IoT P2P Security via Pre-Distributed Group Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IoT environments, existing methods for providing P2P data security are inefficient due to the need for devices to connect to an authentication server during communication, which can be impractical for devices not connected to the Internet and results in security vulnerabilities.
Innovation Solution
A method and apparatus for providing P2P data security in IoT environments that involve authenticating devices using authentication certificates or unique keys, assigning group IDs and group keys for secure communication, and enabling devices to establish secure channels without constant access to an authentication server, using end-to-end session key exchanges and tokens for secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices connect to an authentication server during P2P communication, then security can be maintained through centralized authentication, but communication efficiency deteriorates due to constant server access requirements and devices cannot communicate when offline
Solution Approach 1:
The authentication server performs authentication in advance and distributes session keys to devices before actual P2P communication occurs. This preliminary authentication enables devices to communicate directly without needing to contact the server during communication, resolving the contradiction between centralized security and communication efficiency
Solution Approach 2:
The authentication server acts as an intermediary that facilitates initial authentication and key distribution, then exits the communication process. The server mediates the establishment of secure channels but does not need to be continuously involved, allowing efficient direct P2P communication while maintaining security through pre-established credentials
2Adaptability or versatility
If devices require constant access to authentication server for security, then centralized control and security management are improved, but device autonomy deteriorates as devices cannot communicate independently when offline
Solution Approach 1:
Authentication credentials and session keys are distributed in advance during initial setup or connection phases. This preliminary configuration enables devices to autonomously perform authentication and establish secure P2P connections without requiring real-time server access, thereby improving device autonomy while maintaining centralized security policies
Solution Approach 2:
Devices use previously obtained session keys and authentication credentials to independently verify each other and establish secure communication channels. This self-service capability allows devices to operate autonomously offline while the centralized server maintains overall security management through the initial credential distribution
Data Source
Figure 1~2
Figure 3~5
Figure 6~7
AI summary
Disclosed are a method and an apparatus for providing a P2P data security service in an IoT environment. The method for providing a P2P data security service in an IoT environment according to the present invention is a method for providing a P2P data security service between devices in an IoT platform connected to multiple devices through a network, and comprises the steps of: authenticating a first device, using a certificate and a unique key of the first device; when the authenticating of the first device is completed, establishing a security channel through an exchange of end-to-end (E2E) session keys and assigning a group ID and a group key to the first device; and assigning the group ID and the group key to a second device requested by the first device.