当前位置: X-MOL 学术Comput. J. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Context-Aware Authentication with Dynamic Credentials using Electricity Consumption Data
The Computer Journal ( IF 1.4 ) Pub Date : 2021-06-18 , DOI: 10.1093/comjnl/bxab094
Elif Ustundag Soykan 1 , Leyli KaraÇay 1 , Zeki Bilgin 2 , Emrah Tomur 1 , Mehmet Akif Ersoy 1 , Ferhat KarakoÇ 1 , Pinar Çomak 1
Affiliation  

Industrial IoT (IIoT) era is evolving rapidly in parallel to the progress in Industry 4.0, which leads factories to increase the engagement with external parties through different communication infrastructures. This brings a larger attack surface and requires the development of new security solutions suitable for IIoT systems. Authentication is a key enabler to prevent the attacks that come from the interactions with the outside world components. Though there are proposed authentication schemes for IoT or machine-to-machine (M2M) applications, they cannot be readily applied for IIoT since manufacturing machines have different features and requirements than generic IT and IoT devices. In this paper, context information is proposed to be used for enhancing the authentication process in the IIoT, where instantaneous electricity consumption measured by smart meters is the main context information used as a dynamic authentication credential. Besides, in our method, existing smart meter infrastructure is utilized for both exchanging credentials over an industrial network and verification of the credentials by trusted components like Supervisory Control and Data Acquisition (SCADA) or Energy Management System (EMS). The proposed method also allows the use of other context information as authentication credentials such as temperature and humidity collected by sensors in the manufacturing environment.

中文翻译:

使用电力消耗数据的动态凭证的上下文感知身份验证

工业物联网 (IIoT) 时代与工业 4.0 的进步同步快速发展,这导致工厂通过不同的通信基础设施增加与外部各方的接触。这带来了更大的攻击面,需要开发适用于 IIoT 系统的新安全解决方案。身份验证是防止来自与外部世界组件交互的攻击的关键促成因素。尽管提出了针对物联网或机器对机器 (M2M) 应用程序的身份验证方案,但由于制造机器与通用 IT 和物联网设备具有不同的特性和要求,因此它们不能轻易应用于 IIoT。在本文中,建议使用上下文信息来增强 IIoT 中的身份验证过程,其中智能电表测量的瞬时用电量是用作动态认证凭证的主要上下文信息。此外,在我们的方法中,现有的智能电表基础设施既可用于通过工业网络交换凭证,也可通过监控和数据采集 (SCADA) 或能源管理系统 (EMS) 等可信组件验证凭证。所提出的方法还允许使用其他上下文信息作为认证凭证,例如制造环境中传感器收集的温度和湿度。现有的智能电表基础设施既可用于通过工业网络交换凭证,也可通过监控和数据采集 (SCADA) 或能源管理系统 (EMS) 等可信组件验证凭证。所提出的方法还允许使用其他上下文信息作为认证凭证,例如制造环境中传感器收集的温度和湿度。现有的智能电表基础设施既可用于通过工业网络交换凭证,也可通过监控和数据采集 (SCADA) 或能源管理系统 (EMS) 等可信组件验证凭证。所提出的方法还允许使用其他上下文信息作为认证凭证,例如制造环境中传感器收集的温度和湿度。
更新日期:2021-06-18
down
wechat
bug