Method and apparatus for generation of a time-based one-time password for session encryption of sensor data gathered in low-performance and IoT environments
A system for a time-based one-time password security system operating at a provisioning server may comprise transmitting one or more first locally generated random-string numbers for generation of a first time-based one-time password to a remotely connected internet of things sensor and a remotely connected internet of things sensor hub. The system may also comprise executing code instructions to associate the internet of things sensor with a first client key in a table stored in a memory operatively connected to the processor, associate the internet of things sensor hub with a second client key in the table, and associate the internet of things sensor and internet of things sensor hub with the one or more first locally generated random-string numbers in the table. Further the first remotely generated random-string numbers may identify a first preset function for generation of a first session key used in encrypting and decrypting sensor data records.
1. An information handling system of an internet of things device comprising:
a processor for operation of a sensor system;
a network interface adapter configured to:
receive one or more first remotely generated random-string numbers from a provisioning server via an access point, wherein the first remotely generated random-string numbers are also transmitted to an internet of things device hub; and
the processor executing code instructions to:
generate a limited, one-time use password using the received one or more first remotely generated random-string numbers by a one-time password algorithm;
generate a first session key by mapping the limited, one-time use password to data of a fixed size according to a first preset function; and
establish a secure wireless link in a session for transmission of a first encrypted sensor data record to the internet of things device hub.
2. The information handling system of claim 1 further comprising:
the network interface to receive a second remotely generated random-string numbers for generation of a second time limited, one-time use password, wherein the second remotely generated random-string numbers are also transmitted to an internet of things device hub; and
the processor executing code instructions to:
generate the second time limited, one-time use password using the received one or more second remotely generated random-string numbers to generate a second session key by mapping the second time limited, one-time use password to data of a fixed size according to a second preset function; and
establish a secure wireless link in a session for transmission of a first encrypted sensor data record to the internet of things device hub.
3. The information handling system of claim 1 , wherein one of the received first remotely generated random-string numbers identifies the first preset function.
4. The information handling system of claim 2 , wherein the first preset function does not match the second preset function, and wherein one of the received second remotely generated random-string numbers identifies the second preset function.
5. The information handling system of claim 1 further comprising:
the processor generate the first encrypted sensor data record from sensor data gathered by the internet of things device for transmission to the internet of things sensor hub by encrypting the sensor data record using the first session key.
6. The information handling system of claim 1 , wherein the network interface adapter receives the one or more first remotely generated random-string numbers using an asymmetric key pair cryptography method.
7. The information handling system of claim 1 , wherein the one or more first remotely generated random-string numbers includes a client key identifying the internet of things sensor.
8. An information handling system of an internet of things sensor hub comprising:
a network interface adapter to:
receive one or more first remotely generated random-string numbers, wherein the first remotely generated random-string numbers are also transmitted to an internet of things sensor in communication with the internet of things sensor hub; and
a processor executing code instructions to:
generate one-time use password generated by a one-time password algorithm using the received one or more first remotely generated random-string numbers;
generate a first session key by mapping the first time limited, one-time use password to data of a fixed size according to a preset function and establish a secure wireless link in a session to receive a first encrypted sensor data record from the internet of things sensor;
decrypt the encrypted first sensor data record using the first session key.
9. The information handling system of claim 8 further comprising:
the network interface adapter to:
transmit an error message to a remotely connected provisioning server if the generated first session key does not successfully decrypt the encrypted first sensor data record;
receive one or more second remotely generated random-string numbers;
re-receive the re-encrypted first sensor data record from the internet of things sensor;
the processor executing code instructions to:
generate the second one-time use password using the received one or more second remotely generated random-string numbers;
generate a second session key by mapping the second time limited, one-time use password to data of a fixed size according to the preset function; and
decrypt the re-encrypted first sensor data record using the second session key.
10. The information handling system of claim 8 , wherein one of the received first remotely generated random-string numbers identifies the first preset function.
11. The information handling system of claim 8 , wherein the one or more first remotely generated random-string numbers includes a client key identifying the internet of things sensor hub.
12. The information handling system of claim 8 further comprising:
the processor executing code instructions to evaluate the decrypted first sensor data record if the decryption is successful.
13. The information handling system of claim 9 further comprising:
the processor executing code instructions to evaluate the decrypted first sensor data record if the decryption of the re-received, re-encrypted first sensor data record is successful.
14. The information handling system of claim 8 , wherein the one or more of the received first remotely generated random-string numbers used to generate the one-time use password is a time-limited, one-time use password.
15. The information handling system of claim 8 , wherein the network interface adapter receives the one or more first remotely generated random-string numbers using an asymmetric key pair cryptography method.
16. An information handling system of an encryption key seed provisioning server comprising:
a network interface adapter executing code instructions to:
transmit one or more first locally generated random-string numbers for generation of a first one-time password to a remotely connected internet of things sensor and to a remotely connected internet of things sensor hub;
a processor executing code instructions to:
associate the internet of things sensor with a first client key in a table stored in a memory operatively connected to the processor;
associate the internet of things sensor hub with a second client key in the table; and
associate the internet of things sensor and internet of things sensor hub with the one or more first locally generated random-string numbers in the table.
17. The information handling system of claim 16 further comprising:
the processor executing code instructions to:
upon receipt of an error message, increment an error message counter variable by a value of one and determine if the error message counter variable exceeds a security threshold value; and
re-associate the internet of things sensor and internet of things sensor hub with one or more second locally generated random-string numbers for generation of a second one-time password.
18. The information handling system of claim 16 , wherein the network interface adapter transmits the one or more first remotely generated random-string numbers using an asymmetric key pair cryptography method.
19. The information handling system of claim 16 , wherein the one or more first remotely generated random-string numbers includes the first client key and the second client key.
20. The information handling system of claim 16 , wherein one of the transmitted first remotely generated random-string numbers identifies a first preset function for mapping of the first time limited, one-time use password to data of a fixed size to generate a first session key used in encrypting and decrypting sensor data records by the internet of things sensor and internet of things sensor hub.