Procedures for sensor nodes operation in the secured domain

Abstract

Summary Currently, the networks of mobile sensor nodes, which are IoT components, are increasingly a source of data for building situational awareness. Such networks can be a source of data for critical infrastructure systems if, in addition to the timeliness (freshness) of the data, it will also be possible to ensure the reliability of these data. Such requirements are met by a secure domain of sensor nodes, in which all sensor nodes are authenticated, sensitive data is stored in protected resources of sensor nodes, and data exchange in the domain and outside the domain is cryptographically protected. This paper presents the concept of a safe domain of sensor nodes for IoT and describes the data structures necessary to ensure security in the domain and the way of protecting the resources of each node. Particular attention was paid to the procedure of preparing a sensor node for work in a secured domain of sensor nodes.

Cryptographic Keys Generating and Renewing System for IoT Network Nodes—A Concept

“…The clients of the KGR system will be mobile sensor node networks. Each sensor node network forms one secure sensor node domain [ 7 , 8 ] in which data exchange is cryptographically secured. Security mechanisms implemented in this domain also ensure the generation and distribution of cryptographic keys inside the domain and cryptographic protection of the resources of each node.…”

“…I predict that in the first stage of testing, the correctness of the solutions presented in the concept will be verified, and in the second stage, penetration tests for the system and testing of system resistance to various attacks will be performed. Further research stages will include the use of the KGR system for the secure exchange of data between secure domains of sensor nodes [ 7 , 8 ] and the extension of N-node preparation procedures for the case of hardware TPM v2.0, which implements all the features defined in the specification [ 25 ].…”

“…Looking at the development of the network, it can be seen that, despite the availability and proven universal solutions for data exchange in the network and for data protection, various organizations create clusters of network nodes in which specialized security rules adapted to the organization’s requirements apply [ 7 , 8 ]. This approach is designed to protect data exchanged within the organization against unauthorized activities from outside the organization.…”

“…In such a federation, individual groups of network nodes may belong to different national armed forces, within which cryptographic security is inherently used, but not shared with other members of the federation. The main contributions of this paper are presented as follows: Description of the concept of the KGR system intended for the safe distribution and renewal of cryptographic keys for sensor nodes, which are representatives of sensor node clusters formulating the security domain of sensor nodes [ 7 , 8 ]. These keys are designed to protect secure data exchange between domains.…”

“…Description of the concept of the KGR system intended for the safe distribution and renewal of cryptographic keys for sensor nodes, which are representatives of sensor node clusters formulating the security domain of sensor nodes [ 7 , 8 ]. These keys are designed to protect secure data exchange between domains.…”