{"id":3554,"date":"2017-03-10T00:01:39","date_gmt":"2017-03-09T18:31:39","guid":{"rendered":"http:\/\/www.allerin.com\/blog\/?p=3554"},"modified":"2017-03-09T13:28:39","modified_gmt":"2017-03-09T07:58:39","slug":"authentication-and-device-identification-in-iot-security","status":"publish","type":"post","link":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/","title":{"rendered":"Authentication and device identification in IoT security"},"content":{"rendered":"

\"\"<\/a><\/p>\n

Experts and researchers will point out that that the IoT must be secure in order for its value to be realized. Usually this point is justified by describing a scary scenario where an attacker is able to access a device with which he can reset an insulin pump. Such incidences of impersonation of valid users highlights the importance of device identification in IoT. If organizations are not sure of what IoT entity they are messaging with, then they won\u2019t able to protect the potentially sensitive sensor data being shared or the transactions being conducted.<\/p>\n

Enabling device identification in IoT with PKI<\/h1>\n

Organizations are relying on digital communications that are secured with digital certificates based on Public Key Infrastructure (PKI) for their daily operations. These certificates are used typically for conducting several types of security measures such as device authentication, securing communications using TLS\/SSL, and for securing machine-to-machine and program-to-program communication.<\/p>\n

<\/h6>\n

Due to PKI’s versatility and its ability to scale, PKI is considered to be significant in enabling a secure foundation for device identity and authentication.<\/p>\n

<\/h6>\n

The following are the adaptations that PKI should have in order to enhance IoT security:<\/p>\n

IoT scale<\/h1>\n

PKI should be able to effectively sustain the process of issuing digital certificates in high volumes. In some cases, it may require issuing certificates at high velocity, for example, issuing certificates for manufacturing lines or short-lived certificates. Experts say that IoT scale can be achieved with on-premises PKI, while cloud-based PKIs mostly offer organizations a more economical and feasible way of achieving IoT scale.<\/p>\n

Long-lived certificates<\/h1>\n

Typically, digital certificates have a finite life span which means they have expiry dates. Previously, the expiry date of an enterprise digital certificate was measured in years. But in the case of IoT devices, some use cases may demand short-lived certificates, while many other devices may require longer-lived certificates.<\/p>\n

<\/h6>\n

A longer-living certificate is required where a consumer device requires a long-term certificate based authentication. Customers seeking long-living certificates should be aware of the fact that because these certificates require a little change over time, it may be problematic when dealing with PKI\/CA compromises. IoT project leaders must carefully determine the required lifespan of these digital certificates and also recognize the pros and cons.<\/p>\n

PKI hardware interoperability<\/h1>\n

PKI must have the ability to enable direct communication with a hardware security environment such as secure element, or TEE for properly generating cryptographic keys and storing certificates.<\/p>\n

<\/h6>\n

One of the main issues that have affected mobile device environments is that these secure environments have always been inaccessible by the software stack. This has led to a number of developers store cryptographic key information in a software, something that is viewed as being less secure when compared with hardware security.<\/p>\n

Certificate life cycle management<\/h1>\n

As certificates are considered to be critical entities that have life cycles, they are required to be managed. Manual tracking and identification processes of certificates will not be able to scale and thereby, will not suffice the requirements of IoT. Thus PKI should be combined with such certificate management vendors who are focusing their efforts on creating a scalable management platform. This platform should then be able to handle IoT use cases.<\/p>\n

<\/h6>\n

As IoT project leaders are recognizing the need of implementation of IoT hardware security<\/a>, they understand the importance of PKI in their IoT security architecture for enabling device identity, authentication, and enhancement of the overall security.<\/p>\n","protected":false},"excerpt":{"rendered":"

