Bring your own key for the industrial Internet of Things

Abstract

Abstract-High tech strategies such as Industry 4.0 and Smart Manufacturing require industrial devices to be connected to the Internet. This movement towards interconnected industrial devices poses significant security risks as confidential data must be transferred and stored using untrustworthy channels and cloud servers. End-to-end private key cryptography is suitable to protect the confidentiality, integrity, and authenticity of data. However, private key cryptography has some drawbacks such as the so-called key distribution problem. A possible solution, factory installed keys, are untrustworthy as the two partners relying on end-to-end cryptography can not be sure that no other party is in possession of the used keys. To overcome these problems, the Bring Your Own Key (BYOK) principle based on Near Field Communication (NFC) and dedicated secured hardware is presented in this paper.

Enabling Emergent Configurations in the Industrial Internet of Things for Oil and Gas Explorations: A Survey

“…Obtained Results/Conclusions [41] To address the key distribution challenges of end-to-end private key cryptography using BYOK principle based on NFC technology in order to enhance the protection and confidentiality of transmitted data in IIoT environments.…”

“…Industrial internet of things (IIoT) [38] involves the deployment of the concept of IoT and its technologies in industrial systems such as small-scale and automobile manufacturing sector, transportation, medicine, and logistics systems. Adopting the IoT concept in industries and smart factories offer several operational benefits such as test time reduction and calibration, production downtime minimization, warranty cost reduction, improved yield, quality and supply chain efficiency as well as the performance of predictive maintenance [39][40][41]. In this section, a review of IIoT is presented.…”

“…The bring your own key (BYOK) principle based on near field communication (NFC) is proposed in [41] for mitigating the drawbacks of end-to-end private key cryptography and factory installed keys in the IIoT systems. For confidential and relevant production information to be transmitted over the Internet in industrial systems, appropriate cryptography methods [59] such as end-to-end encryption using transport layer security (TLS) needs to be employed.…”

Hardware Secured, Password-based Authentication for Smart Sensors for the Industrial Internet of Things

“…Another requirement that comes from using the same authentication method throughout the entire lifecycle of the sensor, is the possibility of changing cryptographic keys, encryption parameters, usernames and passwords. This can be subsumed with the term Bring Your Own Key / Encryption (BYOK / BYOE) [13]. With the use of such methods it can be assured that the device cannot be read by anyone except the authorized persons.…”

Hardware-Secured Configuration and Two-Layer Attestation Architecture for Smart Sensors

“…However, due to the home automation focus, the security level provided by that approach is considered as insufficient for industrial scenarios. Ulz et al [14] present a key update process for industrial devices based on NFC. However, this approach does not allow arbitrary configuration data to be transferred.…”