<p>Lightweight digital certificates play a vital role in securing limited-resourced IoT networks, particularly in smart homes. This paper introduces a novel lightweight digital certificate, MinaCert4IoT, designed explicitly for private IoT networks in smart home environments. Traditional IoT authentication systems, which rely on X.509 certificates for Public Key Infrastructure (PKI), are often inefficient with respect to memory, energy, bandwidth, and computational load. The developed solution departs from the X.509 standard by implementing several vital optimizations, including reducing authentication fields to only the essential ones, replacing ANSI string-based key-value pairs with efficient integer-coded arrays, and minimizing field size allocation. Security is further enhanced by incorporating a blockchain-based architecture, replacing traditional Certificate Authorities (CAs) with a decentralized system based on the lightweight MINA blockchain platform, which offers improved memory efficiency, transparency, and cost-effectiveness compared to Ethereum. The system was successfully implemented and evaluated on a Raspberry Pi, confirming compatibility with IoT environments. Results demonstrate significant reductions in certificate size, network bandwidth requirements, transaction times, and operational costs, making this approach an efficient, tailored authentication strategy for smart home IoT networks.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Securing the private smart home: lightweight digital certificates for resource-constrained IoT networks

  • Apoorv Bedmutha,
  • A. Anjali,
  • Aditya Trivedi

摘要

Lightweight digital certificates play a vital role in securing limited-resourced IoT networks, particularly in smart homes. This paper introduces a novel lightweight digital certificate, MinaCert4IoT, designed explicitly for private IoT networks in smart home environments. Traditional IoT authentication systems, which rely on X.509 certificates for Public Key Infrastructure (PKI), are often inefficient with respect to memory, energy, bandwidth, and computational load. The developed solution departs from the X.509 standard by implementing several vital optimizations, including reducing authentication fields to only the essential ones, replacing ANSI string-based key-value pairs with efficient integer-coded arrays, and minimizing field size allocation. Security is further enhanced by incorporating a blockchain-based architecture, replacing traditional Certificate Authorities (CAs) with a decentralized system based on the lightweight MINA blockchain platform, which offers improved memory efficiency, transparency, and cost-effectiveness compared to Ethereum. The system was successfully implemented and evaluated on a Raspberry Pi, confirming compatibility with IoT environments. Results demonstrate significant reductions in certificate size, network bandwidth requirements, transaction times, and operational costs, making this approach an efficient, tailored authentication strategy for smart home IoT networks.