Full metadata record
| DC Field | Value | Language |
|---|---|---|
| dc.contributor.author | Lorenz, David | - |
| dc.contributor.author | Künzli, Simon | - |
| dc.contributor.author | Schläpfer, Tobias | - |
| dc.date.accessioned | 2024-07-12T08:51:45Z | - |
| dc.date.available | 2024-07-12T08:51:45Z | - |
| dc.date.issued | 2023-06 | - |
| dc.identifier.uri | https://digitalcollection.zhaw.ch/handle/11475/31076 | - |
| dc.description.abstract | In this talk, we will present a security solution novel to the field of IoT devices. Today's security solutions for IoT, IIoT, and OT applications usually remain static in an ever-changing environment, making applications insecure and vulnerable to ever-growing cyber threats. These static solutions often rely on long-living device certificates, making credential life-cycle management cumbersome. Certificate-based approaches do not provide means of authorization and are not built for the scale of IoT applications. Overall, they weaken the security of not only the IoT devices but also the corporate infrastructure they connect to. Therefore, a more dynamic approach to the security of IoT applications is required. IoThentix, our industrial partner in the project we will present in this talk, proposes an alternative token-based authentication and authorization solution for IoT devices that simplifies the device management process from the provisioning all the way to the end-of-life of a device. The solution tailors the well-established security standard used in the banking industry, OAuth 2.0, to the requirements of IoT applications and makes device certificates obsolete. At the Zurich University of Applied Sciences (ZHAW), we created a reference design on small IoT sensor nodes in collaboration with IoThentix, showcasing the implementation and advantages of the token-based solution for IoT applications. This presentation introduces the concept of an OAuth 2.0 token-based authentication and authorization solution for IoT applications and provides a detailed insight into the reference design resulting from the collaboration. Furthermore, we will discuss the advantages of the new token-based approach compared to traditional certificate-based solutions regarding device management and security. Our presentation closes with appropriate conclusions and raises open questions to tackle in future. | de_CH |
| dc.language.iso | en | de_CH |
| dc.rights | Licence according to publishing contract | de_CH |
| dc.subject.ddc | 004: Informatik | de_CH |
| dc.title | Novel approach to IoT security | de_CH |
| dc.type | Konferenz: Sonstiges | de_CH |
| dcterms.type | Text | de_CH |
| zhaw.departement | School of Engineering | de_CH |
| zhaw.organisationalunit | Institute of Embedded Systems (InES) | de_CH |
| zhaw.conference.details | Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023 | de_CH |
| zhaw.funding.eu | No | de_CH |
| zhaw.originated.zhaw | Yes | de_CH |
| zhaw.publication.status | publishedVersion | de_CH |
| zhaw.publication.review | Peer review (Abstract) | de_CH |
| zhaw.author.additional | No | de_CH |
| zhaw.display.portrait | Yes | de_CH |
| Appears in collections: | Publikationen School of Engineering | |
Files in This Item:
There are no files associated with this item.
Show simple item record
Lorenz, D., Künzli, S., & Schläpfer, T. (2023, June). Novel approach to IoT security. Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023.
Lorenz, D., Künzli, S. and Schläpfer, T. (2023) ‘Novel approach to IoT security’, in Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023.
D. Lorenz, S. Künzli, and T. Schläpfer, “Novel approach to IoT security,” in Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023, Jun. 2023.
LORENZ, David, Simon KÜNZLI und Tobias SCHLÄPFER, 2023. Novel approach to IoT security. In: Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023. Conference presentation. Juni 2023
Lorenz, David, Simon Künzli, and Tobias Schläpfer. 2023. “Novel Approach to IoT Security.” Conference presentation. In Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023.
Lorenz, David, et al. “Novel Approach to IoT Security.” Embedded Computing Conference (ECC), Winterthur, Switzerland, 6 June 2023, 2023.
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.