Evaluating the performance of the OSCORE security protocol in constrained IoT environments

Gunnarsson, Martin; Brorsson, Joakim; Palombini, Francesca; Seitz, Lüdwig; Tiloca, Marco

doi:10.1016/j.iot.2020.100333

Cited by 17 publications

(20 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The security solution allows proxies to perform their functions as forwarding and scheduling CoAP queries connected to servers. OSCORE's effectiveness at protecting and decoding messages is superior to DTLS using HMAC and authenticated encryption associated data AEAD [41]. OSCORE reaches this outcome through a very better execution of the AES encryption [41].…”

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

“…OSCORE is a new universal solution which offers cover-to-cover protection for CoAP transactions on the application layer [41]. OSCORE is a good choice to security in CoAP protocol than DTLS.…”

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

“…OSCORE is a good choice to security in CoAP protocol than DTLS. Where the presence of the DTLS layer requires step-by-step security between both the transfers between the server and the proxy and also the enforcement of protection between the agent and the client [41]. While OSCORE provides secure two-way Contact among the client and the server is secured by using a proxy [41].…”

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

“…Where the presence of the DTLS layer requires step-by-step security between both the transfers between the server and the proxy and also the enforcement of protection between the agent and the client [41]. While OSCORE provides secure two-way Contact among the client and the server is secured by using a proxy [41]. The security solution allows proxies to perform their functions as forwarding and scheduling CoAP queries connected to servers.…”

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

“…OSCORE's effectiveness at protecting and decoding messages is superior to DTLS using HMAC and authenticated encryption associated data AEAD [41]. OSCORE reaches this outcome through a very better execution of the AES encryption [41]. OSCORE consumes greater RAM than CoAP but DTLS consumes greater than OSCORE [41].…”

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

See 4 more Smart Citations

Enhancing Security in Internet of Things Environment by Developing an Authentication Mechanism using COAP Protocol

ALhusayni¹,

Alosaimi²

2021

Computer Science &Amp; Information Technology (CS &Amp; IT)

View full text Add to dashboard Cite

Internet of Things (IoT) has a huge attention recently due to its new emergence, benefits, and contribution to improving the quality of human lives. Securing IoT poses an open area of research, as it is the base of allowing people to use the technology and embrace this development in their daily activities. Authentication is one of the influencing security element of Information Assurance (IA), which includes confidentiality, integrity, and availability, non repudiation, and authentication. Therefore, there is a need to enhance security in the current authentication mechanisms. In this report, some of the authentication mechanisms proposed in recent years have been presented and reviewed. Specifically, the study focuses on enhancement of security in CoAP protocol due to its relevance to the characteristics of IoT devices and its need to enhance its security by using the symmetric key with biometric features in the authentication. This study will help in providing secure authentication technology for IoT data, device, and users.

show abstract

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

Section: Object Security For Constrained Restful Environmentsmentioning

confidence: 99%

See 3 more Smart Citations

Enhancing Security in Internet of Things Environment by Developing an Authentication Mechanism using COAP Protocol

ALhusayni¹,

Alosaimi²

2021

Computer Science &Amp; Information Technology (CS &Amp; IT)

View full text Add to dashboard Cite

show abstract

IoT Network Security in Smart Homes

Lata¹,

Kumar²

2022

Cybersecurity in Smart Homes

View full text Add to dashboard Cite

Using the ACE framework to enforce access and usage control with notifications of revoked access rights

Rasori,

Saracino,

Mori

et al. 2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

The standard ACE framework provides authentication and authorization mechanisms similar to those of the standard OAuth 2.0 framework, but it is intended for use in Internet-of-Things environments. In particular, ACE relies on OAuth 2.0, CoAP, CBOR, and COSE as its core building blocks. In ACE, a non-constrained entity called Authorization Server issues Access Tokens to Clients according to some access control and policy evaluation mechanism. An Access Token is then consumed by a Resource Server, which verifies the Access Token and lets the Client accordingly access a protected resource it hosts. Access Tokens have a validity which is limited over time, but they can also be revoked by the Authorization Server before they expire. In this work, we propose the Usage Control framework as an underlying access control means for the ACE Authorization Server, and we assess its performance in terms of time required to issue and revoke Access Tokens. Moreover, we implement and evaluate a method relying on the Observe extension for CoAP, which allows to notify Clients and Resource Servers about revoked Access Tokens. Through results obtained in a real testbed, we show how this method reduces the duration of illegitimate access to protected resources following the revocation of an Access Token, as well as the time spent by Clients and Resource Servers to learn about their Access Tokens being revoked.

show abstract

Evaluating the performance of the OSCORE security protocol in constrained IoT environments

Cited by 17 publications

References 7 publications

Enhancing Security in Internet of Things Environment by Developing an Authentication Mechanism using COAP Protocol

Enhancing Security in Internet of Things Environment by Developing an Authentication Mechanism using COAP Protocol

IoT Network Security in Smart Homes

Using the ACE framework to enforce access and usage control with notifications of revoked access rights

Contact Info

Product

Resources

About