的CPU开销，而基于Atlas的应用程序相比云中介基线保持低且可预测的延迟。由于许多主要供应商已经依赖于ACME兼容的CA为其网络服务，因此Atlas可以立即部署，只需最小的基础设施更改。
英文摘要：
Cloud-mediated IoT architectures fragment authentication across vendor silos and create latency and availability bottlenecks for cross-vendor device-to-device (D2D) interactions. We present Atlas, a framework that extends the Web public-key infrastructure to IoT by issuing X.509 certificates to devices via vendor-operated ACME clients and vendor-controlled DNS namespaces. Devices obtain globally verifiable identities without hardware changes and establish mutual TLS channels directly across administrative domains, decoupling runtime authentication from cloud reachability. We prototype Atlas on ESP32 and Raspberry Pi, integrate it with an MQTT-based IoT stack and an Atlas-aware cloud, and evaluate it in smart-home and smart-city workloads. Certificate provisioning completes in under 6s per device, mTLS adds only about 17ms of latency and modest CPU overhead, and Atlas-based applications sustain low, predictable latency compared to cloud-mediated baselines. Because many major vendors already rely on ACME-compatible CAs for their web services, Atlas is immediately deployable with minimal infrastructure changes.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
