Secure authentication of devices for internet of things
A computer-implemented system and method for secure authentication of IoT devices are disclosed. The method for secure authentication of IoT devices comprises establishing a network connection with a network operator server via a control channel, establishing identity of the network operator server using a pre-shared server key, establishing identity of the IoT device using a pre-shared client key and cryptographically generating a session key for a network session to allow secure data exchange between the network operator server and the IoT device. The cryptographically generated session key is used for securely authenticating application running on the authenticated IoT device.
1. A computer-implemented method for secure authentication of Internet of Things (IoT) device comprises:
establishing a network connection with a network operator server via a control channel;
establishing identity of the network operator server using a pre-shared server key for secure authentication of the network operator server;
establishing identity of the IoT device using a pre-shared client key for secure authentication of the IoT device;
cryptographically generating a pair of network session keys for a network session based on life time identifier to allow secure data exchange between the network operator server and the IoT device, wherein one of the pair of network session keys is for the IoT device and the other is for the network operator server; and
also using the cryptographically generated pair of network session keys for securely authenticating application running on the authenticated IoT device.
2. The method of claim 1 , wherein the pre-shared client key and the pre-shared server key are same.
3. The method of claim 1 , wherein the pre-shared client key and the pre-shared server key are different.
4. The method of claim 1 , wherein the cryptographically generated pair of network session keys are such that one network session key is used by the network operator server and the other network session key is used by the IoT device.
5. A system for secure authentication of Internet of Things (IoT) devices comprises:
a secure element including a processor, wherein the secure element establishes a network connection with a network operator server via a control channel, and wherein the secure element establishes identity of the network operator server using a pre-shared server key for secure authentication of the network operator server, and identity of the IoT device using a pre-shared client key for secure authentication of the IoT device; and
a session key generator including a processor, wherein the session key generator cryptographically generates a pair of network session keys for a network session based on life time identifier to allow data exchange between the network operator server and the IoT device,
wherein one of the pair of network session keys is for the IoT device and the other is for the network operator server, and
wherein the cryptographically generated pair of network session keys are also used for securely authenticating application running on the authenticated IoT device.
6. The system of claim 5 , wherein the pre-shared client key and the pre-shared server key are same.
7. The system of claim 5 , wherein the pre-shared client key and the pre-shared server key are different.
8. The system of claim 5 , wherein the cryptographically generated pair of network session keys are such that one network session key is used by the network operator server and the other network session key is used by the IoT device.
9. A computer program product stored on a non-transitory computer readable medium for secure authentication of Internet of Things (IoT) devices, comprising computer readable instructions for causing a computer to control an execution of an application for secure authentication of IoT devices comprising:
establishing a network connection with a network operator server via a control channel;
establishing identity of the network operator server using a pre-shared server key for secure authentication of the network operator server;
establishing identity of the IoT device using a pre-shared client key for secure authentication of the IoT device;
cryptographically generating a pair of network session keys for a network session based on life time identifier to allow data exchange between the network operator server and the IoT device, wherein one of the pair of network session keys is for the IoT device and the other is for the network operator server; and
also using the cryptographically generated pair of network session keys for securely authenticating application running on the authenticated IoT device.
10. The computer program product of claim 9 , wherein the pre-shared client key and the pre-shared server key are same.
11. The computer program product of claim 9 , wherein the pre-shared client key and the pre-shared server key are different.
12. The computer program product of claim 9 , wherein the cryptographically generated pair of network session keys are such that one network session key is used by the network operator server and the other network session key is used by the IoT device.