Experts and researchers will point out that that the IoT must be secure in order for its value to be realized. Usually this point is justified by describing a scary…<\/p>\n","protected":false},"author":1,"featured_media":3716,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_links_to":"","_links_to_target":""},"categories":[125],"tags":[279],"class_list":["post-3554","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iot","tag-device-identification-in-iot"],"yoast_head":"\nAuthentication and device identification in IoT security<\/title>\n<meta name=\"description\" content=\"Such incidences of impersonation of valid users highlights the importance of device identification in IoT. device identification in IoT\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Authentication and device identification in IoT security\" \/>\n<meta property=\"og:description\" content=\"Experts and researchers will point out that that the IoT must be secure in order for its value to be realized. Usually this point is justified by\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Artificial Intelligence, ROBOTICS, AUTOMATION\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/allerintech\" \/>\n<meta property=\"article:published_time\" content=\"2017-03-09T18:31:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.allerin.com\/wp-blog\/wp-content\/uploads\/2017\/03\/digital-certificates.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"513\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Naveen Joshi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@joshinav\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Naveen Joshi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/\"},\"author\":{\"name\":\"Naveen Joshi\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#\\\/schema\\\/person\\\/d01e43be365179dae3ff572b2007c64e\"},\"headline\":\"Authentication and device identification in IoT security\",\"datePublished\":\"2017-03-09T18:31:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/\"},\"wordCount\":577,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/03\\\/digital-certificates.jpg\",\"keywords\":[\"device identification in IoT\"],\"articleSection\":[\"IOT\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/\",\"url\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/\",\"name\":\"Authentication and device identification in IoT security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/03\\\/digital-certificates.jpg\",\"datePublished\":\"2017-03-09T18:31:39+00:00\",\"description\":\"Such incidences of impersonation of valid users highlights the importance of device identification in IoT. device identification in IoT\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/03\\\/digital-certificates.jpg\",\"contentUrl\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/03\\\/digital-certificates.jpg\",\"width\":770,\"height\":513},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/authentication-and-device-identification-in-iot-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Authentication and device identification in IoT security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/\",\"name\":\"Artificial Intelligence, ROBOTICS, AUTOMATION\",\"description\":\"Empowering Futures: Innovating with AI and Machine Learning\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#organization\",\"name\":\"Allerin\",\"url\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/06\\\/logo-fire.png\",\"contentUrl\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/wp-content\\\/uploads\\\/2016\\\/06\\\/logo-fire.png\",\"width\":1000,\"height\":1000,\"caption\":\"Allerin\"},\"image\":{\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/allerintech\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/allerintech\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/#\\\/schema\\\/person\\\/d01e43be365179dae3ff572b2007c64e\",\"name\":\"Naveen Joshi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/84481da5c6f8416248744f676c850c7dec534781024b854c7f3d26d2586a9f53?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/84481da5c6f8416248744f676c850c7dec534781024b854c7f3d26d2586a9f53?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/84481da5c6f8416248744f676c850c7dec534781024b854c7f3d26d2586a9f53?s=96&d=mm&r=g\",\"caption\":\"Naveen Joshi\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/joshinav\"],\"url\":\"https:\\\/\\\/www.allerin.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Authentication and device identification in IoT security","description":"Such incidences of impersonation of valid users highlights the importance of device identification in IoT. device identification in IoT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/","og_locale":"en_US","og_type":"article","og_title":"Authentication and device identification in IoT security","og_description":"Experts and researchers will point out that that the IoT must be secure in order for its value to be realized. Usually this point is justified by","og_url":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/","og_site_name":"Artificial Intelligence, ROBOTICS, AUTOMATION","article_publisher":"https:\/\/www.facebook.com\/allerintech","article_published_time":"2017-03-09T18:31:39+00:00","og_image":[{"width":770,"height":513,"url":"https:\/\/www.allerin.com\/wp-blog\/wp-content\/uploads\/2017\/03\/digital-certificates.jpg","type":"image\/jpeg"}],"author":"Naveen Joshi","twitter_card":"summary_large_image","twitter_creator":"@joshinav","twitter_misc":{"Written by":"Naveen Joshi","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#article","isPartOf":{"@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/"},"author":{"name":"Naveen Joshi","@id":"https:\/\/www.allerin.com\/blog\/#\/schema\/person\/d01e43be365179dae3ff572b2007c64e"},"headline":"Authentication and device identification in IoT security","datePublished":"2017-03-09T18:31:39+00:00","mainEntityOfPage":{"@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/"},"wordCount":577,"commentCount":0,"publisher":{"@id":"https:\/\/www.allerin.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.allerin.com\/blog\/wp-content\/uploads\/2017\/03\/digital-certificates.jpg","keywords":["device identification in IoT"],"articleSection":["IOT"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/","url":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/","name":"Authentication and device identification in IoT security","isPartOf":{"@id":"https:\/\/www.allerin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#primaryimage"},"image":{"@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.allerin.com\/blog\/wp-content\/uploads\/2017\/03\/digital-certificates.jpg","datePublished":"2017-03-09T18:31:39+00:00","description":"Such incidences of impersonation of valid users highlights the importance of device identification in IoT. device identification in IoT","breadcrumb":{"@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#primaryimage","url":"https:\/\/www.allerin.com\/blog\/wp-content\/uploads\/2017\/03\/digital-certificates.jpg","contentUrl":"https:\/\/www.allerin.com\/blog\/wp-content\/uploads\/2017\/03\/digital-certificates.jpg","width":770,"height":513},{"@type":"BreadcrumbList","@id":"https:\/\/www.allerin.com\/blog\/authentication-and-device-identification-in-iot-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.allerin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Authentication and device identification in IoT security"}]},{"@type":"WebSite","@id":"https:\/\/www.allerin.com\/blog\/#website","url":"https:\/\/www.allerin.com\/blog\/","name":"Artificial Intelligence, ROBOTICS, AUTOMATION","description":"Empowering Futures: Innovating with AI and Machine Learning","publisher":{"@id":"https:\/\/www.allerin.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.allerin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.allerin.com\/blog\/#organization","name":"Allerin","url":"https:\/\/www.allerin.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.allerin.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.allerin.com\/blog\/wp-content\/uploads\/2016\/06\/logo-fire.png","contentUrl":"https:\/\/www.allerin.com\/blog\/wp-content\/uploads\/2016\/06\/logo-fire.png","width":1000,"height":1000,"caption":"Allerin"},"image":{"@id":"https:\/\/www.allerin.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/allerintech","https:\/\/www.linkedin.com\/company\/allerintech"]},{"@type":"Person","@id":"https:\/\/www.allerin.com\/blog\/#\/schema\/person\/d01e43be365179dae3ff572b2007c64e","name":"Naveen Joshi","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/84481da5c6f8416248744f676c850c7dec534781024b854c7f3d26d2586a9f53?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/84481da5c6f8416248744f676c850c7dec534781024b854c7f3d26d2586a9f53?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/84481da5c6f8416248744f676c850c7dec534781024b854c7f3d26d2586a9f53?s=96&d=mm&r=g","caption":"Naveen Joshi"},"sameAs":["https:\/\/x.com\/joshinav"],"url":"https:\/\/www.allerin.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/posts\/3554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/comments?post=3554"}],"version-history":[{"count":3,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/posts\/3554\/revisions"}],"predecessor-version":[{"id":3717,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/posts\/3554\/revisions\/3717"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/media\/3716"}],"wp:attachment":[{"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/media?parent=3554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/categories?post=3554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.allerin.com\/blog\/wp-json\/wp\/v2\/tags?post=3554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}