Towards Automated PKI Trust Transfer for IoT

TL;DR

This paper proposes a lightweight, secure protocol for transferring control of IoT devices between service providers, addressing long-term support and vendor lock-in issues with minimal overhead.

Contribution

It introduces a novel, lightweight protocol for IoT device control transfer that is secure, efficient, and easy to implement, enhancing device manageability.

Findings

The protocol has low overhead for IoT devices.

Security requirements are satisfied by the protocol.

Manual effort for transfer is minimal.

Abstract

IoT deployments grow in numbers and size and questions of long time support and maintainability become increasingly important. To prevent vendor lock-in, standard compliant capabilities to transfer control of IoT devices between service providers must be offered. We propose a lightweight protocol for transfer of control, and we show that the overhead for the involved IoT devices is small and the overall required manual overhead is minimal. We analyse the fulfilment of the security requirements to verify that the stipulated requirements are satisfied.