Patterns of Authentication and Self-Announcement in IoT
summary
Claims a reusable feature space that classifies real authentication patterns (password/PAP, CHAP, WPA2 four‑way, Diffie‑Hellman then sign, and PAKE/SKKE) and maps them to concrete IoT stacks such as NEST/thread, ZigBee, NFC/RFID and XMPP/SASL. Presents a government‑funded analysis, cites Gartner’s 13.5 billion 2020 estimate, shows which patterns give forward secrecy, which require asymmetric ops, and which are viable on low‑power tags. No new product is delivered — pattern catalog and protocol mappings are demonstrated, not deployed at scale.
AI-written summary · about
chapters (34)
- 0:00Intro
- 0:45Background
- 3:19Research Background
- 4:53Agenda
- 6:49What are patterns
- 7:25Why patterns
- 8:06Features
- 11:01Feature Space
- 12:01Questions
- 13:43Centralized Authentication
- 14:26Federated Authentication
- 15:13Password Authentication
- 16:38Encrypted Password Authentication
- 17:34TwoWay Handshake
- 17:56PeterV Protocol
- 18:16Challenged Handshake
- 21:56Secure channel
- 25:18DiffieHellman
- 28:26DHE
- 29:03IAB
- 29:41Pake
- 31:52SAS
- 32:37PublishSubscribe Architecture
- 34:33Isolated
- 35:11Centralized Identity Management
- 36:03Single Authenticator
- 36:42Protocols
- 38:37Thread Protocol
- 38:59Commissioner
- 40:08RFID
- 42:45Passive RFID
- 43:10Conclusion
- 44:36What we learned
- 45:47Question
related talks
30mInsecurity protocols: an overview of modern authentication
20mThe End of User Authentication & the Coming Auto Authentication by the Server
32mStop Counting Factors... Start Describing Authentication Events
21mSecuring IoT's Trust Boundaries: Navigating Complexity with NCSC Patterns
44mIndustrial IoT Security: Best Practice for Authentication
35mIoT Cornerstones of Security
11mSecuring IoT Integrations with Third-Party Services
36mSecuring the Internet of Things (IoT) in a Decentralized World