Novel Lightweight Signcryption-Based Key Distribution Mechanisms for MIKEY

Multimedia Internet KEYing (MIKEY) is a standard key management protocol, used to set up common secrets between any two parties for multiple scenarios of communications. As MIKEY becomes widely deployed, it becomes worthwhile to not confine its applicatio

  • PDF / 326,250 Bytes
  • 16 Pages / 439.37 x 666.142 pts Page_size
  • 59 Downloads / 183 Views

DOWNLOAD

REPORT


CEA, LIST, Communicating Systems Laboratory, 91191 Gif-sur-yvette Cedex, France {kimthuat.nguyen,nouha.oualha}@cea.fr 2 Institut Mines-Telecom, Telecom SudParis, UMR CNRS 5157 SAMOVAR, 9 Rue Charles Fourier, 91011 Evry, France [email protected]

Abstract. Multimedia Internet KEYing (MIKEY) is a standard key management protocol, used to set up common secrets between any two parties for multiple scenarios of communications. As MIKEY becomes widely deployed, it becomes worthwhile to not confine its applications to real-time or other specific applications, but also to extend the standard to other scenarios as well. For instance, MIKEY can be used to secure key establishment in the Internet of Things. In this particular context, Elliptic Curve Cryptography-based (ECC) algorithms seem to be good candidate to be employed by MIKEY, since they can support equivalent security level when compared with other recommended cryptographic algorithms like RSA, and at the same time requiring smaller key sizes and offering better performance. In this work, we propose novel lightweight ECC-based key distribution extensions for MIKEY that are built upon a previously proposed certificateless signcryption scheme. To our knowledge, these extensions are the first ECC-based MIKEY extensions that employ signcryption schemes. Our proposed extensions benefit from the lightness of the signcryption scheme, while being discharged from the burden of the public key infrastructure (PKI) thanks to its certificateless feature. To demonstrate their performance, we implemented our proposed extensions in the Openmote sensor platform and conducted a thorough performance assessment by measuring the energy consumption and execution time of each operation in the key establishment procedure. The experimental results prove that our new MIKEY extensions are perfectly suited for resource-constrained devices.

1

Introduction

Multimedia Internet KEYing (MIKEY) [5] is a key management protocol which is intended for use with real-time applications. MIKEY provides different methods to establish a session key with multiple parties, in addition to the authentication of parties if required. For example, MIKEY pre-shared key method permits c IFIP International Federation for Information Processing 2016  Published by Springer International Publishing Switzerland 2016. All Rights Reserved S. Foresti and J. Lopez (Eds.): WISTP 2016, LNCS 9895, pp. 19–34, 2016. DOI: 10.1007/978-3-319-45931-8 2

20

K.T. Nguyen et al.

any two parties with a pre-shared secret to set up a secure communication. However, this mechanism suffers from scalability issues since it is unpractical to pre-distribute a common key for any two parties in large networks, e.g. the Internet of Things (IoT). To be scalable, public key encryption-based methods, where any two parties can establish security communications without any a priori shared common keys, have been proposed to be employed by MIKEY. These different key distribution mechanisms can be classified into two categories: (i) a key excha