The Cryptographic Key Distribution System for IoT Systems in the MQTT Environment

Area of Science:

• Computer Science
• Cybersecurity
• Embedded Systems

Background:

• Internet of Things (IoT) devices generate vast data but possess limited resources, posing security challenges.
• Securing IoT nodes and their data exchange is difficult due to constraints in computing power, memory, energy, and wireless performance.
• Existing security solutions often struggle to adequately protect resource-constrained IoT environments.

Purpose of the Study:

• To design and demonstrate a novel system for symmetric cryptographic Key Generating, Renewing, and Distributing (KGRD) specifically for IoT environments.
• To leverage hardware security modules (TPM 2.0) to enhance cryptographic operations and secure data exchange in IoT networks.
• To provide a robust security framework for federated systems integrating IoT data sources.

Main Methods:

• Development of a Key Generating, Renewing, and Distributing (KGRD) system utilizing the Trusted Platform Module (TPM) 2.0 hardware module.
• Implementation of cryptographic procedures including trust structure creation and key management within the TPM 2.0.
• Integration of the KGRD system with Message Queuing Telemetry Transport (MQTT) for secure data exchange between IoT nodes.

Main Results:

• Successful design and demonstration of a KGRD system enhancing IoT security.
• TPM 2.0 integration provides secure key generation, renewal, and distribution for IoT nodes.
• The system effectively secures data exchange for clusters of sensor nodes and traditional systems in federated environments.

Conclusions:

• The KGRD system offers a viable solution for securing data exchange in resource-constrained IoT networks.
• Utilizing TPM 2.0 significantly improves the security posture of IoT devices and federated systems.
• The proposed system addresses key vulnerabilities in IoT security, enabling more reliable data sharing.