Faculty of Computing and Information Technology, King Abdulaziz University, Rabigh, Jeddah 25729, Saudi Arabia.
Sensors (Basel). 2021 Apr 16;21(8):2810. doi: 10.3390/s21082810.
The certificate authority, a trusted entity, issues digital certificates which contain identity credentials to help Industrial Internet of Things (IIoT) devices to represent their authenticity in a secure means. The crucial challenge of a digital certificate is to how design a secure certification authority management system that can counteract cyberattacks on the IIoT network. Moreover, current IIoT systems are not capable of implementing complex mathematical operations due to their constrained power capacity and processing capability. This paper proposes an effective, secure symmetric cryptographic mechanism (ESSC) based on the certificate authority management and Elliptic Curve Diffie Hellman (ECDH) to share a digital certificate among IIoT devices. The proposed certificate authority is used to securely exchange the shared secret key and to resolve the problem of spoofing attacks that may be used to impersonate the identity of the certificate authority. Also, ESSC uses the shared secret key to encrypt the sensitive data during transmission through the insecure communication channel. This research studies the adversary model for ESSC on IIoT and analyzes the cybersecurity of ESSC in the random oracle model. The findings that result from the experiments show that ESSC outperforms the baseline in terms of communication, computation, and storage costs. ESSC thus provides an adequate lightweight digital certificate management and cryptographic scheme which can help in the detection and prevention of several cyberattacks that can harm IIoT networks.
证书颁发机构是受信任的实体，它颁发数字证书，其中包含身份凭据，以帮助工业物联网 (IIoT) 设备以安全的方式表示其真实性。数字证书的关键挑战是如何设计安全的证书颁发机构管理系统，以抵御针对 IIoT 网络的网络攻击。此外，由于其有限的功率容量和处理能力，当前的 IIoT 系统无法执行复杂的数学运算。本文提出了一种基于证书颁发机构管理和椭圆曲线 Diffie-Hellman (ECDH) 的有效、安全的对称加密机制 (ESSC)，用于在 IIoT 设备之间共享数字证书。所提出的证书颁发机构用于安全地交换共享密钥，并解决可能用于模拟证书颁发机构身份的欺骗攻击问题。此外，ESSC 使用共享密钥在通过不安全的通信信道传输期间对敏感数据进行加密。本研究研究了 IIoT 上 ESSC 的对手模型，并在随机 oracle 模型中分析了 ESSC 的网络安全。实验结果表明，ESSC 在通信、计算和存储成本方面优于基线。因此，ESSC 提供了一种足够轻量级的数字证书管理和加密方案，有助于检测和预防可能对 IIoT 网络造成损害的多种网络攻击。
