Internet of Things with Lightweight Identities Implemented Using DNS DANE-Architecture Proposal

Area of Science:

• Computer Science
• Network Security
• Internet of Things (IoT)

Background:

• Current X.509 certification framework limitations for IoT.
• Need for secure device and owner identification in IoT ecosystems.
• Challenges in providing trust for machine-to-machine (M2M) and man-to-machine (M2M) communication.

Purpose of the Study:

• To propose and demonstrate an alternative certification framework for IoT devices using Domain Name Service (DNS).
• To integrate device owner identification data within DNS-based certificates.
• To ensure the framework is applicable to resource-constrained IoT devices.

Main Methods:

• Leveraging DNS and its certification-related resource records for identity provisioning.
• Storing device owner identification data within DNS-based device certificates.
• Developing a working demonstration software utilizing an external identity provider managed by national authorities.

Main Results:

• Successful development of a proof-of-concept software demonstrating the proposed framework.
• Smart devices are equipped with certificates providing secure identification for both the device and its owner.
• The framework's hardware requirements are suitable for constrained IoT devices.

Conclusions:

• The proposed DNS-based certification framework offers a viable and secure alternative for IoT identity management.
• It enhances mutual trust in M2M and man-to-machine communications.
• The framework facilitates a more secure environment for IoT device sales, leasing, and data exchange, with potential for future extensions.