A Secure Platform Model Based on ARM Platform Security Architecture for IoT Devices
| Autor: | Jun-Young Jung, BeomSeok Kim, Ben Lee, Jinsung Cho |
|---|---|
| Rok vydání: | 2022 |
| Předmět: |
Platform model
Computer Networks and Communications business.industry Computer science Enterprise information security architecture Computer Science Applications General purpose Hardware and Architecture Embedded system Application security Signal Processing Isolation (database systems) Reference device Internet of Things business Implementation Information Systems |
| Zdroj: | IEEE Internet of Things Journal. 9:5548-5560 |
| ISSN: | 2372-2541 |
| DOI: | 10.1109/jiot.2021.3109299 |
| Popis: | The proliferation of IoT devices comes with many challenges among which security is one of the most serious issues. In order to address the security issue for low-end IoT devices, ARM recently proposed the Platform Security Architecture (PSA), which provides execution isolation to safely manage and protect the computing resources of low-end IoT devices. However, developers implementing IoT services for PSA-based IoT devices need to follow complex development procedures and understand the PSA hardware, which dramatically increases the development time and cost of PSA-based IoT devices. This paper analyzes vulnerabilities that may arise from general purpose low-end IoT devices to derive the security requirements and essential security services for PSA-based IoT devices, and proposes a secure platform model based on the analysis results. The proposed secure platform model consists of system security services and application security services based on the basic PSA model and essential trusted sub-systems, and it is designed to be flexible and applicable to various types of PSA-based IoT devices. In addition, it provides secure platform services APIs to enable easy and fast development of IoT services. To evaluate the proposed secure platform model, two proof-of-concept implementations are provided by using both the basic PSA model with Secure Element (SE) and a reference device for ARM’s PSA. Finally, a case study shows that the development of IoT services can be done easily and quickly using the proposed security platform model. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|