IoT 디바이스를 위한 MTM 기반의 안전한 OTP 생성기 구현
Implementation of a MTM-based secure OTP Generator for IoT Devices
2
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
In this paper, we present the implementation of a secure OTP(One Time Password) generator for IoT(Internet of Things) devices. Basically, MTM(Mobile Trusted Module) is used and expanded considering secure IoT services. We combine the MTM architecture with a new hardware-based OTP generation engine. The new architecture is more secure, offering not only the security of devices but also that of the OTP service. We have implemented and verified the MTM-based OTP generator on a real mobile platform embedded with the MTM chip. The proposed method can be used as a solution for enhancing security of IoT devices and services.
Abstract
In this paper, we present the implementation of a secure OTP(One Time Password) generator for IoT(Internet of Things) devices. Basically, MTM(Mobile Trusted Module) is used and expanded considering secure IoT services. We combine the MTM architecture with a new hardware-based OTP generation engine. The new architecture is more secure, offering not only the security of devices but also that of the OTP service. We have implemented and verified the MTM-based OTP generator on a real mobile platform embedded with the MTM chip. The proposed method can be used as a solution for enhancing security of IoT devices and services.
참고문헌 (19)
- ITU, "Internet Reports", The Internet of Things, ~ (2005)
- ITU-T, "Overview of Internet of Things", Recommendation Y.2060, ~ (2012)
- P. Middleton, "Forecast:The Internet of Things, Worldwide" (2013), Gartner
- "IEEE Survey: Connected Devices and the Internet of Things"[URL]
- Economist Intelligence Unit, "The Internet of Things Business Index: A quiet revolution gathers pace" (2013)
- J. Guaus, "Best Practice for Mobile Financial Services: Enrolment Business Model Analysis" (2008), Mobey Forum Mobile Financial Services Ltd.
- H. Chai, "TEEI-A Mobile Security Infrastructure for TEE Integration", Proceedings of IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications, pp.914~920 (2014)
- M. Kim, "Design and implementation of mobile trusted module for trusted mobile computing", IEEE Transactions on Consumer Electronics, 56(8), pp.134~140 (2010)
- Trusted Computing Group, "TCG Mobile Reference Architecture Specification version 1.0, Revision 1", ~ (2007)
- Trusted Computing Group, "TCG Mobile Trusted Module Specification version 1.0, Revision 7.02", ~ (2010)
- N. Haller, "A One-Time Password system", IETF RFC 2289, ~ (1998)
- ITU-T, "Management framework of a one time password-based authentication service", X.1153, ~ (2011)
- R. H. Weber, "Internet of things-new security and privacy challenges", Computer Law & Security Review, 26, pp.23~30 (2010)
- D. Gessner, "Trustworthy Infrastructure Services for a Secure and Privacy-respecting Internet of Things", Proceedings of IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications, pp.998~1003 (2012)
- S. Keoh, "Securing the internet of things : A standardization perspective", IEEE Internet of Things Journal, 1(3), pp.265~275 (2014)
- ARM, "Building a Secure System using TrustZone Technology" (2009), ARM Security Technology
- KFTC, "Standard for financial microSD v1.1", ~ (2013)